Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier: ZUh1NDYJd1mGgmeHwwMWvR7jiihl7RCEWLvS7LvWnNA=
Subject key identifier: BC:C3:D8:E2:89:57:EC:01:00:D1:67:34:87:07:94:4C:E3:55:63:6D
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial: 019D38D316C8D4F8515EEA3F81A7333D7F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa (hash: DuYV9Jw3WnzlLPMbHeqIhbHSehBiGNJ5e+2xEYBYW3w=)
2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: Qk2hiN+l/q2JY6P3wPLjCWimk+YF39Wdp4Kb+z+NdV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:16:c8:d4:f8:51:5e:ea:3f:81:a7:33:3d:7f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=bcc3d8e28957ec0100d167348707944ce355636d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:a4:0f:32:f2:fd:50:5c:ad:3a:81:e8:b2:
e2:37:80:cc:d0:3d:d5:c6:10:75:8c:fe:79:63:6b:
c1:f0:a3:50:13:86:2d:28:af:b7:e2:7d:21:08:9b:
4f:82:4a:32:10:54:73:5b:bd:33:3b:12:ec:9b:cf:
c3:23:e1:0c:90:ec:a7:71:df:8d:46:71:34:06:65:
88:2d:8a:e5:31:d4:1b:fd:0d:f9:01:e4:27:7f:ab:
ec:a3:05:a5:8d:8b:2a:3d:0b:cb:03:54:d4:87:ed:
6d:30:ed:21:c9:e3:be:f9:e0:d7:07:bb:f5:df:76:
b8:d9:41:33:47:b6:e4:5f:06:ab:19:bd:f0:65:1e:
bd:e2:b5:8d:99:a1:c4:30:21:e0:b2:ad:6d:fa:01:
f1:87:fc:b5:2e:47:f8:86:36:15:ca:6a:b9:55:c2:
a1:ff:af:94:5f:98:e0:97:54:f7:d9:4b:73:d1:1f:
a1:24:2a:27:6e:2b:ee:25:86:e5:ea:87:f5:62:ec:
c9:09:01:9f:61:c2:92:e2:bb:bc:f7:29:2e:82:cc:
81:14:2d:ed:65:82:64:1e:b7:1f:a8:db:65:8c:da:
a6:3c:7b:f9:65:b1:60:0b:6a:27:e6:39:57:dc:97:
2f:b9:e3:a5:24:c0:79:94:08:2e:0b:d0:5b:96:86:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:D8:E2:89:57:EC:01:00:D1:67:34:87:07:94:4C:E3:55:63:6D
X509v3 Authority Key Identifier:
keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:a5:65:a6:bd:3b:ca:07:42:c3:77:cd:9a:4f:e3:c1:bd:
5e:42:e9:98:5c:20:c8:a4:4f:1a:17:88:98:e6:24:cc:82:fa:
d0:69:f0:76:8b:30:6b:9b:76:8d:59:dd:d6:f8:66:07:1b:95:
a0:4a:5f:47:f7:d2:24:8f:d9:fa:d2:01:1e:42:5b:78:c6:f9:
69:f8:6a:63:ab:1a:9b:2d:d6:3c:3f:30:33:0e:9a:53:d9:2e:
c7:33:68:e4:b6:90:d6:1b:e6:4c:37:c6:22:ac:9d:e0:56:c2:
2a:8c:6c:17:e8:97:7e:70:33:dd:b0:93:51:6d:e9:06:74:64:
3a:41:db:fc:54:1b:4b:c8:9d:06:e6:f4:fc:93:83:5d:8e:e2:
84:4f:d0:ab:e3:84:d4:37:c3:ac:97:20:49:8d:3c:e8:af:b0:
a5:86:c2:1e:62:a3:e9:1f:11:9d:a7:ec:c6:b5:d7:bb:cd:e0:
c2:0a:38:6e:f6:67:b2:7c:a6:18:fe:84:52:c4:47:39:c8:4a:
c1:0b:1f:78:6a:82:bc:97:d9:2e:f2:2b:28:48:8e:9e:00:6a:
8a:d9:aa:43:f9:48:d8:5b:22:b0:4a:60:6d:6d:b8:14:7e:b6:
4d:c7:d0:7a:d1:bb:dc:44:a6:90:ed:ad:84:a3:a9:e4:13:10:
58:89:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:05 2026 by rpki-client