Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
File: bdtHI7M7T3LSCoxqi8xkakeAFwU.mft (raw, json)
Hash identifier: SnlAvtdasZOLzxuJgmkbAHdtm39Sylkx14OaR8U8i6g=
Subject key identifier: 6A:11:01:E6:8F:13:DF:F5:37:A3:6F:8F:13:DF:73:CC:61:24:5C:19
Authority key identifier: 6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
Certificate issuer: /CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Certificate serial: 019D36E47042D62410759B0482D1B70CAE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
Manifest number: A6
Signing time: Sun 29 Mar 2026 00:00:33 +0000
Manifest this update: Sun 29 Mar 2026 00:00:33 +0000
Manifest next update: Mon 30 Mar 2026 00:00:33 +0000
Files and hashes: 1: bdtHI7M7T3LSCoxqi8xkakeAFwU.crl (hash: AWyz4gV1iV82IRMb5LlVse3ffBzvggY0OOq6NmC376k=)
2: eHp3RyfgNuQHsHsh65tMdSg96kw.roa (hash: Iz+ORoiDtNl1WNlxhQ85YUq+HSrXSAnu/AXImybgG6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:70:42:d6:24:10:75:9b:04:82:d1:b7:0c:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb4723b33b4f72d20a8c6a8bcc646a47801705
Validity
Not Before: Mar 29 00:00:33 2026 GMT
Not After : Mar 30 00:00:33 2026 GMT
Subject: CN=6a1101e68f13dff537a36f8f13df73cc61245c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:81:32:1c:73:5b:95:29:b4:69:83:b7:22:
79:07:4a:23:fd:27:4a:3a:25:0f:b2:5a:4a:00:74:
bd:2e:28:6b:cb:2a:a9:07:0d:44:08:3f:9a:5e:53:
8c:93:bf:dd:50:f1:14:ce:a9:7f:18:cd:85:b5:3e:
cf:6c:b9:73:4c:da:d0:8c:21:89:5d:71:1e:ef:76:
64:77:e7:87:ca:45:80:9f:6e:b4:bd:7a:1a:46:10:
92:94:0e:05:d6:19:59:ff:ae:f0:17:96:02:0a:31:
a7:92:4c:da:86:05:85:42:9b:97:29:90:7a:f1:db:
fd:7c:06:99:ed:5f:59:2a:07:92:4e:3a:63:4c:75:
82:bc:a5:34:a6:06:5f:f2:64:34:1d:c6:6b:99:28:
ba:ff:98:76:1a:73:21:af:94:1b:99:28:47:32:e9:
5f:bf:66:be:8a:dd:a1:7d:2e:61:1c:84:52:dd:8d:
d4:68:12:13:12:09:30:06:17:21:cd:7f:5c:4b:f0:
87:31:30:f1:5f:d6:5d:f3:6d:b9:fa:89:2c:0b:32:
b7:30:8a:76:b3:54:1e:b2:a3:e6:8c:68:7e:0b:04:
6c:2c:75:a2:95:13:10:9b:64:28:64:ea:dd:9c:59:
e9:89:2e:9b:df:ff:f2:2c:38:4c:05:45:57:95:f8:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:11:01:E6:8F:13:DF:F5:37:A3:6F:8F:13:DF:73:CC:61:24:5C:19
X509v3 Authority Key Identifier:
keyid:6D:DB:47:23:B3:3B:4F:72:D2:0A:8C:6A:8B:CC:64:6A:47:80:17:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdtHI7M7T3LSCoxqi8xkakeAFwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/64d52e-9bc3-4819-9c39-779d53c0d1fd/1/bdtHI7M7T3LSCoxqi8xkakeAFwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:22:50:08:db:f1:d5:b7:cb:5c:1d:2f:76:be:d4:a2:b3:f2:
0b:a1:3d:0e:15:04:40:f4:e8:ff:7f:f3:2f:ec:43:9e:25:3f:
a6:54:a8:25:f5:52:68:59:aa:2a:60:c5:bd:f3:b4:71:fd:20:
95:77:b6:8a:98:fa:fe:d8:58:ef:4f:e8:90:ee:db:e9:2c:15:
5c:dc:51:1c:d7:61:4b:50:47:ae:a6:35:f4:d8:36:be:28:03:
80:6c:16:4d:bf:aa:6c:85:2d:43:e1:1c:27:f6:38:d9:bf:2b:
7d:9b:21:4e:be:6d:5b:db:ba:66:8c:18:28:d5:68:4d:c0:36:
ef:f5:b1:8c:bd:d1:4a:49:0e:82:e4:56:b6:9b:42:13:83:d6:
21:7a:be:42:42:17:68:0b:f8:fb:12:8c:23:23:04:9f:c9:28:
b1:16:3c:0b:98:a8:a4:75:93:9d:9f:43:44:e7:4b:ca:78:84:
0b:3d:b5:d7:02:f9:84:eb:80:6c:cf:1e:9c:09:80:d3:eb:30:
94:bb:76:ae:4a:98:77:f4:2c:de:d1:2f:79:de:de:68:94:26:
80:96:09:65:eb:ed:27:1e:ef:6e:88:3d:03:22:79:1b:63:65:
1c:e0:f3:73:51:1f:76:7b:f4:40:db:a9:d3:cf:58:c0:cb:37:
21:2a:37:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:15 2026 by rpki-client