Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
File: b1GlChfEHhkEHD-xCwqDkielyQU.mft (raw, json)
Hash identifier: JPMJ0hk63YZ4PEusQHkpx6fxl8SpCfoNHeDDprwoqdg=
Subject key identifier: D1:EE:80:D3:50:09:C0:E2:9E:CA:E5:71:F7:04:2F:D2:61:5A:F8:91
Authority key identifier: 6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
Certificate issuer: /CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Certificate serial: 019D371B4BCB6342BEBD18BD7BA73C84F219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
Manifest number: 0E
Signing time: Sun 29 Mar 2026 01:00:28 +0000
Manifest this update: Sun 29 Mar 2026 01:00:28 +0000
Manifest next update: Mon 30 Mar 2026 01:00:28 +0000
Files and hashes: 1: PZMuJ8QpgBXhv1xbGqZzJ29BgDQ.roa (hash: jrIRAMtDwbYUDnGzpj0BHU287oxSgfwbWoyH7EMZ7jI=)
2: b1GlChfEHhkEHD-xCwqDkielyQU.crl (hash: SUSqfmEl5tLYkK/yNF93MtaPwPR5O/F5EEgMb5DfcqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4b:cb:63:42:be:bd:18:bd:7b:a7:3c:84:f2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Validity
Not Before: Mar 29 01:00:28 2026 GMT
Not After : Mar 30 01:00:28 2026 GMT
Subject: CN=d1ee80d35009c0e29ecae571f7042fd2615af891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:82:23:17:8e:98:6f:43:d2:af:91:7b:83:
7b:39:63:76:ae:28:3d:fb:30:db:2b:db:c0:13:8c:
d9:a8:6a:10:f5:c2:ad:a0:91:bb:cd:7c:82:e0:5c:
aa:d2:be:47:fe:df:ae:b4:92:08:23:4b:6e:36:08:
fb:ed:2b:1a:72:4b:35:57:97:ea:42:9f:c9:d2:82:
4a:af:c8:92:a7:38:9f:10:3d:b7:7f:6a:13:5a:20:
1c:8f:a4:4c:ee:c1:9c:5c:c9:83:b5:f3:2b:94:32:
bb:e3:e0:af:af:4b:ba:27:84:8f:86:3e:09:13:e9:
eb:0e:73:95:0f:52:8a:75:1a:92:85:f0:c6:45:71:
4d:fc:dd:4a:63:4f:d9:9a:e7:17:2e:b1:26:42:be:
fe:f0:4f:be:f7:6d:fe:0c:60:0a:40:80:dc:b6:66:
11:1e:ca:16:21:88:b0:e8:96:bf:89:93:78:5e:1a:
9b:44:20:c0:aa:89:20:bc:8b:6b:e1:1e:91:6f:26:
97:7d:b1:04:0d:07:6e:c2:2b:29:ef:29:5c:bc:32:
20:e4:28:7a:d5:20:fc:b7:99:f5:d3:28:34:c5:3d:
55:59:15:dd:e4:c3:15:22:f6:aa:6b:42:c9:bf:00:
c7:52:b6:2a:39:d1:65:ad:75:01:ca:d6:cf:00:a4:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:80:D3:50:09:C0:E2:9E:CA:E5:71:F7:04:2F:D2:61:5A:F8:91
X509v3 Authority Key Identifier:
keyid:6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:e3:f6:a8:d1:ef:14:09:f4:a9:e1:e6:fd:73:d6:d0:56:
8d:86:b0:55:04:6c:5e:5e:6a:08:a4:49:ca:78:8c:38:5a:a1:
f2:9f:8d:db:db:df:65:3c:07:ce:46:12:87:c6:86:a7:bb:93:
59:f1:d5:74:3a:db:16:b2:49:06:19:b8:cb:4b:60:60:ea:ca:
e6:d4:dc:1f:7f:7e:46:d4:3b:4c:99:45:1e:ba:9b:a4:af:98:
9e:b3:bf:e0:60:79:89:e7:ca:8f:07:d0:cb:0b:0c:00:dc:2b:
a4:f9:df:5b:79:65:8a:cf:9e:7c:06:23:a8:4b:2d:8c:18:49:
95:42:d4:28:02:de:bc:d5:ba:83:15:b7:78:8a:4b:00:b3:92:
d5:df:e0:59:ef:e5:57:8b:a3:bb:cc:4d:15:5a:ba:05:61:3a:
98:1c:55:bd:37:79:ff:01:bf:34:05:df:16:5c:93:c3:28:bf:
94:e5:db:03:81:8c:f0:75:92:d5:71:4f:9b:75:45:d3:70:43:
cb:58:7b:be:53:dc:ab:13:2a:a5:06:39:37:55:22:70:16:bc:
3a:3f:bb:72:c9:a1:9b:2a:fd:2b:b3:1d:7f:af:43:d1:17:ca:
b6:e0:e3:0f:27:6d:fa:5c:fa:9c:ba:9b:34:c2:b4:f0:29:4e:
49:5b:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:13 2026 by rpki-client