Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: 0vOhqgWkHy3IinGpmeH2D5QHcKm8QCQN9oXErAi9XzE=
Subject key identifier: 0D:58:72:AC:3F:73:7F:92:66:A3:D3:3D:B3:7C:2D:E3:66:76:DA:30
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 019D38D381EB20D337D83AEC7AC2BDBDD5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 16FD
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: J01Fpct5Y6DBY-ay2CI2Onxw7ls.roa (hash: U4PkhqJ+Vho+VmAjuCONJYVLeK5uvQZ0u+ij3ZflsHA=)
2: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: Wi8+RbEwEjWtl8ot8L5jkCdRDDNOpHMVLWmFXetmxIY=)
3: hUmeN4RZKbsYYc_l4uCSd2PDCfo.roa (hash: Tk0pGzYSdyHfAZRkeQDxs+AKgZCXk7MNPWm4TXjCtDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:81:eb:20:d3:37:d8:3a:ec:7a:c2:bd:bd:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=0d5872ac3f737f9266a3d33db37c2de36676da30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:57:8d:41:c2:ec:2f:c3:6a:b3:99:06:90:
d2:06:9b:cf:d6:59:95:18:41:8c:ca:5e:ee:4d:83:
6b:0e:76:7f:c3:22:f9:36:6a:7b:7c:dd:3f:44:ff:
dd:1f:b5:6f:e1:a9:53:47:14:00:79:cb:2a:b7:0e:
7c:e2:d4:4a:a0:9b:25:bf:89:c9:f0:1b:ad:fb:32:
7d:a3:32:53:e9:f1:72:aa:56:8f:ea:5f:8f:ae:66:
a3:86:d1:ec:89:cc:c4:67:02:1a:a5:0f:64:9e:a1:
41:da:05:c6:ad:8f:2c:40:e1:fb:42:73:bb:e3:3c:
cd:1d:45:27:40:fc:1d:e2:98:9b:6a:cf:d5:48:08:
62:79:ab:bb:a8:b7:37:79:ee:8e:00:f7:35:f8:5d:
e6:b0:40:1c:92:4d:d5:f6:a7:ac:a2:69:a1:b5:48:
1c:19:ad:b5:19:3e:16:a7:be:84:fb:5c:b1:a6:89:
44:4f:3e:07:8c:f4:bd:f3:34:bc:a1:6a:11:6d:8f:
fa:c6:c6:31:d2:d4:b0:2e:93:e1:43:08:f7:eb:14:
e8:d8:76:3b:f5:40:83:bb:ea:9a:ad:01:ee:dd:dd:
9b:12:e2:b3:7e:8f:8f:03:7d:74:6e:48:92:12:47:
9d:3c:1b:8e:6c:50:fa:db:3e:82:11:51:99:48:71:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:72:AC:3F:73:7F:92:66:A3:D3:3D:B3:7C:2D:E3:66:76:DA:30
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f4:e9:1b:0f:e0:a0:c7:7e:af:e4:56:04:89:e9:5d:d1:c7:
80:67:c6:25:89:a4:61:ff:e3:bc:7f:86:17:c8:5e:95:2b:a6:
da:44:2d:e6:58:dd:24:f3:eb:14:3e:e5:de:9d:ea:d1:89:b5:
2b:bf:c6:d3:50:7e:0a:97:98:72:c4:74:2b:dc:8a:26:c7:8a:
79:82:f0:64:d6:b7:45:2c:fb:68:d4:7c:6f:82:ae:d2:29:dc:
21:10:4b:f4:5f:da:2c:eb:e5:42:23:11:53:bb:06:31:00:65:
86:f8:37:4a:75:c1:e7:9c:fa:27:4c:b7:05:ae:b7:46:0f:c6:
2e:af:f8:b8:97:3a:af:76:ff:82:52:7d:f6:47:35:c1:0a:a6:
02:3e:fc:e1:e4:d0:70:67:73:c2:08:9c:4e:21:01:ac:44:ff:
61:59:57:a7:b6:be:03:28:d7:e0:84:4e:a9:82:0e:74:38:3d:
81:24:28:68:22:33:60:ee:37:79:83:4c:41:21:e6:c8:9b:bf:
8b:46:1d:b7:24:bb:9b:e4:be:3e:42:55:d3:65:e3:d0:6a:10:
88:23:9a:2c:8e:e9:5e:d3:f0:a2:b5:bb:de:a4:c8:f2:32:03:
14:9d:a8:1d:9d:9a:17:cd:b0:6d:07:33:f7:6b:f7:be:c6:89:
02:10:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:45 2026 by rpki-client