Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: KS8M9/l3DCcNMqxRqKirIviapFmYFmY8zIk2jtT1FOU=
Subject key identifier: 95:77:9A:A3:B2:F7:88:94:29:44:92:2B:DF:7F:A6:90:86:6D:FE:C9
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 019D3940C1B380F7C91FC1B34447017CF9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 12CB
Signing time: Sun 29 Mar 2026 11:00:38 +0000
Manifest this update: Sun 29 Mar 2026 11:00:38 +0000
Manifest next update: Mon 30 Mar 2026 11:00:38 +0000
Files and hashes: 1: pBZly4FM6dBwlJDuWkuLuvUQhJg.roa (hash: o71HDV8s+9P3IJ7RipmOqIZNCQQ65Mxlc2gRRdwJM+c=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: 0u9mCjLkoyuOJcN4Cq6KF8F2RoRbAL/2FRBHdo2MoXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c1:b3:80:f7:c9:1f:c1:b3:44:47:01:7c:f9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Mar 29 11:00:38 2026 GMT
Not After : Mar 30 11:00:38 2026 GMT
Subject: CN=95779aa3b2f788942944922bdf7fa690866dfec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:ff:64:53:73:85:c0:82:20:4c:34:be:a4:
f6:30:2e:39:92:df:e7:f1:1c:f4:b4:35:33:1e:ad:
1a:dc:aa:57:76:f4:a2:e3:36:1b:89:10:0d:0a:7d:
d8:b3:f2:ed:86:82:57:f6:10:1e:b1:af:9a:0f:27:
1b:11:79:f8:9d:0f:b4:b4:55:b5:71:60:06:e3:25:
be:41:d0:9b:34:98:dd:8d:db:47:2f:8c:f2:be:91:
54:04:57:e5:fc:f4:c8:53:cc:e1:67:63:c7:92:bf:
b1:54:36:0a:00:53:77:28:c2:fd:88:c7:ca:a4:13:
91:f8:b3:85:68:b3:f6:a1:37:1b:c2:f2:f0:4f:10:
34:8b:ea:9f:59:45:e1:dc:f5:d6:5c:f9:ad:85:ea:
43:cf:df:a5:ad:13:2a:e5:ba:4d:a6:94:ca:ed:50:
82:3a:e3:37:36:ac:5e:b1:6f:a6:ec:43:f7:ee:0c:
1c:9c:64:41:14:7c:25:69:cd:ff:82:2d:7c:4e:6b:
61:c0:f9:c9:b4:34:e3:93:d0:15:71:96:64:8f:ac:
90:14:3f:36:4d:89:41:a9:01:20:c8:af:80:f6:69:
c7:bb:1d:f5:8c:9c:1f:04:27:e9:bb:f3:e7:c1:20:
ab:c2:22:fe:61:1b:f0:6a:17:05:0c:7f:df:07:fe:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:77:9A:A3:B2:F7:88:94:29:44:92:2B:DF:7F:A6:90:86:6D:FE:C9
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:2d:6a:2c:a5:cd:1a:16:ef:da:b7:88:9e:9d:79:01:fc:
9f:dd:b2:c7:9d:62:32:58:c3:89:ab:be:3b:14:41:f3:e8:55:
77:4d:01:d5:7a:93:ce:4e:06:1d:b8:e6:df:34:be:46:05:e4:
26:eb:ea:56:bf:a1:a6:0d:ed:30:93:fb:ac:04:ed:6a:07:57:
91:68:ee:68:da:78:df:e1:81:e9:11:76:2b:04:66:15:da:51:
ee:1b:38:30:52:04:48:a6:b3:94:d7:ae:f4:08:ae:23:1c:e8:
5e:00:48:1c:d9:02:79:6f:95:96:f5:6c:5e:41:b1:a7:fc:ca:
aa:25:81:12:6f:1f:4f:b3:37:5c:f6:52:11:51:d2:ce:52:94:
17:0b:b4:35:a9:70:50:85:e4:ea:05:f1:14:a2:37:d1:1c:39:
18:7a:a0:66:fd:0c:0b:5c:63:de:82:55:5c:df:bd:d1:d5:98:
3a:e0:f9:57:59:af:74:eb:7d:b5:fa:82:d7:96:da:9c:79:ca:
1e:ae:a9:70:1c:03:bc:64:68:ba:69:b3:c9:81:52:89:8b:55:
88:46:dd:01:e3:cf:5f:c0:8a:5b:04:95:fb:e2:e6:bc:9d:cd:
aa:d8:73:38:22:b2:14:6e:31:ce:d6:b9:89:1f:da:9f:42:37:
b5:10:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:26 2026 by rpki-client