Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
File: bacdwHnJ2MLSAprWQOejv5f03O0.mft (raw, json)
Hash identifier: bvTg18Y0/Rmo3foFwP0wq7y6G8yJ2PVltot2Fs8BaFk=
Subject key identifier: AE:FD:CD:D6:6A:84:8D:F8:21:5F:E6:93:27:91:B1:BE:81:4B:1F:6C
Authority key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
Certificate issuer: /CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Certificate serial: 019D39AF3C78B966C3EC3FD25FCC6CD2CBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
Manifest number: E3
Signing time: Sun 29 Mar 2026 13:01:18 +0000
Manifest this update: Sun 29 Mar 2026 13:01:18 +0000
Manifest next update: Mon 30 Mar 2026 13:01:18 +0000
Files and hashes: 1: bacdwHnJ2MLSAprWQOejv5f03O0.crl (hash: oef5gUDKuBYc+AtRI7KKqO5lhvmf5AUivJpJH+GkrSo=)
2: m_JOw_BMf-g5adkXcQ6dxPM0VUs.asa (hash: CNlwVMNpgukBKhCpFpqc+T+gnYp6AeSXdG0LEiF4vbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:3c:78:b9:66:c3:ec:3f:d2:5f:cc:6c:d2:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Validity
Not Before: Mar 29 13:01:18 2026 GMT
Not After : Mar 30 13:01:18 2026 GMT
Subject: CN=aefdcdd66a848df8215fe6932791b1be814b1f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:cf:69:a5:87:25:05:94:1e:86:54:50:c7:
f7:77:de:f9:49:ef:6d:b0:40:47:c2:98:6c:f6:f8:
e4:07:52:5d:8f:f0:9d:29:23:af:e6:a8:2b:7f:b6:
d3:35:cb:49:95:b4:0f:16:b0:cb:e3:a4:f7:18:18:
63:60:b0:f2:f2:56:92:fc:36:06:f7:c9:45:54:91:
fe:89:f2:f6:2e:cf:5d:50:20:f6:e4:81:34:41:f3:
1a:0f:48:28:cc:4b:11:0e:58:57:94:c5:5c:7c:54:
b3:f4:92:cd:a5:03:c7:a5:a2:73:34:0f:bb:f2:fe:
43:a0:c9:9a:db:82:71:50:c1:83:ab:97:0b:b1:cf:
b3:8e:3b:cd:cd:bb:5f:b1:5d:c3:b2:03:25:eb:00:
e1:c8:7f:dd:54:cf:74:07:ee:98:dd:19:d0:d0:f9:
57:19:0e:f7:47:4e:57:f7:be:07:7d:a7:ac:57:5f:
c6:de:1a:d3:be:ff:0b:de:0d:95:6c:a0:ec:e6:a8:
51:d0:31:da:bf:3b:28:72:01:72:f7:5e:e8:c8:77:
e6:19:a9:b8:a2:c9:84:90:74:28:62:ec:b4:3d:e1:
13:f6:05:f4:3b:9b:de:a2:7d:30:63:af:3b:11:59:
80:9c:18:b1:41:f6:78:ee:70:2b:3e:35:80:64:b2:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FD:CD:D6:6A:84:8D:F8:21:5F:E6:93:27:91:B1:BE:81:4B:1F:6C
X509v3 Authority Key Identifier:
keyid:6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f2:19:ad:e3:9c:90:d4:b8:5f:25:3f:98:0b:87:7c:ac:2f:
b3:58:ed:05:87:c2:60:06:2c:b4:85:e5:f2:e3:07:6d:88:66:
f4:cf:03:6c:30:03:93:42:8b:07:65:e3:11:f9:af:e7:44:6f:
bb:e6:a8:fd:24:77:ab:c1:0d:31:6d:2b:2a:ba:55:f3:ee:fb:
44:37:1f:60:40:61:70:24:86:55:8d:a6:af:f9:6e:8f:74:91:
b4:d9:00:22:1d:5c:40:4f:1b:3f:4b:68:22:45:72:95:40:e2:
46:5a:6b:5b:01:a5:1f:f4:73:3c:89:8d:15:01:47:53:d4:44:
32:ce:bd:6f:2e:d8:d8:48:43:fd:3a:9a:2e:80:a3:25:20:58:
aa:93:74:75:e3:65:c5:3c:84:fa:ad:85:c6:dc:bc:da:0c:e2:
cf:65:7b:da:6b:c5:22:a3:1b:49:11:04:2c:90:c6:e9:8c:c5:
b7:e9:13:3a:11:d1:b3:85:1a:4c:53:62:17:88:11:bf:a9:c5:
7b:dc:b9:ca:6a:65:a7:4e:3f:90:97:c6:fe:4f:6b:7a:52:70:
4a:9d:e4:0e:9d:ea:8e:12:d6:cb:3a:5a:07:50:f8:db:d8:25:
65:e9:96:02:85:5f:c8:e8:f7:ad:f9:fd:b4:fe:2a:9a:d7:ea:
a9:e2:41:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:48 2026 by rpki-client