Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier: ZyYJSaihDAQZADxn6+c6ZWiGfRXOApKdUG+1eE//a3c=
Subject key identifier: 36:94:8A:2E:EB:91:21:39:3A:49:5F:D4:7B:35:D6:DB:C5:10:84:02
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer: /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial: 019D3909F290825D5430567DAE5212A66C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number: 0BD4
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: 7PjCXh1j++2Ti45VCozCtkQ11Y66Dr5AWE43aPG/2Xc=)
2: u2DoRyUakqrjwSyZA3BmkWIxCdY.roa (hash: ysQW56gBC1VncDg2ReMXXp9OOHCKYs21ZfB3qLDw5IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f2:90:82:5d:54:30:56:7d:ae:52:12:a6:6c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=36948a2eeb9121393a495fd47b35d6dbc5108402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:6c:df:29:3c:71:19:c4:ce:22:79:d5:d5:
68:90:21:74:2b:98:7c:ff:8f:04:62:ed:64:7b:e2:
1d:e6:4d:4a:1a:cf:59:f3:3f:3e:f6:51:77:bc:38:
b0:1f:79:7a:0d:c7:7a:e4:f7:f0:eb:82:5a:16:42:
28:95:06:95:3d:c0:ee:07:c5:c1:81:51:7f:32:c6:
2f:61:c7:a6:9d:cc:a2:79:54:52:d6:e1:33:92:07:
3f:8b:05:cc:36:b7:84:b2:6f:12:e1:71:ae:cb:ef:
2c:6c:99:30:1a:d5:bb:45:8e:bb:10:48:6b:dc:25:
01:4f:ed:c7:63:a1:a0:29:c8:38:ae:eb:cf:14:26:
96:49:5a:32:9f:8e:e8:b7:01:cb:16:42:71:94:f6:
3c:13:d0:66:dd:97:61:a8:a8:a0:1a:3d:ee:d1:7f:
9e:a3:be:08:fa:ec:d1:4d:51:3a:25:62:8c:3e:7b:
4c:38:08:6a:a9:2d:25:1c:a0:45:cb:14:f2:e9:16:
e8:d3:94:1d:dc:3c:31:68:a1:53:95:29:b0:8a:f1:
4f:ee:c1:c5:6b:24:0c:27:5f:2c:7c:ad:35:eb:07:
06:a4:0e:95:cd:ca:ae:dc:12:ed:7d:cc:b7:86:f6:
84:bc:7a:fa:ad:28:1e:5c:21:91:3b:ec:b9:a4:89:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:8A:2E:EB:91:21:39:3A:49:5F:D4:7B:35:D6:DB:C5:10:84:02
X509v3 Authority Key Identifier:
keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:3c:03:7c:ad:36:4e:25:d0:99:e1:cc:61:14:52:58:98:d4:
89:74:b9:d8:72:e4:7e:10:dd:28:d4:59:0c:72:8b:36:60:94:
cd:8f:11:18:63:e7:12:8b:2e:74:75:29:97:09:1c:1f:4e:e8:
cf:1b:7e:3f:df:d1:cc:e8:f6:90:93:1d:4e:ed:5f:a2:f5:35:
00:68:95:42:5f:de:d1:a8:86:6d:ae:d1:e1:59:c7:c1:1c:bc:
b3:f5:48:4c:3d:b7:c4:17:2b:3f:78:55:b7:a0:9b:17:83:5d:
e9:8f:e3:fa:88:5b:54:5a:8d:dc:13:86:dc:7a:44:00:cd:fc:
97:03:64:75:39:5c:3d:e1:63:d4:1c:34:e8:9f:7d:ea:a7:1b:
37:08:02:a7:75:11:c3:e2:9a:73:70:9e:1a:0c:88:ee:d4:d0:
1b:7e:cf:a2:ca:ad:c0:f1:34:cf:ba:43:d7:f1:c7:57:26:9d:
00:f2:b6:ee:a9:40:41:bd:b4:98:c2:4f:25:ad:1b:3b:04:2b:
32:a9:1f:78:53:c4:4d:70:20:e4:4d:92:15:a1:fb:2c:83:49:
e0:ed:16:2c:45:f6:42:1f:d8:22:0b:3e:9c:a6:e1:c1:30:b4:
22:ee:0c:02:ef:e9:f1:b2:d1:80:6c:09:0c:2c:a5:01:5f:93:
81:da:aa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:19 2026 by rpki-client