Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier: rAsi5hedWVlFQDuVo/KHdr84Yd2yOlIbST9mONmUmd0=
Subject key identifier: 03:2E:93:52:C9:76:D7:C2:5B:31:A5:BA:DE:EC:E3:BE:BA:80:32:D1
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 019D38D30D7889C6028084A3D5A8F5F8431B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number: 0905
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: 4rvg74R2gZlKQSt9MtPUhs19Sxs.roa (hash: aa4t3U7R1vbR/QCIG7/Vzi9UpwOLBuhEx3X56aBs6+Y=)
2: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: +P/4hArrje3HSZXb/nt7uTvtd0C4jO9puDUROD/DLQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0d:78:89:c6:02:80:84:a3:d5:a8:f5:f8:43:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=032e9352c976d7c25b31a5badeece3beba8032d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:ad:b9:a7:ca:cb:ff:68:3c:56:94:51:77:
52:e6:58:a5:ee:a4:21:ff:84:7f:e2:ef:d9:c3:47:
87:db:33:bc:40:fa:b2:03:fd:5d:d1:52:ff:a2:88:
80:15:35:dc:8c:13:ff:cb:7d:0a:26:d9:71:11:11:
bb:61:94:13:e2:3d:33:0e:db:85:f2:aa:61:d9:6a:
c5:9e:92:12:c4:ad:7a:9b:cc:dc:b4:f7:3a:b4:f1:
63:8c:73:6b:c1:d9:55:f6:1a:1d:4d:cb:1b:24:03:
31:11:81:72:5f:62:ab:82:e3:25:e5:f1:5d:a6:d0:
71:e3:e4:20:ea:b4:c5:32:b8:02:e9:f1:fd:4a:6f:
9c:7e:84:43:f4:5d:cc:7a:b7:7a:ca:1d:25:b0:a1:
5b:db:bf:f7:81:ee:72:e9:af:06:4a:32:52:9f:c6:
b2:82:0a:bf:b3:c8:a4:e2:cd:30:db:c5:d9:49:c9:
52:c7:ed:3a:23:80:b7:9c:a1:dd:46:27:00:a2:d9:
8b:28:ce:8e:12:85:3a:30:e0:40:00:9f:3a:da:2d:
d5:4e:75:11:ed:36:f4:11:86:5a:d4:a5:ac:99:86:
b5:4f:11:8e:8a:a4:58:42:3a:9f:1d:a0:92:f8:9e:
ad:3d:36:c4:44:2b:a5:3f:0e:82:af:13:cc:14:0d:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2E:93:52:C9:76:D7:C2:5B:31:A5:BA:DE:EC:E3:BE:BA:80:32:D1
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:5c:c1:64:cc:0c:2f:ad:c0:b9:ca:c8:2c:93:c1:92:51:
dc:28:f2:50:ce:3a:6d:c8:3c:4f:d2:7f:01:27:d6:c3:94:ce:
f5:73:ad:49:f1:b8:56:26:39:7e:48:23:fb:3a:97:90:e6:07:
d6:88:86:35:92:40:93:e1:b2:16:f7:e5:31:90:2e:7e:97:05:
10:fd:4d:8a:a7:4e:ac:ad:cb:6b:b6:f6:51:99:a7:19:da:74:
65:51:4b:4c:3c:26:0c:7f:e5:f1:66:00:61:7d:f4:f2:bd:e3:
86:eb:34:6b:13:14:a6:ea:5c:6a:45:12:f4:c1:82:48:e1:6a:
11:e9:60:a6:d2:54:19:0e:cc:43:8b:d4:70:28:63:f5:9f:7a:
7d:bc:f9:95:bd:cb:ae:e0:dd:fd:c9:06:a2:9c:0b:fa:7d:3f:
9d:0c:ba:7b:c7:8f:dc:31:0f:ff:38:8f:7d:8c:e1:c1:0c:9a:
3e:9e:32:14:d2:e4:e9:a6:26:42:dc:ce:31:9b:8e:f4:d8:c5:
ed:bb:9e:58:4e:4e:84:47:46:47:0d:92:85:17:c9:d6:88:c4:
be:ab:15:c7:89:a0:d5:ae:63:3a:b8:8b:03:a6:ef:b4:59:c9:
79:23:b4:aa:7d:19:41:1e:c4:c6:8d:a2:04:46:55:ef:24:ef:
90:e4:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client