Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier: J3gOiqGFs2hZ+HOlV8vo5Mgf6YYg8w5YXTPr+Ek2N+w=
Subject key identifier: 8D:05:03:B8:FF:22:9A:66:79:CC:D9:A5:96:D1:91:BA:6A:F4:C3:C1
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 019D3789085DD182F1B80B7CD2B06635E915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:20 +0000
Manifest this update: Sun 29 Mar 2026 03:00:20 +0000
Manifest next update: Mon 30 Mar 2026 03:00:20 +0000
Files and hashes: 1: MJtCVVy7xxJhXUWGWWZ2lNCGj1k.roa (hash: HdvJHKbNcNPfl/JOSdnPb5pLI2El/VPr+80cW88sPD4=)
2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: vmhhB0CKdKx0aSb1TD+yYXx+VuqDhkFf5R6WDB7KMEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:08:5d:d1:82:f1:b8:0b:7c:d2:b0:66:35:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Mar 29 03:00:20 2026 GMT
Not After : Mar 30 03:00:20 2026 GMT
Subject: CN=8d0503b8ff229a6679ccd9a596d191ba6af4c3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:10:3e:d9:11:ef:41:c1:cf:b4:4c:0c:ac:
40:97:85:c0:49:16:de:8e:6b:3a:b4:51:86:f5:39:
57:c6:88:5a:49:f7:ed:e5:5d:ac:1d:75:7b:38:4a:
2c:77:df:81:9e:f5:91:a4:27:02:93:30:8b:c4:f5:
0f:68:ee:32:9c:a7:38:ba:24:e6:eb:1a:d3:67:77:
9f:57:52:58:26:0c:f2:84:92:c0:a1:97:1c:b9:56:
29:37:e6:8f:33:51:6b:d1:a1:aa:b0:ae:b0:77:f9:
5c:3c:63:74:20:5f:63:25:ff:98:13:79:2f:58:db:
03:ec:d5:09:ba:65:fd:8a:ea:15:54:5e:75:5c:ad:
ca:a5:81:4f:56:0d:21:21:55:fe:7f:55:e3:dd:1e:
ee:c5:b6:58:99:ae:28:b7:22:61:0b:d4:46:cb:c9:
05:8a:f6:fe:45:d4:52:da:21:9a:97:ac:65:00:0a:
48:b6:76:9b:78:fb:11:c3:9e:3a:b3:44:e9:05:23:
87:2b:fc:df:fa:0a:72:9c:15:00:5e:9c:31:07:a3:
92:0f:3c:4f:ca:a0:61:33:52:18:de:f9:a2:ef:fc:
a7:d3:e7:bc:31:d0:af:0e:c5:09:e3:ce:bb:39:91:
51:cc:6e:d7:2e:aa:2c:6b:01:df:b4:92:02:c3:6a:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:05:03:B8:FF:22:9A:66:79:CC:D9:A5:96:D1:91:BA:6A:F4:C3:C1
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:b1:24:49:c4:df:e9:2e:bb:3b:3c:cc:f0:6f:54:54:57:
f4:ee:23:9e:14:42:e0:09:11:32:53:bb:79:9b:ee:f8:76:a6:
f9:fd:c7:5a:37:aa:76:b6:f9:c1:e5:93:5f:b2:9b:e7:1f:b5:
db:04:22:ae:4f:b9:d5:ba:c0:76:86:7a:e2:2a:ff:a9:4e:a4:
14:26:df:df:e0:81:6f:cb:62:f8:0c:c2:b4:99:e8:54:e9:04:
82:74:0a:f9:43:3d:47:92:05:08:06:ec:ec:b6:ca:29:8e:7e:
73:93:07:89:e0:0c:14:5b:d6:fb:2f:51:36:9e:0a:ee:43:32:
99:ca:e0:7e:79:14:6f:93:3a:ef:d3:64:22:a6:05:07:33:b6:
67:13:f0:3e:2d:03:13:50:02:e9:0a:f1:0b:4b:7b:e5:4f:84:
9e:6d:5e:ef:0c:f9:e7:62:4d:ca:e5:bc:c8:6d:d2:d1:dd:ee:
e5:62:dd:54:88:c1:d7:69:46:59:06:1e:3a:b8:d2:75:7f:69:
af:4a:da:10:a1:42:3e:11:ab:37:4f:0b:fc:37:67:6e:d5:e5:
f3:73:5f:f4:72:eb:50:d6:38:0e:ea:bc:70:99:1f:db:7b:88:
ef:de:1f:69:2b:fe:79:8a:b4:dc:05:1a:21:ce:55:db:72:b2:
e0:e5:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:27 2026 by rpki-client