Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier: EGTeCXVaqzEMsdX60XrMZAQCRNlblQq0TrtIcWMCRGY=
Subject key identifier: E8:B1:25:54:44:A7:43:07:56:1E:77:FB:73:7B:52:83:E7:D8:5B:BA
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 019CE523744DF159C775926DABA481C77D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number: 1865
Signing time: Fri 13 Mar 2026 03:00:31 +0000
Manifest this update: Fri 13 Mar 2026 03:00:31 +0000
Manifest next update: Sat 14 Mar 2026 03:00:31 +0000
Files and hashes: 1: LEEO04PoylroqFY8moJTc81n18Y.roa (hash: VL5m4Xl6YVLRVrUOG2POhFSxcgEK6w8mouyfVI3KzkQ=)
2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: DkBU1627TjxRMtGHmsA94wRfP3tWPLBOKXTaxrgRTY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:74:4d:f1:59:c7:75:92:6d:ab:a4:81:c7:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Mar 13 03:00:31 2026 GMT
Not After : Mar 14 03:00:31 2026 GMT
Subject: CN=e8b1255444a74307561e77fb737b5283e7d85bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:02:2c:5f:ab:cf:3b:88:4c:04:92:2c:0e:
52:73:97:93:6a:9f:7d:3a:c3:fa:ac:40:1c:8f:7a:
9c:27:36:be:46:b5:ac:d2:a2:db:e8:64:c9:da:b3:
7e:7b:44:fc:19:7f:9b:af:97:ad:bd:7d:19:c8:b6:
c9:1a:c0:c6:29:45:38:82:5b:f6:52:97:45:27:12:
1f:24:62:10:79:25:f6:f7:95:ff:c7:bf:46:63:01:
82:15:38:c4:e2:17:e9:ac:7e:df:85:7f:3a:7b:01:
2e:5d:37:99:ea:83:b2:20:2f:2b:c2:bb:46:83:f8:
d2:28:6f:d5:1a:86:14:56:27:4f:fe:2e:1c:ad:8b:
a9:aa:92:ef:4d:8a:71:a4:94:f2:8c:be:fb:69:ab:
89:b6:5d:bc:d1:b2:96:3b:7c:ae:1e:f7:59:7c:6a:
9c:4a:5a:b3:5c:a1:a1:74:50:69:d9:fc:39:5b:cf:
e6:f6:63:f8:17:1a:67:21:f6:4a:5c:5a:1c:df:23:
0e:35:bc:cb:be:f8:3c:e7:c4:3c:18:a8:b4:bc:40:
3d:61:9c:0e:36:d3:c6:1f:4f:d1:4c:a6:70:84:78:
39:dc:e7:c1:51:f0:aa:d0:37:b5:e4:f3:e3:6f:da:
5e:b7:ad:8c:1c:1f:0e:d0:56:49:5f:b2:33:31:d2:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:25:54:44:A7:43:07:56:1E:77:FB:73:7B:52:83:E7:D8:5B:BA
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:73:60:88:29:6d:97:99:ae:40:69:8c:1b:6b:1d:44:d0:31:
c1:db:b5:b7:aa:45:46:54:a9:39:89:d5:d3:99:5a:c9:79:49:
7a:8b:fb:aa:75:b2:08:e7:ff:cb:8e:1c:f5:30:83:5b:73:8e:
6a:e9:47:64:26:2e:32:86:60:b3:0b:25:53:fc:21:13:81:2e:
3b:8a:d9:8d:1c:58:54:5c:0c:98:40:78:b0:23:22:44:4e:6e:
ca:9f:1e:36:c9:d8:7c:43:32:53:36:fb:70:c9:8c:2c:ae:0d:
f2:1f:fc:5c:eb:86:79:b1:4b:ab:7c:c2:4e:79:51:2d:60:1c:
ac:a6:c5:ad:d4:e4:f2:78:27:f4:71:28:67:1b:5a:9b:e9:e1:
ad:cd:99:4c:99:63:53:8c:89:be:3a:3a:20:8a:81:4e:db:59:
c4:0c:2e:45:55:48:44:4f:24:53:82:55:f1:4b:a9:f4:57:d4:
97:26:ff:96:9c:6e:b2:a4:04:9c:17:81:5e:c6:03:2b:65:41:
53:41:54:e1:69:27:68:dc:47:0a:f2:6a:10:13:19:9a:57:b8:
2f:7f:f4:2a:a4:f6:30:31:0c:3a:89:92:a6:b9:21:29:cc:0d:
0e:6e:b0:b6:e9:37:6f:42:8a:5c:a4:f4:d9:37:d3:61:0f:04:
6c:7e:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:57:20 2026 by rpki-client