Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: kuCmXGm/443alu8OgAp7P3E3kuQpG2NcStmLARZureU=
Subject key identifier: DC:27:99:35:49:B6:63:ED:6D:83:D1:71:5F:30:15:52:64:CD:53:CE
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019D3789616E1F9452CD0AA54E4D37CFB974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1588
Signing time: Sun 29 Mar 2026 03:00:43 +0000
Manifest this update: Sun 29 Mar 2026 03:00:43 +0000
Manifest next update: Mon 30 Mar 2026 03:00:43 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: ADWQeA+vrHMQzKOE0AO46KAIn2naC/rBBXXSkvMeRcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:61:6e:1f:94:52:cd:0a:a5:4e:4d:37:cf:b9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Mar 29 03:00:43 2026 GMT
Not After : Mar 30 03:00:43 2026 GMT
Subject: CN=dc27993549b663ed6d83d1715f30155264cd53ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:1e:df:52:0a:71:b5:e9:10:44:59:71:4e:
a2:c6:a8:58:f1:4c:e4:81:c5:b2:61:ec:78:8f:9c:
81:7c:e2:f3:1d:8f:3a:c4:e9:1c:15:1d:1e:a7:49:
6e:a8:fc:40:01:6a:ef:1d:a9:3c:03:d8:d4:1c:16:
18:f2:1b:43:9c:8b:bc:61:1e:fd:11:2e:23:e0:1b:
15:25:14:f6:05:61:cc:0d:23:8a:db:65:ff:1a:dd:
f4:8d:57:13:8f:96:54:90:32:cb:d0:2f:38:2c:27:
01:0b:de:ea:70:36:29:69:54:ca:cc:bb:06:22:33:
72:43:45:f3:ba:10:6d:9f:12:44:39:ac:3e:53:f0:
9e:92:56:49:4b:f1:17:8a:55:dc:b1:d0:3f:ed:76:
e4:b4:f0:2d:f4:02:33:0f:86:68:90:9d:68:46:7c:
60:1a:55:72:01:b6:a4:68:6a:bc:fd:fc:8c:2b:37:
90:ed:bd:82:10:b1:08:dc:57:47:61:ed:e0:bf:d9:
b5:66:2f:79:a1:be:02:07:c6:ae:5b:d7:cd:ac:d0:
24:94:c1:75:83:c5:32:bd:e6:03:a2:ca:a5:47:f6:
9e:c3:6c:1e:78:a5:8b:28:da:6d:1b:ed:38:d1:7d:
60:7c:4f:81:20:ed:f1:bb:3a:cb:ab:4e:88:48:31:
3e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:99:35:49:B6:63:ED:6D:83:D1:71:5F:30:15:52:64:CD:53:CE
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fc:8a:84:d7:1a:8e:2e:7f:5e:fa:2c:be:9f:9f:26:7d:fb:
9c:b4:bd:eb:b9:cd:10:ff:fb:7f:db:f8:13:81:6a:d7:66:93:
49:b4:2d:84:e3:4c:a6:eb:01:a7:80:f8:8b:fa:c6:6e:00:40:
fa:5e:41:80:8b:fd:eb:f7:92:9e:13:6f:02:cf:20:f2:38:28:
6b:79:ac:e8:55:16:1b:3d:9c:08:b2:b4:d4:35:a3:f8:bf:46:
f3:b7:74:d9:1a:b0:18:66:cc:55:5a:9f:ff:30:6c:9b:3d:0e:
1a:78:84:77:87:1f:48:4c:5b:2b:05:94:5f:d6:dc:35:e5:9d:
44:1d:8b:04:a1:75:dc:cc:2f:67:fd:65:42:f4:fd:06:d8:70:
e5:96:5a:85:ef:b3:bf:e4:3d:c9:e3:9c:79:f8:73:b2:86:0f:
34:34:bf:e5:b9:4c:1e:0a:35:40:96:86:e2:32:24:9f:e5:92:
a1:88:51:1c:cc:a1:b7:44:81:86:c2:66:34:88:8f:de:21:ba:
2a:8f:a9:e5:49:99:ee:75:cd:e1:8a:3a:fc:9d:fb:98:4e:77:
f9:99:a7:6d:49:c7:2f:1c:86:d4:40:ef:fa:da:f1:4a:55:97:
99:49:b1:20:e1:e6:40:01:17:72:ee:20:fd:4b:f8:6c:17:26:
ba:03:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:49 2026 by rpki-client