Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: MWGrvdDGE7mvnRwuReTTzhsz91CGehLYOZlTKUsySP0=
Subject key identifier: 32:94:63:6B:2B:0F:71:51:D0:15:D0:2C:76:E1:E8:10:E8:D0:8D:E0
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019CAA5900B2445325B4821051A45F3844D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 09F4
Signing time: Sun 01 Mar 2026 17:01:25 +0000
Manifest this update: Sun 01 Mar 2026 17:01:25 +0000
Manifest next update: Mon 02 Mar 2026 17:01:25 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: WnBZOWWSSfryna4fL901DpQduSWASDrE1pMGjdAJmag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:00:b2:44:53:25:b4:82:10:51:a4:5f:38:44:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Mar 1 17:01:25 2026 GMT
Not After : Mar 2 17:01:25 2026 GMT
Subject: CN=3294636b2b0f7151d015d02c76e1e810e8d08de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:d4:4b:c4:41:82:d8:5e:41:41:c3:6c:07:
cf:c6:85:6e:9f:b0:7a:98:96:42:20:c4:32:c6:94:
e3:e4:a4:3c:1a:7f:23:6a:f4:a0:2a:b3:eb:97:c0:
5e:7e:4f:24:51:88:ce:c1:dc:b4:a7:ea:a0:4c:d1:
20:ad:51:04:e8:ef:d0:98:a1:e8:cb:4f:d0:9f:c6:
bb:59:85:b8:58:9e:1d:47:ec:5b:8c:55:69:da:73:
5f:5d:c1:b1:fb:58:c2:d0:11:16:d9:e1:3e:62:8a:
a2:3e:f7:6c:5d:bc:9c:ff:65:be:16:1c:4d:20:66:
a3:84:e1:73:97:63:b7:92:7d:d3:23:68:d8:1e:13:
fc:cf:d8:d4:41:cd:95:92:a0:63:21:92:9c:26:14:
06:80:51:5d:f1:db:54:cb:0d:f5:2a:70:63:11:31:
f6:1d:ac:da:36:0c:68:5b:8a:fd:c9:ee:ac:e0:7f:
8b:2c:26:3e:ee:3b:03:77:1d:44:41:6d:b8:89:4a:
87:e8:69:37:ee:ac:5b:2f:58:4b:5b:9c:0f:ae:4f:
4f:4c:2e:fc:38:c5:2c:43:55:a4:ae:d0:8c:eb:c5:
b9:c4:1a:88:51:94:58:4f:fb:a1:b5:49:ac:ef:0c:
99:ce:5f:bd:e1:c7:b9:22:8c:c1:d5:a6:a4:7f:d8:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:63:6B:2B:0F:71:51:D0:15:D0:2C:76:E1:E8:10:E8:D0:8D:E0
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:0f:a1:74:4a:c5:b4:f9:e8:c7:68:d3:23:06:3c:cb:ca:
2a:86:fb:a8:98:93:80:20:00:cb:38:33:2a:5f:6f:90:bd:fb:
73:65:6d:e5:f2:a5:5b:be:51:73:f5:99:72:00:66:1c:6e:61:
68:2e:85:fb:f5:5e:51:c2:9c:de:c7:8f:5b:b4:d3:2b:d5:5d:
b2:b6:b0:4a:6b:a2:af:4e:cf:52:bd:54:69:e1:4d:98:4b:ad:
87:4c:49:bf:c6:3d:81:1f:bb:85:04:3b:b0:c8:30:ad:d1:16:
ce:2f:1a:39:fe:9c:79:22:4e:29:28:cb:12:be:8a:50:55:63:
0b:0d:1c:83:61:7e:93:97:0e:20:8e:2c:99:d5:ca:b2:b3:10:
93:ae:73:ae:e1:98:88:3f:e9:45:6a:9a:04:8d:47:db:e5:23:
e9:20:ec:f4:04:62:e7:7a:17:79:ad:6a:e8:62:0c:24:34:1b:
30:f6:2f:7a:22:03:98:01:ec:2a:92:ce:16:7e:74:a0:69:8e:
6a:4f:e6:52:ff:15:9f:2a:82:8e:0a:5f:72:09:0b:de:51:45:
6c:8e:7d:b9:da:d5:da:91:1d:18:48:67:eb:50:c4:4a:dd:9d:
f3:e0:ab:af:3e:9a:b5:c0:d1:0c:80:23:d3:a8:50:34:93:ea:
5e:f7:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:30 2026 by rpki-client