Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: lbHQY6S5Y8TcRbjdc/oGzXEsy0uBAgrHzkStEQSfc64=
Subject key identifier: AE:87:BA:67:5F:2B:86:89:82:C3:6C:12:C8:08:CA:F1:F8:BA:F4:D5
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 019CABD92E9C902B05F83D4B3B42D2A13238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 0C7E
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: 2/63NAIxBDzVIfeWioEKLUzwDkgLnA4AC67AF/GV57k=)
2: g_yh8ATZEMhSBF0G1C4tLoFKgkU.roa (hash: Tk8GTttv9FTjfJX5sJv62gBRU6O1NMeWOJfwSexMHg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2e:9c:90:2b:05:f8:3d:4b:3b:42:d2:a1:32:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=ae87ba675f2b868982c36c12c808caf1f8baf4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:db:99:09:fa:42:31:40:2a:f1:6b:70:83:
c9:38:28:ae:29:ba:77:69:7d:07:49:24:da:8c:21:
6e:a8:59:51:20:10:c8:96:0a:5e:69:07:b4:1d:fa:
64:3d:7a:91:89:6b:2b:30:92:45:de:84:88:43:58:
d8:5e:96:27:b3:11:a6:78:26:ee:1a:31:c1:5e:c1:
6e:18:d8:89:7d:20:fd:fc:e3:1a:55:d7:0e:6e:be:
05:34:d8:02:30:1c:50:25:ff:21:07:24:64:06:f1:
97:13:65:96:ad:a4:86:a5:61:93:84:82:9b:6c:9f:
93:35:ab:ec:b4:90:54:88:90:61:12:19:7c:96:c8:
d9:7e:93:d3:49:fb:f4:5b:fa:fd:a8:92:f8:cb:b6:
8a:c6:06:ce:85:5c:ad:c3:e7:ac:dc:dc:19:e3:05:
e2:97:b2:f3:75:0c:41:bf:f6:ef:cf:5b:6a:a6:53:
21:a7:de:74:88:37:03:1f:d9:e6:3a:98:2c:d8:bb:
21:ba:80:82:eb:13:09:18:b5:bb:4d:e8:f5:04:3e:
73:4d:f5:3c:a1:cf:c3:2c:83:cb:b7:76:9e:42:51:
84:c8:f7:f2:81:08:0e:a8:f2:54:88:12:7e:b0:90:
d7:ab:19:f2:f6:23:25:32:40:0d:e2:dd:48:08:b4:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:87:BA:67:5F:2B:86:89:82:C3:6C:12:C8:08:CA:F1:F8:BA:F4:D5
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9c:6c:da:e6:68:dc:44:ff:9e:91:cd:9d:41:4e:d3:1c:6d:
ce:3d:18:56:10:ab:1f:62:69:af:0d:ac:b2:9b:2f:11:f2:84:
75:bc:80:51:46:4c:71:64:75:bf:2d:fe:99:02:b9:f6:48:a1:
7e:8b:8a:28:e6:8c:ae:d1:cd:8a:48:32:a0:c8:2a:80:ed:03:
82:f1:37:ef:12:f5:38:eb:85:6d:0d:20:f6:e9:34:f0:d3:c1:
ed:6b:15:29:5b:99:f0:1e:e3:0a:80:c3:9b:d1:ed:56:b8:5d:
14:d4:d1:73:0f:bd:0a:48:69:88:0f:6b:51:82:8d:c6:74:aa:
ed:fc:38:b0:02:1e:f4:6f:07:9e:4e:f7:5f:eb:f7:5a:b9:89:
5e:0e:3f:83:e3:70:a3:95:ce:cf:2c:4f:2f:19:c5:3a:e0:0f:
88:37:1c:16:21:7a:33:a5:db:45:13:1a:9e:ba:b2:3b:b6:06:
bb:48:cf:e7:d0:a9:0d:53:71:7f:88:8b:da:b6:dd:30:be:77:
7e:fd:99:ee:f4:31:bd:d9:c5:27:4e:b8:b5:41:b6:72:e2:40:
e0:f3:31:42:7a:71:b9:f0:31:ef:d5:09:1a:42:d1:1b:70:65:
6a:fd:76:e7:f6:e0:c9:75:80:e4:ac:62:d7:cf:9b:2d:66:38:
27:5f:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:30 2026 by rpki-client