Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
File: bW812JkKeylMRTlW4OgkLAqssDE.mft (raw, json)
Hash identifier: jz2o8Vv+yrp75k4KClcSWmcgMbY6DPw5R4bRnfFwwLg=
Subject key identifier: 3F:D5:81:CC:0A:E4:5B:20:19:AC:5E:2B:EF:B2:C3:08:99:24:AB:BD
Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Certificate serial: 019D382E98F03D459FF2547C84B94F98D75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
Manifest number: 0132
Signing time: Sun 29 Mar 2026 06:01:11 +0000
Manifest this update: Sun 29 Mar 2026 06:01:11 +0000
Manifest next update: Mon 30 Mar 2026 06:01:11 +0000
Files and hashes: 1: _NwNsp9b9uhvyyyQcxAfQ3IS8fI.roa (hash: Ttx9R/0zVGUKZuQJ7g+6z7yt6OgTL+9nJFIi7ROKEa0=)
2: bW812JkKeylMRTlW4OgkLAqssDE.crl (hash: UrpUmMC2mBDfaovdFkgH06Sximcpqrr9yRat0yrTn4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:98:f0:3d:45:9f:f2:54:7c:84:b9:4f:98:d7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Validity
Not Before: Mar 29 06:01:11 2026 GMT
Not After : Mar 30 06:01:11 2026 GMT
Subject: CN=3fd581cc0ae45b2019ac5e2befb2c3089924abbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:90:cf:13:8d:b8:bd:30:cb:37:70:e7:d1:
b5:8e:bc:03:b8:4e:97:bc:35:35:3e:2d:57:eb:36:
38:2d:96:84:ff:3a:88:b1:28:f1:6a:bc:7b:db:c2:
8d:19:02:fe:3a:4a:24:6e:4d:13:26:d1:0c:66:1a:
77:5b:da:a9:49:39:24:8a:b9:53:e3:48:1f:cc:bb:
52:d6:07:d7:36:59:b3:ce:71:69:f3:c6:4c:75:a8:
57:c6:59:0d:53:c7:ac:48:6b:1d:34:41:19:c9:09:
fa:51:d0:c6:91:94:62:59:52:bc:47:df:c9:9e:4b:
c8:13:75:1a:8a:e7:cf:d8:26:02:c3:54:fc:cf:52:
db:06:df:e0:f7:3f:b4:97:25:d6:36:5c:74:9b:25:
89:03:ba:a1:45:1a:29:a3:f6:9d:f4:7f:f0:f2:1b:
27:99:cf:ab:52:ba:50:03:24:17:af:11:55:5c:55:
8b:3c:ab:c5:a0:81:63:57:12:d2:25:86:15:65:f3:
36:da:d6:73:98:39:f1:2b:3f:b3:d3:eb:92:01:1b:
43:8b:4f:86:df:7a:82:28:a3:11:78:e1:ba:a9:f0:
d7:37:1e:e8:83:e1:d5:6a:37:21:40:b9:0e:0f:f9:
3f:ca:88:4b:85:d9:b8:c6:13:15:4c:99:33:fb:f3:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:81:CC:0A:E4:5B:20:19:AC:5E:2B:EF:B2:C3:08:99:24:AB:BD
X509v3 Authority Key Identifier:
keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:75:19:6e:76:f4:61:c6:52:4c:7c:12:6f:fb:21:b5:ed:2b:
06:fe:a1:b9:49:73:dc:b9:6f:bc:36:b5:17:54:51:d8:40:c9:
6a:6b:1a:7f:6b:2b:c2:41:a1:52:09:84:b8:82:48:05:39:35:
1b:2a:9b:89:9f:ef:ea:ef:c1:45:98:20:74:54:49:fc:6e:37:
97:c7:f0:b7:69:93:e3:c2:b1:ea:95:fe:82:cd:dc:2d:81:26:
7c:c7:90:ed:ee:9e:27:74:b7:9f:0d:97:d3:3b:9f:6b:8c:04:
54:f7:96:1e:e2:5b:32:44:22:b0:f7:4a:6d:ea:6d:4b:d5:83:
06:a7:10:4f:0b:0e:59:82:f3:87:15:16:4e:a0:19:a0:1f:7a:
56:c8:82:b2:be:7e:39:04:21:ea:dd:d2:95:dc:ee:76:3c:ff:
ef:e8:18:33:30:a8:b1:5c:9b:02:37:6b:4a:2e:ae:4c:40:66:
15:b6:b8:fb:37:68:17:84:c6:24:49:77:ea:2b:11:26:bc:ec:
79:94:13:89:ae:13:9a:fb:44:e3:fb:31:fe:86:25:20:0d:d5:
6a:e5:f1:0e:6e:48:1c:ee:55:7b:df:e0:88:60:1a:bc:99:78:
0e:eb:2a:80:ec:56:a7:91:28:8d:51:e9:0c:54:5b:50:f6:ac:
43:4d:7f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:14 2026 by rpki-client