Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: HxpoMngZdcFPCesxED+iCmXtykxXuBKZik3XlesZcfc=
Subject key identifier: 0D:E9:85:E7:58:86:32:E7:5C:91:DA:C1:55:35:0F:D6:58:88:AC:D6
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 019CAC0F9473C4471B11D4709809B7FA7528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0E4F
Signing time: Mon 02 Mar 2026 01:00:27 +0000
Manifest this update: Mon 02 Mar 2026 01:00:27 +0000
Manifest next update: Tue 03 Mar 2026 01:00:27 +0000
Files and hashes: 1: 5yx-LhHh5uIomrp_4UWyJH0BrjQ.roa (hash: my/g78XxKs4ZVLWL7XEbiPiVyaVIQqJmYcRP5qZWpSk=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: WI2XmcxE/qDacFBZ69fyak84IyP+TqIdbme2Q8WcHfE=)
3: yWDf5NXYf3V5C4RXp6kM7vpCi5U.roa (hash: 6+Q3eraszgocMXtLwLNNOidcC+Bf57i8X6gv7LDo3os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:94:73:c4:47:1b:11:d4:70:98:09:b7:fa:75:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Mar 2 01:00:27 2026 GMT
Not After : Mar 3 01:00:27 2026 GMT
Subject: CN=0de985e7588632e75c91dac155350fd65888acd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:b2:7e:31:d5:9a:3c:04:a0:62:c9:fd:bc:
ae:f1:68:97:59:ba:61:93:77:2b:a3:1d:45:b2:19:
a1:db:4a:6d:6f:2e:54:30:50:78:92:46:cf:6f:2d:
e5:44:80:0d:b7:c6:ca:52:8f:43:2c:1b:ca:47:30:
98:e4:31:bb:cc:43:40:a1:3f:75:13:d6:90:4a:1c:
92:dc:63:9d:c0:00:70:4b:4f:4c:8e:c7:6e:91:57:
af:a3:14:79:da:5c:b1:7e:b4:b7:8a:93:92:9d:cd:
a4:3a:5b:56:8e:c6:88:8b:6c:34:4d:d1:dc:0d:1e:
51:5c:7c:c1:f7:a1:58:d3:f0:db:83:c5:c2:c2:e5:
73:41:9d:3f:50:19:3c:ea:ae:c7:1c:88:15:e1:e2:
9e:6a:8b:53:fd:d1:66:e2:33:a8:98:ac:a1:e3:ae:
72:76:a5:a1:34:bf:84:6b:7d:9c:68:44:de:d7:56:
4a:fb:72:9d:1c:71:8b:5e:cd:7d:6f:06:26:ea:fe:
a0:94:1d:09:bd:ec:08:fa:49:be:35:eb:a3:90:24:
df:6a:17:ec:25:4d:37:3a:d4:85:0a:50:4e:38:9d:
69:b6:08:26:e0:c2:11:58:bc:93:73:d5:72:05:aa:
a2:83:86:f5:85:d8:7b:de:0f:73:f7:ba:56:78:27:
15:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E9:85:E7:58:86:32:E7:5C:91:DA:C1:55:35:0F:D6:58:88:AC:D6
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:45:bb:2b:9c:31:6e:89:3b:2e:fa:ad:b0:f2:72:e6:cf:c7:
11:a2:ac:e3:b7:3f:58:ea:7d:81:b2:a0:f8:7e:2d:67:5d:35:
9f:f3:d2:1a:23:21:ae:05:c0:bb:9b:31:3b:01:b1:bf:da:75:
bf:36:76:f1:ee:e4:0e:66:19:d8:a1:a7:60:3c:94:e4:db:de:
14:de:29:c6:59:01:9a:d8:2e:aa:38:8a:0b:eb:8b:8b:a9:88:
ca:62:aa:47:39:40:46:63:71:51:4d:25:21:7b:35:fa:03:29:
ec:2c:d8:4b:59:64:81:0d:4c:2d:18:c4:8c:a0:f6:26:66:0d:
93:fe:b7:53:fe:09:12:6c:e4:ff:47:64:68:47:cb:8a:9b:d1:
64:16:82:0b:08:7f:62:d5:10:19:07:2a:22:e2:e4:c3:d7:67:
f7:40:77:7c:61:d7:e0:6f:27:e8:f2:4d:d6:e2:f1:b7:ff:42:
69:91:8e:5d:7c:8f:0f:f3:82:a4:d9:56:6f:c2:0d:a5:44:65:
a1:8e:d1:06:1c:77:37:e3:fb:6d:ad:bc:ec:17:ec:90:43:ff:
ea:e9:99:a0:75:a7:2b:f9:18:57:e0:3a:e5:09:33:a0:67:c7:
22:e2:8d:11:8a:2e:5e:bd:e6:c5:0d:98:53:60:68:73:25:fe:
96:76:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:18 2026 by rpki-client