Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: mh8oA6Tre6f3LXCpemL19x+82uukjOPQyX6/B2a0g88=
Subject key identifier: 05:E9:B9:21:AE:4C:7C:E8:3C:66:29:BD:C1:33:44:95:5B:60:7F:5B
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 019D382EC108CD693B946AE2D7FFCEE2D650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 15DB
Signing time: Sun 29 Mar 2026 06:01:21 +0000
Manifest this update: Sun 29 Mar 2026 06:01:21 +0000
Manifest next update: Mon 30 Mar 2026 06:01:21 +0000
Files and hashes: 1: 13x6q0kK4jWtFgTsaQE2IuvYeC0.roa (hash: jOVJU7qUmDkbddDyA5OyhBcSOp8ncmsAOoZ16mvRU1k=)
2: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (hash: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck=)
3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: Y9NoN8JFB/GGl9v0vQLHth2ZX+8esh4fhJcoEnpEsU0=)
4: ekrqCKLizVAMKQXSGPD3DpBP_OY.roa (hash: s5CParuuwC3JvXqHExuQ7yQFo1a7fTuNWPzfjB6dlrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:c1:08:cd:69:3b:94:6a:e2:d7:ff:ce:e2:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Mar 29 06:01:21 2026 GMT
Not After : Mar 30 06:01:21 2026 GMT
Subject: CN=05e9b921ae4c7ce83c6629bdc13344955b607f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:11:a5:8d:f4:30:38:b2:3b:20:e5:92:bb:
65:7f:27:7a:cd:62:5b:c4:16:4c:f1:8b:75:f0:aa:
14:fc:ec:74:09:48:db:6d:fd:11:75:69:d1:19:cf:
12:b7:77:b7:3e:f2:cd:4e:0c:b4:fb:d2:2b:16:1b:
6e:ab:16:82:e5:2d:c5:5a:9d:1d:b8:22:f5:52:22:
1f:3a:26:9f:d8:76:90:8e:46:fc:d3:84:7b:4e:b5:
04:e0:a7:26:ce:3b:36:f1:41:c0:7f:80:4c:a9:92:
7a:00:e1:29:02:86:02:54:8f:63:dd:6f:16:2e:43:
cc:6a:e8:a5:e7:07:aa:76:a3:ae:31:72:bb:8b:9b:
52:21:98:f9:5a:72:08:ac:e7:e6:44:90:a4:a8:71:
d1:ee:45:8d:00:a1:a5:c6:81:d9:88:a3:e3:39:af:
04:fb:62:dd:d1:57:72:9e:7c:93:05:13:9b:df:84:
67:50:04:7c:aa:72:f4:0f:e2:14:4e:86:a6:4f:82:
60:3c:93:d9:3c:01:ad:14:9e:bb:d6:8b:2d:84:e4:
b1:eb:b8:2f:46:33:56:aa:d2:a9:bd:b6:a3:cb:f8:
5a:85:f3:6d:be:41:5b:1f:51:45:19:13:25:df:d9:
ce:fc:65:d6:9c:ea:64:bd:2f:16:a0:4e:1a:52:4b:
04:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:B9:21:AE:4C:7C:E8:3C:66:29:BD:C1:33:44:95:5B:60:7F:5B
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:8c:38:70:b3:32:7e:51:1b:f4:e3:50:ec:bb:53:0f:71:
58:e5:d3:0d:17:2f:c6:b0:cf:35:32:09:7f:f1:03:9d:86:d1:
e2:5e:1a:28:36:3f:5a:0a:a0:80:11:65:da:fd:4e:4c:fd:da:
d0:9c:48:e3:8a:ed:98:08:27:5b:52:8a:8e:b5:2b:87:fe:5d:
7a:d4:c1:a4:d4:1c:58:e4:6f:75:1f:24:3c:49:b7:e4:b0:52:
b1:d5:d2:aa:7f:bf:c7:6e:e6:37:d4:06:bf:81:f6:75:cf:ed:
c3:bd:58:c8:96:db:bd:11:ae:53:83:fc:85:c5:0a:df:04:a4:
45:14:6a:3f:d4:d0:a1:36:ef:f4:3f:dc:75:22:d8:51:3a:79:
25:ce:76:eb:d5:8a:ef:4e:98:6a:6b:ec:19:63:7b:ca:80:77:
7f:18:3a:47:86:b1:75:4a:cf:38:c6:ff:bd:a7:09:6e:d8:2c:
28:8a:d0:58:7b:76:61:17:9e:d4:32:1a:4b:c0:16:8e:2d:81:
df:06:74:47:de:5b:10:7c:26:6c:89:75:4a:3c:fa:eb:1f:d5:
15:38:ac:12:a6:07:81:54:51:c6:ce:62:09:d9:19:f2:cb:3e:
bf:c2:40:34:bf:c2:f3:eb:6d:6b:71:0c:c8:e4:63:8e:d6:88:
f0:99:53:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:18 2026 by rpki-client