Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: nAci9S5jT854a/BkVXvj1uAkgNBBv8I+MELiXuv/6i4=
Subject key identifier: 6A:01:23:97:BC:3A:51:31:6B:B7:9B:65:02:99:3D:1C:73:9A:7B:18
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 019D36E511ACF2DF02A7B5FA1B2D53D95028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 00:01:14 +0000
Manifest this update: Sun 29 Mar 2026 00:01:14 +0000
Manifest next update: Mon 30 Mar 2026 00:01:14 +0000
Files and hashes: 1: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: YNVb7WwbI37WQpjrgSTME557v28x2iWOf6IgOO9E82o=)
2: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (hash: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:11:ac:f2:df:02:a7:b5:fa:1b:2d:53:d9:50:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Mar 29 00:01:14 2026 GMT
Not After : Mar 30 00:01:14 2026 GMT
Subject: CN=6a012397bc3a51316bb79b6502993d1c739a7b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:2c:2c:1e:81:f9:f3:a5:0e:fa:7e:18:68:
49:36:a6:06:ae:ee:f4:42:0b:12:a0:eb:37:0f:91:
c6:c0:94:96:82:e9:74:77:05:b4:1a:2d:9d:bb:80:
f3:47:5b:4f:41:6f:b1:30:dd:82:30:8d:1b:f8:26:
62:bb:1d:60:6b:fa:5c:89:db:10:2a:42:a9:9c:dc:
23:07:be:30:cb:2a:5e:13:41:a4:01:a7:5f:a1:0b:
f1:ad:b5:62:da:f2:e4:7f:c9:58:52:cb:19:0f:19:
f7:4a:df:5d:6e:34:a9:38:9f:7a:20:68:2d:13:77:
3e:1f:8f:43:b0:b9:b4:58:a9:3c:65:6a:22:49:94:
8e:09:39:3d:cf:7e:c8:bd:e6:99:a0:2d:a7:12:1e:
9e:3c:ba:a8:0a:31:9a:6c:4d:85:dc:88:e0:16:bd:
19:43:0c:db:01:9d:e4:a2:b1:1e:c3:1e:ea:23:8a:
b1:7b:4a:79:3a:8b:15:44:33:98:62:40:eb:ca:bf:
40:b0:4f:77:0a:a7:94:27:f5:7b:71:98:db:34:76:
de:e1:36:f1:dc:f8:0f:4d:4d:9d:d5:54:29:e7:9c:
1c:1f:bb:c8:c8:e0:2f:03:5f:ae:0b:13:5a:87:39:
7a:a8:b0:ab:67:d6:4c:0d:ef:90:c8:ed:96:3a:fd:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:23:97:BC:3A:51:31:6B:B7:9B:65:02:99:3D:1C:73:9A:7B:18
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:99:37:9b:77:80:f9:3e:cd:02:ef:b4:70:f0:88:a2:86:a6:
a9:40:cb:16:d8:65:9b:23:54:55:3c:ee:f4:ea:9f:a7:c0:3f:
ea:91:92:ff:6f:5e:0b:be:8c:e6:b2:65:0d:e9:b8:62:70:ee:
3d:97:43:f6:e7:9e:59:e9:34:b5:bc:5e:b1:19:4e:96:ce:e4:
b1:73:8d:39:0b:3d:56:ee:30:7d:12:cb:6a:ae:27:83:c9:b0:
e9:19:21:e9:bc:64:1a:d2:9a:b6:6f:f4:f0:8b:a4:f7:15:79:
a4:88:0f:89:d0:57:9b:63:9f:8d:7e:54:31:df:f1:d6:31:1a:
32:a0:45:7e:d3:6b:b5:85:b8:98:6c:9e:bb:d9:bc:78:02:b7:
76:70:a2:ea:c5:75:6f:c1:82:59:0c:01:10:ca:6b:a5:7e:f2:
c0:9e:43:dd:aa:ae:75:28:bd:d0:8f:d8:57:39:0f:c4:aa:e7:
d4:28:13:ba:eb:14:84:05:11:45:58:10:e5:12:ab:64:e4:02:
7b:ae:e3:98:32:48:8f:d0:2e:0b:53:8b:d7:08:e9:ca:64:fc:
6b:b2:a5:dd:ff:7c:eb:32:cb:58:c7:79:46:16:78:60:20:6c:
5b:4c:a3:47:b4:e1:a3:f8:85:19:0e:ae:ad:16:00:09:19:fc:
05:ee:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:10 2026 by rpki-client