Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: yai7aozQbbOToTDwLGnrPzpEDBpuXYS+xu5eqq6P1HQ=
Subject key identifier: 38:EE:E9:F1:02:F6:68:71:E0:FF:E0:38:22:A7:34:7D:43:E7:D0:1D
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 019CF8AB6594477F4F30D4E1A00A5B3CA3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 17FD
Signing time: Mon 16 Mar 2026 22:01:47 +0000
Manifest this update: Mon 16 Mar 2026 22:01:47 +0000
Manifest next update: Tue 17 Mar 2026 22:01:47 +0000
Files and hashes: 1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: z5ss1AxVojpvLAUD8SJ7OOu/kJIuoq7Ya+QKfJ1bU3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 19:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:ab:65:94:47:7f:4f:30:d4:e1:a0:0a:5b:3c:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Mar 16 22:01:47 2026 GMT
Not After : Mar 17 22:01:47 2026 GMT
Subject: CN=38eee9f102f66871e0ffe03822a7347d43e7d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:a0:71:46:cf:26:2c:ec:0b:36:da:64:27:
eb:43:07:92:3c:6a:6b:7b:ef:f8:cd:bf:42:a9:cc:
d9:e9:c8:39:d8:59:19:d2:b3:78:98:cf:c3:fe:b9:
6c:df:da:12:6d:8a:7d:42:95:fd:5f:1b:99:ba:ae:
b0:7d:c5:5f:a8:b3:e7:c2:fa:b9:30:43:af:62:0c:
87:c3:c7:99:3f:aa:c5:1c:c8:3f:1f:e7:c8:bb:62:
fb:56:30:c3:a5:03:fb:79:9f:3a:8d:86:bb:06:a8:
29:9b:97:ee:05:59:18:cf:f4:d0:db:b4:61:d4:cc:
16:13:d1:59:d4:df:2c:6e:8a:68:dd:70:0f:46:cf:
5f:60:00:53:86:c7:27:98:c2:e6:a4:88:cd:06:29:
5a:10:6f:87:18:1f:fe:f0:8f:db:e1:3c:dd:b4:ca:
90:fd:88:bd:9c:1b:d4:73:4c:af:c3:33:a8:d3:d1:
a8:ed:f8:0d:a2:d6:66:e7:9a:5b:e7:c8:2b:43:b5:
f7:5d:c3:bb:0d:a4:24:57:01:57:7d:f9:54:2f:45:
63:0f:78:21:72:a4:27:e4:42:db:c4:ac:ba:fa:22:
d5:43:50:06:d0:c7:20:bf:26:4f:29:3e:0f:75:9a:
66:f2:97:e3:14:14:1c:67:08:0b:15:c9:84:24:f4:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:E9:F1:02:F6:68:71:E0:FF:E0:38:22:A7:34:7D:43:E7:D0:1D
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:64:23:2f:51:7a:83:c9:f5:dc:90:83:3c:d1:4b:fe:a0:d7:
14:41:85:ad:9a:4b:82:2b:c1:42:61:b2:0d:4d:c7:46:fe:94:
c9:a6:7c:06:65:37:e8:70:55:2a:3e:6c:a4:e4:65:1f:aa:1a:
70:8f:51:20:16:33:29:86:7d:77:08:76:40:0f:e3:f0:a1:e5:
58:fb:bc:e0:2b:ac:ac:e3:77:d6:ad:00:01:ac:2a:2b:75:44:
60:40:c5:48:d0:52:13:e5:57:de:35:6b:c1:2d:11:78:07:0c:
c0:37:cc:68:57:8d:6a:1b:2c:6c:0b:9c:e1:ff:5c:2e:c9:68:
fa:1c:95:c8:30:af:9d:4b:c6:48:6f:40:0e:af:39:fc:04:0c:
1e:85:f0:c4:ed:9f:d9:7b:2b:e1:22:15:6d:5b:db:32:3b:ef:
b4:40:a8:56:b6:fd:51:b7:bf:e7:3d:79:48:a2:59:53:1f:f5:
b0:db:6a:ad:d7:84:6b:3f:bc:3b:9e:62:17:b0:f1:a0:90:14:
b1:2d:6e:d6:82:5b:d5:f9:e5:e0:6f:4f:85:38:ec:8a:5d:f0:
26:e9:f1:f2:37:f4:6d:24:60:8b:83:c4:86:0c:77:f6:16:99:
41:a4:1f:d9:e4:85:dd:e0:f4:2a:a2:8d:16:a9:18:1b:52:54:
10:2a:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 02:05:20 2026 by rpki-client