Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: nxPlPdJUb6Hv4PD1Ss6vbOvVB4Pm9X/t5mRTE0n0at4=
Subject key identifier: 65:5A:DF:B6:67:0E:D4:DC:66:5A:E8:9E:1C:26:EE:F9:02:C7:4E:C0
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019CAC101E4E62BD089BB5F3AF4E624867F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 13A2
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: KXMd4DU778zwVK5KOfit5XcFnvsJ4M4puav3VpKqiSY=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1e:4e:62:bd:08:9b:b5:f3:af:4e:62:48:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=655adfb6670ed4dc665ae89e1c26eef902c74ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:3a:15:ea:09:89:52:49:2a:cc:6b:c3:af:
04:50:f8:54:73:8f:58:a8:19:55:1f:51:2f:af:45:
a4:1b:80:5c:0a:e6:d0:c4:3e:ee:bc:79:47:8c:69:
13:3b:f0:98:29:de:6b:34:59:0c:1a:93:3d:5d:28:
b9:05:5f:14:88:6f:ac:38:dd:25:10:2a:c3:3a:8f:
b0:54:8a:bb:9f:c9:b8:5f:25:96:f3:85:10:81:d2:
6a:c1:1e:93:59:1d:73:26:5c:bd:91:d5:b7:f5:b1:
6a:97:12:74:a4:d1:82:29:80:d9:60:4f:d1:9d:6a:
98:25:86:9d:e1:e8:77:5d:ef:5d:19:06:61:f1:00:
a0:51:c2:09:79:a6:ba:0e:d2:36:4e:31:c6:4a:27:
7c:19:eb:6d:c3:81:61:71:02:c3:d3:05:86:7e:8a:
1a:89:a9:e5:8d:29:14:97:ff:0c:53:ee:98:d4:d7:
5f:f5:94:d9:71:ab:a8:2c:82:e6:be:b9:ca:5b:99:
6d:ec:a6:f5:62:b7:8e:a3:62:6e:52:eb:54:f9:97:
9f:6e:e8:4c:19:e1:7a:37:fe:77:fa:f9:81:26:70:
c6:e5:83:ef:8d:25:67:4e:52:cf:de:0b:4f:41:51:
96:06:8c:eb:da:f8:ea:09:a8:64:82:7b:dc:5d:55:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:DF:B6:67:0E:D4:DC:66:5A:E8:9E:1C:26:EE:F9:02:C7:4E:C0
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:a9:df:c0:a2:8e:bb:77:e2:42:fa:45:c2:4e:b7:ad:9b:
b0:2c:ab:6e:86:22:8c:56:0c:38:2b:2c:be:9d:2f:8c:32:20:
a6:f9:20:a5:a8:ec:bf:8f:67:24:c2:bf:47:a3:a4:09:76:e3:
7d:a7:d7:db:d2:af:d7:fa:68:ec:49:40:b6:d1:1f:a1:e2:69:
6a:01:e2:99:2f:0c:fc:ff:3a:cb:e8:c8:9e:2d:91:de:6a:5c:
1a:8a:fb:7a:24:ea:9b:84:2e:52:50:70:3d:f5:1a:99:e2:b8:
8e:3e:cc:7a:9e:38:5b:6a:3c:7b:4c:52:ae:16:c5:d3:f1:16:
43:07:b2:7c:ef:57:ce:5e:67:fc:9d:e3:c7:49:c5:b9:aa:01:
7e:52:7d:db:37:82:97:8a:4f:d8:ee:08:36:42:7e:10:e7:db:
6a:fa:7c:45:2e:41:cf:d0:7e:c8:2e:8c:73:01:61:fd:b4:1c:
0c:20:71:c1:1b:b8:a8:ef:69:ad:78:ba:e2:60:d1:9a:eb:7f:
9a:b0:12:3e:34:3b:1b:05:63:9e:84:8e:29:8c:5f:f0:a8:35:
38:5e:25:7b:7e:8a:85:a9:ba:86:ae:fb:92:23:ea:f4:86:3a:
a2:d1:51:e6:eb:9c:55:85:5b:16:e0:bc:35:59:d2:45:e3:91:
ec:90:95:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:00 2026 by rpki-client