Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: XyI7G3o/INqfVCHqKU7R7E/gGW7czPlYrzbzTVYH7Uo=
Subject key identifier: F5:18:F0:61:41:D0:F0:51:5A:8D:31:97:D1:B7:F8:31:CC:39:00:E0
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019CE4482E4E8AC4DB920DF6778CC0995312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 09D2
Signing time: Thu 12 Mar 2026 23:01:01 +0000
Manifest this update: Thu 12 Mar 2026 23:01:01 +0000
Manifest next update: Fri 13 Mar 2026 23:01:01 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: bloDKNx4+f1634QiqXD3NsH35p/mb9rkoGlZ3F+BF60=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:48:2e:4e:8a:c4:db:92:0d:f6:77:8c:c0:99:53:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Mar 12 23:01:01 2026 GMT
Not After : Mar 13 23:01:01 2026 GMT
Subject: CN=f518f06141d0f0515a8d3197d1b7f831cc3900e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:89:ee:85:6f:96:f2:a6:43:59:81:c8:c4:
09:29:7b:15:f8:20:81:78:f4:c1:ea:ab:47:43:8c:
61:94:e7:ef:a9:c3:6c:99:d5:75:6a:f0:7f:7d:2b:
7e:0a:83:53:aa:4c:56:55:60:bf:ba:a4:b6:0f:53:
f8:f5:78:cd:39:ae:f4:a0:2e:9c:51:ee:67:60:a4:
24:5d:a1:bf:ca:92:83:27:60:1e:53:32:50:e4:e2:
45:05:0f:be:7d:b2:c3:7d:ee:a9:19:0a:5b:96:c7:
a6:c1:30:45:96:30:56:3d:06:83:dd:df:0f:fc:ae:
0b:1f:54:15:2d:f8:8d:83:50:26:64:2a:3d:17:1c:
52:a5:a2:4b:ce:ae:8c:62:86:bf:1a:86:de:cb:35:
24:31:36:4c:60:f7:e5:0e:67:32:9a:7a:74:5b:77:
5e:69:bb:a1:ce:89:b4:44:5b:4d:68:74:62:78:ae:
44:74:b6:2e:5a:68:df:93:7b:b1:27:bb:07:37:42:
6a:83:5e:2f:4b:d7:ad:5c:58:cd:5e:0c:41:17:cf:
bf:45:9f:d0:fb:4c:2a:ec:9b:2a:6e:be:ab:6b:38:
b3:85:81:04:b2:0f:9a:2f:5a:85:80:48:39:a6:a6:
33:37:83:e9:eb:e2:b8:55:42:cc:81:81:bc:0e:3d:
15:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:F0:61:41:D0:F0:51:5A:8D:31:97:D1:B7:F8:31:CC:39:00:E0
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1b:d4:99:98:cc:52:6e:b6:dc:10:4a:f0:1d:1e:f2:32:fc:
45:84:ca:fc:01:01:4d:c5:eb:eb:35:e2:46:37:4e:73:65:eb:
0d:c3:24:7f:56:ee:0a:b8:97:ec:06:c5:55:e3:e8:09:39:54:
e4:6b:d6:aa:72:f4:6b:0a:11:7b:97:c1:9f:44:92:d6:da:a8:
41:7b:ba:f5:91:de:4c:a2:d9:df:39:27:1c:15:3d:72:da:86:
20:a3:63:ba:b4:fd:13:9c:bd:f5:49:fd:27:58:13:d2:37:48:
48:8d:80:df:8d:dc:4d:17:95:ec:a8:26:b0:17:dd:64:c5:51:
59:b9:4b:09:ab:90:40:8b:67:95:49:6a:f0:e4:fd:7f:60:a0:
2a:91:0e:1d:2f:03:95:10:71:e5:dc:12:f6:69:fb:71:f6:88:
21:62:da:14:98:50:f8:72:cf:ce:9e:4d:db:f8:c5:03:7a:56:
36:5c:09:d3:30:b8:ef:b6:42:1d:1c:87:58:f0:b5:72:5a:77:
12:f5:3a:99:a0:d6:2d:f6:4b:5f:80:1f:8d:97:0e:36:7a:d5:
4d:4b:e1:e3:96:78:22:49:ef:c1:7b:d5:ef:3f:9f:e7:c9:56:
e7:67:24:36:0e:3e:dc:8b:ce:b8:43:41:20:8d:77:d5:db:e6:
9a:23:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:00:34 2026 by rpki-client