Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: /MikPi2i/7vhshO/ZrItwP+b7EQui3W/HlOegHTdoyw=
Subject key identifier: E0:E8:C1:69:F6:30:87:D0:06:47:22:68:61:11:4D:B2:12:3A:92:26
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 019D38D302C5082B913D00DE0309CB069D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: 0PMDs04aOHOaMvFVCIFfOyAp44ub8tL469LYXjaMSOY=)
2: e8E7CZUAUckXh4bcKKwuRzIom-U.roa (hash: lALjysVYHSzqDpZrz4VJufsPGn7d6TgnW+zEsP4UHHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:02:c5:08:2b:91:3d:00:de:03:09:cb:06:9d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=e0e8c169f63087d00647226861114db2123a9226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:90:db:b7:11:73:7e:33:67:0d:d8:37:cc:
0b:79:c6:af:07:5b:56:ba:c4:00:40:19:71:2b:4d:
29:10:9b:26:50:36:2b:c4:cc:cb:e1:16:b6:96:89:
9d:e6:1f:bb:ac:a7:41:8e:a8:be:b2:2a:6a:d3:03:
8d:69:4e:dc:a7:2a:7c:20:98:fe:93:50:c1:1a:85:
c5:1c:96:da:5c:8e:74:06:ad:b3:3d:24:a9:e1:ab:
94:5a:54:8d:b2:6e:81:52:46:2b:13:eb:69:b1:80:
57:75:b6:74:8b:90:ac:a0:3e:6d:ab:a5:1d:80:14:
fb:20:03:ff:4e:56:29:f5:a0:68:fc:36:a6:e1:28:
66:76:74:98:5c:fd:d0:a4:e1:d5:ca:d1:02:c8:15:
84:cf:93:5a:f3:49:a1:92:c0:5b:dd:30:40:ef:52:
b3:23:70:50:9b:a6:e1:fa:48:e2:ce:65:0f:f2:fb:
01:1f:b0:84:4e:f6:62:40:92:7a:62:80:1a:b8:1a:
26:ce:7d:fa:57:34:dd:88:90:5e:df:2f:c1:56:21:
74:b2:b6:fe:0d:f3:5c:6b:82:64:31:cf:0d:f4:cd:
ab:6d:00:52:9d:3e:fa:1e:99:bf:77:68:0f:69:f3:
55:33:79:58:15:09:4f:67:56:06:23:9a:41:44:06:
39:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:C1:69:F6:30:87:D0:06:47:22:68:61:11:4D:B2:12:3A:92:26
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:df:18:d7:5a:9d:ac:95:79:8d:e1:c5:c5:e9:13:7f:a5:5e:
0c:db:ea:d8:78:92:b3:b7:b7:b8:80:50:32:47:f3:02:66:e5:
3e:98:bb:a2:df:e6:eb:b1:91:04:28:60:85:29:f5:2b:9c:31:
38:ea:77:86:b6:c4:dc:4e:16:fa:8f:f4:02:c7:fb:d2:09:f8:
31:05:2e:c3:9d:ee:56:89:b9:7b:53:2a:ee:d7:42:ae:a1:08:
b7:b8:72:12:dd:21:92:1b:4e:64:c9:05:0b:b6:f4:5c:81:b3:
57:15:84:54:16:29:a0:b7:0e:e2:50:6b:9f:e9:95:33:e1:1a:
3a:d9:a5:35:a0:17:5c:df:8e:7b:1a:3b:9e:f7:5b:6e:3c:c4:
da:02:15:7d:b1:b1:65:fd:4d:fa:d4:b9:20:52:62:dc:27:af:
03:b3:c4:2c:93:c9:3c:37:7c:21:fe:53:90:1b:33:60:56:70:
6f:c5:7b:18:39:3e:9f:46:f8:b0:6f:48:c1:d5:97:d4:b4:ad:
30:00:4b:b0:db:e9:ec:a3:78:e3:96:67:9e:7f:41:07:ba:23:
c3:45:06:b3:ca:1c:17:d6:35:cf:e0:ba:e1:1f:c0:85:0a:f7:
c9:d0:0f:3a:b1:eb:40:8c:e7:2e:4a:bf:55:64:10:2a:da:1a:
d0:ea:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:58 2026 by rpki-client