Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: XO97FYe7gMcpOX23Ew1ZeqsjMadFo5r02dL1mxRz2VE=
Subject key identifier: 00:BA:12:7F:49:D7:E0:42:6B:D0:93:EA:8D:0F:61:57:BD:6B:CF:57
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019DCDF5667E0AA15EB76857CAECC9E5355A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0A4B
Signing time: Mon 27 Apr 2026 08:01:45 +0000
Manifest this update: Mon 27 Apr 2026 08:01:45 +0000
Manifest next update: Tue 28 Apr 2026 08:01:45 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: +5sVdgQ+Y7XXZb5PDLeSm5v0WPp266Si54znnwl49NI=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:66:7e:0a:a1:5e:b7:68:57:ca:ec:c9:e5:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Apr 27 08:01:45 2026 GMT
Not After : Apr 28 08:01:45 2026 GMT
Subject: CN=00ba127f49d7e0426bd093ea8d0f6157bd6bcf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ea:02:ed:3d:55:d0:5c:e2:02:6f:ae:01:e7:
7f:66:8d:51:98:42:07:3a:bc:b9:b7:46:00:df:00:
77:ef:49:bc:8e:35:44:c5:62:95:f0:d0:6f:cf:44:
d1:15:76:0d:8a:7f:b5:51:82:cf:fc:b7:c6:01:90:
f1:21:e9:47:e9:62:75:21:14:46:04:2d:48:53:c7:
7e:80:5f:50:08:d2:dd:8d:fb:45:19:15:8e:8b:cf:
bd:04:fc:dd:a6:26:48:76:cd:b7:39:3f:29:bf:aa:
a1:05:ab:82:05:56:be:aa:b7:7c:34:a3:62:d7:81:
7a:58:af:e7:83:f8:a8:32:0e:21:52:13:21:f6:4a:
f5:d1:44:98:a4:e9:8b:83:22:9f:33:41:9a:01:ef:
7c:7b:65:ff:07:ca:8f:4c:5b:b9:6b:b7:eb:48:aa:
63:b8:7c:b8:61:66:62:b4:35:f7:08:18:50:78:08:
14:a0:ab:ff:65:90:bd:b4:01:1f:31:e6:59:0c:9b:
5f:68:cb:f2:ef:ca:ae:16:62:2d:84:01:95:77:68:
b9:1d:3b:e2:79:42:ae:93:b8:c8:b6:27:12:9f:33:
d6:d7:d6:a4:bc:dc:36:70:7e:36:41:b9:3e:78:4e:
a1:b0:41:26:4a:b0:17:5d:17:a1:ad:3f:c3:6d:3b:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:12:7F:49:D7:E0:42:6B:D0:93:EA:8D:0F:61:57:BD:6B:CF:57
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:e9:6b:04:8d:7c:f3:55:e7:61:9a:51:50:c4:9a:8c:b4:
b1:e7:b4:5e:bd:e5:af:f6:b5:11:9f:b7:ed:cf:96:ae:53:0e:
76:f8:fe:f3:a1:5a:d3:90:61:54:ea:dd:ad:6b:1b:f9:11:b8:
0b:0b:0e:74:11:98:7d:6d:11:0b:90:e3:2e:36:71:26:0b:76:
d7:27:2d:0a:b5:61:7a:b5:2b:bc:a9:a5:12:ee:1b:d3:99:de:
76:3d:6e:b3:52:7e:4a:c1:e4:27:8c:0b:92:88:0c:82:62:a2:
37:01:c8:f6:76:da:9a:e9:e2:53:07:12:fd:c2:cf:f1:f5:54:
1b:21:d1:2e:be:a0:da:81:eb:22:ac:a4:4c:eb:7e:38:52:e9:
bd:61:88:ea:05:00:c6:90:6b:e5:79:be:a6:24:93:94:f6:5e:
bb:b1:98:79:e4:b2:af:4b:51:6b:f5:6c:ca:d0:eb:f3:ed:8c:
ef:f0:f0:ad:f6:b8:2d:b9:38:b9:9d:c2:46:59:9b:d1:30:71:
b7:62:f1:a8:a8:64:21:4e:66:8b:41:9a:e3:43:2a:b2:9d:5e:
d4:cd:fa:12:6c:72:ce:9e:de:e7:81:fc:e8:77:7c:f3:40:db:
5e:c2:9a:80:3a:22:c3:97:d3:48:02:7b:fa:08:56:7a:23:7d:
4b:89:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:35 2026 by rpki-client