Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: 2yLcfv1UB534fp/Mrd2TzRJDjJ/JUT21N09iHVjH9k8=
Subject key identifier: A1:26:3C:49:10:A6:32:64:30:6F:39:3D:42:DF:09:D6:CF:B7:F9:60
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 019D38D357EE4DDC7F1E4F52FCF15CE6745C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 0980
Signing time: Sun 29 Mar 2026 09:01:07 +0000
Manifest this update: Sun 29 Mar 2026 09:01:07 +0000
Manifest next update: Mon 30 Mar 2026 09:01:07 +0000
Files and hashes: 1: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: LfFc+K/XEBG/bMffcoGQ5Pw1YFe0qj8NQmdiNExwwhQ=)
2: sdWMapYuUdr6p3SLmsRyhc96bjk.roa (hash: Ej5qnbmLumHZ7hyS+j2EcBw0ec4/rqTjBeF1pn/Pv/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:57:ee:4d:dc:7f:1e:4f:52:fc:f1:5c:e6:74:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Mar 29 09:01:07 2026 GMT
Not After : Mar 30 09:01:07 2026 GMT
Subject: CN=a1263c4910a63264306f393d42df09d6cfb7f960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:ea:2f:89:07:e7:72:3c:aa:ed:5e:aa:e4:
5f:ff:17:b7:dd:4f:f0:a5:74:92:f4:4c:25:69:e7:
6a:da:2d:f8:10:f9:63:6e:32:d8:01:5e:b3:1e:ea:
83:ee:84:b9:c7:00:0e:7a:0c:e7:6a:ef:0d:b1:bc:
fb:48:1f:95:37:86:2e:e3:fb:46:de:42:33:ea:be:
d7:56:9d:0d:87:f3:b1:26:1c:05:52:c5:84:e4:20:
f0:76:d9:2e:38:5a:5d:e0:b6:18:77:1c:19:f5:97:
d2:cc:87:13:1d:34:95:4e:6a:aa:e4:9e:75:9a:42:
e3:bb:f9:84:4d:31:92:ae:1e:1c:fa:31:16:88:b4:
f1:5e:ee:13:2e:db:b9:e3:ec:02:81:df:66:63:d1:
01:a6:5a:8f:3b:b1:af:69:36:46:7f:3e:07:d7:8c:
90:e3:2e:13:19:9a:9d:6d:d5:a2:f1:49:b6:6f:03:
25:4c:2d:29:41:1c:cc:26:d5:ab:3f:6f:57:9e:43:
f3:4d:32:2a:8b:a0:6d:f9:1b:b7:62:05:8d:d2:24:
fe:22:3c:93:51:3a:e6:19:1f:ad:75:70:cb:33:11:
25:d5:38:7e:ea:1a:20:c5:0f:46:36:f4:26:6f:0f:
14:c5:e8:d0:2f:2a:cb:06:48:2d:16:b4:64:96:d8:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:26:3C:49:10:A6:32:64:30:6F:39:3D:42:DF:09:D6:CF:B7:F9:60
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:4a:29:19:e2:5a:62:dc:f7:6f:87:1a:fd:00:41:46:fa:7d:
fc:d4:67:95:b2:73:94:b7:6c:10:a4:84:a7:5a:41:7c:07:03:
f2:62:ad:31:8c:09:a3:1d:0e:59:71:82:04:3b:47:a4:8c:56:
2b:7d:26:66:7a:90:d8:16:7e:df:21:90:50:e5:17:a1:1e:3d:
0f:8c:12:7e:10:4e:fc:e8:4c:07:df:65:3e:ec:bd:60:34:63:
69:23:1a:a8:7d:42:df:a4:3e:41:54:7c:9a:0f:c9:ec:8c:90:
14:65:80:39:30:56:4d:95:ef:f9:03:cb:7f:9a:64:cd:62:13:
26:fc:a9:fe:70:b7:a1:fe:cf:44:e1:d2:18:e2:94:6b:cc:54:
95:af:bc:19:e9:f5:18:df:83:a4:e0:c2:7e:5f:ba:b0:44:df:
86:20:01:95:e5:3c:7e:84:bc:d8:af:b2:7d:36:67:9c:c3:60:
14:b9:58:82:47:6b:35:e8:68:e6:58:bc:8e:14:90:8b:e2:ce:
c7:b7:f7:ac:c4:a0:85:d1:e6:bb:f8:f4:b7:a3:5c:63:98:0a:
28:e6:34:b9:34:d9:83:0e:0b:6b:22:83:30:3a:6c:3c:14:4e:
12:75:a9:db:e2:b5:86:05:9e:14:12:35:51:78:3a:b6:29:fa:
e9:bc:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:54 2026 by rpki-client