Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
File: bQ1uHM2JDfL16cFF7LpGiZzOs70.mft (raw, json)
Hash identifier: wBAj2VIemJ2OW+4kq7q+T8XGS7UwUNvPkTdAd4uKzts=
Subject key identifier: 7D:5D:57:E3:89:AC:83:CB:EB:96:D8:58:2E:E4:78:13:1E:84:C7:E3
Authority key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
Certificate issuer: /CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Certificate serial: 019D36E5589F84FCD1D5B4E4D6851B583AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
Manifest number: 151E
Signing time: Sun 29 Mar 2026 00:01:33 +0000
Manifest this update: Sun 29 Mar 2026 00:01:33 +0000
Manifest next update: Mon 30 Mar 2026 00:01:33 +0000
Files and hashes: 1: bQ1uHM2JDfL16cFF7LpGiZzOs70.crl (hash: wqMI+2ALvxa2iYPTAsMot7ckHiihZ9xDOkLBFXtBWJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:58:9f:84:fc:d1:d5:b4:e4:d6:85:1b:58:3a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Validity
Not Before: Mar 29 00:01:33 2026 GMT
Not After : Mar 30 00:01:33 2026 GMT
Subject: CN=7d5d57e389ac83cbeb96d8582ee478131e84c7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7c:06:3a:a3:6d:12:01:a1:2b:7b:5f:22:a2:
fd:cc:78:b1:7e:8b:6f:09:88:6c:bc:be:4d:3e:9f:
a8:c4:04:24:30:99:b4:43:ec:45:67:22:98:fc:9c:
3d:e6:f1:c4:b3:5e:bf:31:46:7a:b3:c4:a6:51:e4:
f3:5b:30:b5:1b:b9:12:84:62:7a:5a:cb:06:88:bc:
aa:ce:ad:43:48:33:3a:88:f0:3f:dc:97:de:f9:1a:
d0:67:41:11:73:f7:3b:f5:cf:b9:ff:4e:d8:85:d6:
48:19:f0:1c:3a:de:de:18:58:53:17:d5:be:6c:25:
63:3b:3b:a4:42:23:7e:33:d9:17:cc:7c:d2:42:24:
32:5a:e0:b7:01:bd:ba:bd:87:02:42:d3:56:7f:e9:
3a:30:cd:86:29:d9:87:8f:c2:4d:f9:25:59:ca:5d:
0b:63:03:d3:a5:05:dd:d7:f4:28:90:80:c4:25:70:
76:3c:93:5a:8c:23:fe:a6:9c:95:25:cd:1d:28:92:
ed:5d:b3:e5:39:68:b9:b0:e1:b6:62:9e:5e:ba:c2:
ae:73:13:a0:81:33:4a:66:e0:df:a9:89:fc:92:ec:
12:19:a1:e2:e2:90:e0:65:e2:f2:8d:d4:b5:1f:86:
91:6e:33:51:a3:2d:85:79:3a:ba:60:65:02:3c:a2:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5D:57:E3:89:AC:83:CB:EB:96:D8:58:2E:E4:78:13:1E:84:C7:E3
X509v3 Authority Key Identifier:
keyid:6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:94:78:37:97:a1:6a:0f:20:ae:dc:e7:08:16:03:34:9e:
76:dd:38:3f:71:88:d1:aa:df:a3:79:74:36:06:82:c7:5a:8c:
78:a2:10:df:0c:e0:26:e1:d9:18:fa:b4:a3:9a:20:71:c1:fe:
94:f6:55:5a:2a:19:95:db:22:99:37:d6:a5:cc:ea:cb:4d:78:
11:18:c8:32:45:0f:e8:a1:9c:13:99:a3:ce:43:06:ce:4e:c8:
7f:49:46:d3:16:36:73:9c:07:0d:af:a9:9e:41:d3:5d:28:d8:
5d:b9:d2:91:e0:32:17:26:ca:f4:b8:72:d3:99:14:3e:83:b4:
cb:70:2b:70:0e:c8:40:3b:29:00:a6:18:0c:db:d0:7d:23:bf:
f0:2d:18:56:d2:94:b3:af:2a:65:3d:7a:4c:a8:f0:c7:42:7c:
8a:1d:d4:90:20:c1:b9:70:31:1d:46:7a:cd:04:8b:bd:3f:bb:
44:e6:fa:01:ad:26:90:c8:5b:29:36:ea:86:3b:68:fd:b9:c6:
b9:75:06:41:07:d0:f4:4a:f5:af:5d:71:8f:c4:2c:6c:ef:a6:
b7:91:d7:33:11:dc:d9:5a:b0:9e:8f:a5:e7:7e:27:27:65:e6:
90:80:1a:ff:a3:42:35:25:77:57:fb:f6:46:e5:32:7c:7c:8b:
a5:65:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:10 2026 by rpki-client