Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft
File: bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft (raw, json)
Hash identifier: jeryTvnTQetDM84DS588K3MBvrj1KSFFDhe/FCpEJ9I=
Subject key identifier: 1F:D4:75:61:BE:5F:84:A8:9E:5D:F1:F4:12:19:B8:D3:DB:D8:18:0B
Authority key identifier: 6D:08:5D:17:7E:EB:0C:B9:1A:42:F4:3E:2D:4C:3C:80:8D:EC:57:08
Certificate issuer: /CN=6d085d177eeb0cb91a42f43e2d4c3c808dec5708
Certificate serial: 019D39409886922BC8C59E6F5A9E640F6FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft
Manifest number: 0134
Signing time: Sun 29 Mar 2026 11:00:27 +0000
Manifest this update: Sun 29 Mar 2026 11:00:27 +0000
Manifest next update: Mon 30 Mar 2026 11:00:27 +0000
Files and hashes: 1: 16nrOt17hZ1AZ2rbymVzCwBbT7s.roa (hash: g2WQdtjQynAE8UPOyiD7v/vN8Ha9qLkkkQyuaamGfmw=)
2: bQhdF37rDLkaQvQ-LUw8gI3sVwg.crl (hash: elxQKml5+Z+ZrqxhDSiAEoVEAwG2cbkHI1rBJAGVliU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:98:86:92:2b:c8:c5:9e:6f:5a:9e:64:0f:6f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d085d177eeb0cb91a42f43e2d4c3c808dec5708
Validity
Not Before: Mar 29 11:00:27 2026 GMT
Not After : Mar 30 11:00:27 2026 GMT
Subject: CN=1fd47561be5f84a89e5df1f41219b8d3dbd8180b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:0e:25:e8:6a:c9:57:b5:41:44:4d:d3:1e:
ef:05:66:c5:0a:37:fa:3a:d2:a2:40:f2:33:51:26:
73:32:79:5e:ae:ba:84:a7:51:1d:32:63:4f:8b:19:
25:98:94:9d:ab:0a:27:82:95:fb:34:b8:83:09:b3:
0f:f2:17:9f:3f:54:e6:b2:9d:87:79:c9:f8:64:6b:
23:cd:42:2c:72:ff:3b:ef:83:ac:a0:80:74:07:83:
41:33:e5:cf:7e:f3:5f:00:00:f4:cf:c0:c6:c6:92:
e1:6e:5d:cd:c7:ab:34:a4:a9:14:f9:20:62:e4:6a:
f9:8f:37:35:cf:16:62:ac:b3:71:87:aa:89:e0:5e:
67:47:03:c6:76:ee:7c:41:82:6b:93:2b:a6:8a:30:
87:71:8e:0b:e9:02:ae:2a:d6:94:0c:83:80:70:43:
ff:27:98:33:04:2a:0f:67:38:20:6a:1c:be:3e:4e:
b5:a9:3e:14:3e:d1:56:38:a7:bf:d1:dc:ee:77:03:
4b:9c:e5:3e:3f:1c:48:93:ad:3e:65:32:06:2c:ea:
18:bd:25:93:ad:78:03:64:90:50:c4:4f:18:a3:db:
0c:96:bc:7f:4d:d6:c6:6a:7b:f6:e0:00:68:73:2b:
ae:b3:09:ff:19:4e:77:26:34:32:71:c6:54:8a:c3:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:75:61:BE:5F:84:A8:9E:5D:F1:F4:12:19:B8:D3:DB:D8:18:0B
X509v3 Authority Key Identifier:
keyid:6D:08:5D:17:7E:EB:0C:B9:1A:42:F4:3E:2D:4C:3C:80:8D:EC:57:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQhdF37rDLkaQvQ-LUw8gI3sVwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/053892-73be-412e-9559-97d49348cc01/1/bQhdF37rDLkaQvQ-LUw8gI3sVwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:25:53:6a:f7:37:8d:c0:9b:0c:90:0e:a5:f8:ba:68:b1:31:
09:18:cc:b4:9b:b7:63:10:1f:88:f5:2d:d0:75:72:1b:13:be:
6b:c7:14:59:0e:60:c8:d0:5d:94:c4:4e:9a:bb:95:23:b5:67:
f1:3f:bf:e1:f4:ef:58:45:a6:48:87:58:2f:c5:a9:1a:5a:bd:
37:e7:50:c1:60:f3:87:4e:4c:bc:85:62:09:7d:0e:0a:35:aa:
35:2a:42:d4:7a:21:33:87:4d:da:a3:91:05:bc:32:b7:a6:6a:
28:71:34:45:75:f3:15:a8:c0:ff:52:ce:25:9d:2f:a2:00:65:
ff:8a:c6:b0:07:77:29:82:d5:e8:76:7a:15:bc:df:8f:24:b8:
11:cb:8e:20:78:1b:b0:4d:9a:7a:a6:bd:64:74:08:cc:8c:cd:
37:f8:52:4d:9b:de:61:c9:77:c2:46:b4:ce:2a:3e:5c:55:18:
d8:e8:3e:b2:3d:b6:98:8a:4d:7a:03:68:2e:93:bc:41:c9:a0:
a7:02:f5:09:2e:32:6d:1d:1a:eb:e4:3b:51:df:6d:14:f4:d5:
03:ad:7a:99:59:d3:fc:02:7d:58:a0:99:0a:cd:13:e1:a5:90:
02:f9:00:28:bd:c4:04:63:cc:1e:d7:5c:47:d6:9a:38:be:57:
6b:6c:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:23 2026 by rpki-client