Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: dVFMZL0offzjbrUAtw3EN+kGBObvJxUDhTPChlvPcdM=
Subject key identifier: 90:1D:B3:56:C0:52:22:12:14:E5:7B:70:1D:F5:36:36:83:66:C8:D3
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 019D39AE6F859755DE38810E7F4DE63AFFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 16EF
Signing time: Sun 29 Mar 2026 13:00:26 +0000
Manifest this update: Sun 29 Mar 2026 13:00:26 +0000
Manifest next update: Mon 30 Mar 2026 13:00:26 +0000
Files and hashes: 1: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: 3fo7Xqn5yo9RPVwY8NgYphSq5Zk+WVHk9QLADlJ9ze4=)
2: pFus08PMDQCfPbxZAkSpS82Y4PY.roa (hash: lAjRzwyi3k9OQRK/TA2meKEJxn+Uz1ODnyqv3gesdQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:6f:85:97:55:de:38:81:0e:7f:4d:e6:3a:ff:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Mar 29 13:00:26 2026 GMT
Not After : Mar 30 13:00:26 2026 GMT
Subject: CN=901db356c052221214e57b701df536368366c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:c3:56:8b:3f:67:aa:0c:3a:c8:34:71:97:
98:6f:a2:bc:09:ca:bc:46:89:65:bc:b6:e2:bc:12:
89:bb:5c:e9:77:0d:97:fd:ac:5f:01:14:75:f3:26:
6f:79:33:95:76:49:a0:54:6b:06:64:02:6c:e8:3f:
f1:12:60:0c:f0:dc:88:19:ca:57:4b:88:70:a0:e9:
bd:a0:4e:e8:66:99:88:39:72:15:8c:2b:0e:48:82:
eb:8a:32:78:1d:35:d0:33:74:cf:80:5f:33:c4:41:
b2:fd:de:90:7b:26:0c:ef:d8:99:15:39:61:90:d1:
8f:8a:d9:71:95:0e:e4:15:7e:24:1a:fc:b6:a1:0d:
36:2b:fe:ce:1c:34:3c:8d:8b:2e:80:41:fc:ee:51:
b7:80:6f:74:04:bd:e7:df:e2:63:26:48:93:c2:ec:
07:be:f9:d5:66:34:75:a6:92:24:8c:79:c7:1f:30:
b1:f2:b0:cb:5b:8e:89:16:6d:c7:16:29:65:31:9a:
9f:0e:e9:52:a0:b7:1b:77:be:17:27:91:97:92:5b:
48:fb:df:1c:14:3f:1d:5c:5a:0d:5f:9b:39:dc:52:
70:44:41:50:6c:9e:16:d9:a8:a0:97:0d:aa:1c:36:
47:01:0e:23:09:81:93:fc:73:64:b2:b9:24:94:3f:
f8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1D:B3:56:C0:52:22:12:14:E5:7B:70:1D:F5:36:36:83:66:C8:D3
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0e:2b:1f:9a:e8:91:d6:e1:87:62:aa:fd:5b:9e:94:a8:51:
97:f4:95:7a:b8:c2:54:95:d1:b0:7a:4d:c2:b1:cc:3a:2a:27:
da:37:52:8f:ec:15:d7:23:be:28:79:74:55:96:7c:a9:c9:95:
83:00:a1:fe:ad:89:97:26:82:ec:c6:12:09:6c:ed:ef:2d:6e:
11:39:43:39:ea:6c:4c:c8:2e:a9:5c:8a:5c:58:ea:43:d1:eb:
31:5c:ad:d3:63:ad:d6:6e:2d:d5:3a:24:c5:11:aa:9e:6e:40:
93:0f:97:30:a6:57:6a:63:cb:f0:b8:2b:03:cd:a7:93:28:0b:
e1:e3:b0:8a:68:99:3b:6d:a8:17:a1:cf:ac:28:3d:6b:94:8a:
17:64:64:b9:fe:4e:26:d3:bc:1d:5e:71:fa:aa:d7:53:73:41:
21:fe:65:a0:4d:b7:07:03:54:d4:e9:c7:bb:1c:41:db:30:ef:
15:5e:43:03:71:9a:2d:42:19:35:54:e7:a8:6c:60:ec:66:86:
5e:2a:8f:e7:12:8d:1b:5d:de:27:7a:14:03:da:20:bc:e2:92:
8d:ea:c1:fc:0b:d6:88:4e:c3:32:02:c9:3e:44:46:9e:86:ca:
2b:d6:24:bf:ad:37:e1:7a:f9:fe:8f:c8:69:a9:10:d1:b8:9e:
3e:70:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:31 2026 by rpki-client