Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: gf/AtIBs9VtAJOiD5BUk1fRwwrqJstHNvweVoKyTA3I=
Subject key identifier: ED:F1:9A:C3:5C:8B:7D:72:70:DD:22:65:51:A8:5F:7D:94:20:B4:4E
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 019CA97D2600D3C463477DEEE0B7A2E7EFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 0C65
Signing time: Sun 01 Mar 2026 13:01:16 +0000
Manifest this update: Sun 01 Mar 2026 13:01:16 +0000
Manifest next update: Mon 02 Mar 2026 13:01:16 +0000
Files and hashes: 1: MHWk_6gkCFNzcpzPNNt2w891inE.roa (hash: uLAuY62U3N5zmg9Od7m47MwNBzxs39ToP7TJu3Dno1Y=)
2: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: MdkjPiGkRazKtOnz8zxDKqMPYLREbsf6LwYSYYsHlG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:26:00:d3:c4:63:47:7d:ee:e0:b7:a2:e7:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: Mar 1 13:01:16 2026 GMT
Not After : Mar 2 13:01:16 2026 GMT
Subject: CN=edf19ac35c8b7d7270dd226551a85f7d9420b44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:4c:b8:2c:f9:ea:1f:b9:18:1f:61:c4:4b:
7b:8e:ad:87:da:58:d1:a8:99:af:f3:14:67:90:56:
93:d1:39:1e:84:f5:b5:12:36:ff:77:88:39:39:ee:
bc:82:24:4b:06:6e:d1:58:26:4c:27:55:60:b5:de:
e4:ed:79:41:70:6b:4e:7d:b8:ff:92:06:a5:a8:8e:
66:d7:d2:f0:17:6b:ef:53:64:26:52:6f:d4:38:7b:
08:b2:85:f5:91:a2:23:48:f3:60:f8:72:a3:9b:f8:
dd:06:ab:a5:da:0f:2f:22:3e:15:0d:18:72:47:aa:
34:57:b8:6f:f2:49:82:38:c3:97:05:a2:3a:e5:22:
aa:0e:b6:02:ed:2c:94:e2:fd:7f:81:d9:78:af:71:
2c:de:12:1b:1f:d6:60:6e:87:8d:99:48:7b:8d:5c:
da:a9:93:57:fc:92:cf:c2:e5:e2:32:0b:b7:f5:23:
4b:dc:eb:3f:a0:71:72:d3:bd:15:e1:be:ea:92:50:
10:3e:90:96:ce:b4:1f:99:fc:cd:7a:e6:e8:8c:91:
c4:c3:61:77:b4:e6:8a:45:8d:7b:67:be:4a:44:45:
dd:f9:bd:bc:78:61:19:31:48:fd:fd:cc:55:30:08:
e8:12:70:22:61:8a:9e:f2:c4:42:43:5d:4d:bc:a1:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F1:9A:C3:5C:8B:7D:72:70:DD:22:65:51:A8:5F:7D:94:20:B4:4E
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2e:0d:4a:a3:44:86:a2:72:e7:d4:e2:5b:a5:90:9c:9f:b0:
c5:49:86:36:d9:b9:28:c8:22:0b:fa:65:86:c3:30:6e:87:0b:
0f:c0:95:65:ca:26:78:fd:ea:d7:af:8f:d4:6f:3f:66:79:65:
91:f4:3e:8a:6a:78:3f:59:34:ce:e2:56:99:85:92:85:7f:6e:
fe:47:66:04:6a:ed:93:1e:37:e3:29:48:e9:85:e5:7d:ab:e6:
3d:8b:4c:a1:17:c6:37:de:90:f7:4e:89:f3:2a:4a:e6:e6:bb:
d9:e6:09:2f:95:de:7a:23:11:ea:d1:33:94:e5:77:bc:38:3d:
8d:11:00:b9:ec:f4:fa:73:fc:85:8a:76:3f:37:8f:58:5a:2e:
df:73:5b:c2:3a:ad:80:ca:32:4b:7f:9e:bd:97:88:e5:b5:4e:
db:c2:70:19:e9:64:70:26:da:3a:33:4e:00:f1:54:19:d8:94:
52:17:6b:8c:8d:6c:8c:f9:ad:ac:e6:49:af:dc:02:46:80:36:
2b:c6:81:34:2d:af:1d:cf:8a:cd:cb:be:96:ba:16:50:14:93:
49:89:bb:3f:6f:f9:7e:9b:b4:30:18:07:ae:b8:09:12:6c:31:
ba:7f:7c:21:05:36:28:e1:40:1f:c0:a9:55:b3:1e:40:26:86:
3e:ca:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:12 2026 by rpki-client