Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: 4x6AngBD6KBTODzyN7SHcZKSCNr1mPNMDJT3+xfk3ZI=
Subject key identifier: 39:8D:08:F5:AE:CA:D4:0C:F3:68:AF:D4:74:A7:A8:D3:FD:F0:C5:95
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019D3A543050B6C4C6C27BC46C4D23AD5A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0E6B
Signing time: Sun 29 Mar 2026 16:01:28 +0000
Manifest this update: Sun 29 Mar 2026 16:01:28 +0000
Manifest next update: Mon 30 Mar 2026 16:01:28 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: teTkkBhT6wsSDboQqynARxkV04hHPb+b75LnR9DYWMs=)
2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:30:50:b6:c4:c6:c2:7b:c4:6c:4d:23:ad:5a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Mar 29 16:01:28 2026 GMT
Not After : Mar 30 16:01:28 2026 GMT
Subject: CN=398d08f5aecad40cf368afd474a7a8d3fdf0c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:10:d2:39:95:09:f2:f7:58:d4:d0:b3:8b:
af:ad:89:1b:c6:af:70:bf:57:aa:44:53:cd:7a:61:
14:78:56:42:3c:b7:8e:2b:61:e2:e8:8f:41:e1:3d:
64:c8:2a:d2:b7:f1:01:09:e1:b5:7b:3c:9d:e0:04:
1b:c4:8e:93:6d:11:28:d7:8c:44:15:c1:ab:c8:38:
7d:7d:10:d7:a5:4e:1a:b2:c2:1c:d2:3b:47:ef:a5:
5e:17:20:48:25:56:90:7d:3a:c4:4f:18:8a:da:94:
1d:8a:b4:ca:67:19:13:70:b9:45:b2:99:5e:e6:db:
a6:1e:a9:2a:0a:e7:e1:81:78:87:25:74:37:62:8b:
e7:1a:22:16:17:79:26:a7:14:b8:5c:1f:2c:b3:8d:
d0:15:ad:fc:af:23:f9:86:25:42:4d:c7:37:f4:af:
11:3e:86:e4:b9:5e:25:0b:f4:7c:ab:a7:72:ca:c5:
18:23:ae:6e:d3:ea:fd:d9:19:84:d9:03:f7:6a:b5:
f7:0f:af:5f:f1:d4:17:ee:bb:2c:d8:f5:e4:85:e4:
23:08:fa:1b:e1:47:54:20:fc:23:c7:f1:3a:51:40:
80:2f:af:07:75:17:05:49:bb:40:f4:3d:86:30:e7:
2b:3c:96:b6:43:dc:9d:33:11:69:8b:0f:d8:ee:74:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:08:F5:AE:CA:D4:0C:F3:68:AF:D4:74:A7:A8:D3:FD:F0:C5:95
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8b:7a:42:3f:2e:75:ed:e9:53:c9:5c:02:d1:a7:83:33:e4:
24:77:4f:c5:fc:6e:7f:6c:bc:fc:f2:b8:38:96:e4:de:b7:c9:
68:e6:b6:5e:78:0c:74:47:c0:65:cd:b8:a3:53:9a:e3:4c:ee:
bd:aa:ae:af:bc:2b:4e:4d:f9:b2:db:4b:f6:26:c1:8b:97:3f:
ed:3d:cc:93:80:76:f8:8c:b7:bc:7b:47:fe:2b:58:1e:e3:83:
7a:ff:55:75:05:20:a1:27:e3:88:f0:cb:00:8e:8c:08:f1:12:
76:d3:2f:f8:f9:ee:9c:45:82:74:07:c2:a7:24:d5:0a:2c:c6:
80:62:a5:65:45:b5:28:cc:f2:ac:52:13:a6:f0:1f:59:d3:f8:
fe:71:dc:5e:99:75:62:74:26:9b:6b:29:6e:79:2d:99:eb:48:
b2:b6:b2:07:35:35:ba:2f:a4:97:ed:36:99:9d:62:bf:c7:97:
14:87:95:b9:87:33:5c:e7:6a:5e:00:fb:44:29:7f:5e:d3:55:
f8:2a:59:b8:f7:d3:4a:96:b1:dc:39:3a:0b:c1:c7:f7:29:39:
13:03:74:66:02:89:15:d5:af:36:86:5e:d3:db:b9:09:34:1e:
b5:cd:19:dd:38:4d:35:4a:54:77:76:a6:a8:f7:14:f7:72:89:
8f:1a:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:06 2026 by rpki-client