Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File: bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier: JwcVrkfbW+JWRpAk9fTvioR987bmqYTVxy6T/MLMdAQ=
Subject key identifier: 95:0A:1C:EB:DA:97:A5:8F:FA:C0:8C:A0:5E:F2:CF:94:81:89:26:1C
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 019CAAFD11A3D219A452AF13B7D0AC308471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number: 1604
Signing time: Sun 01 Mar 2026 20:00:37 +0000
Manifest this update: Sun 01 Mar 2026 20:00:37 +0000
Manifest next update: Mon 02 Mar 2026 20:00:37 +0000
Files and hashes: 1: 1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (hash: T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=)
2: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (hash: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4=)
3: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (hash: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw=)
4: WwPaGaQpisjEnRGrMLRHcOFL-Fs.roa (hash: 5IoEhSgKYc9VUWIcxC0NxkfJGhGKKPJuUdqSQvnAiQA=)
5: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: HCA8naqixFQRSn9/l3LopbwBLgzAV+FhXjM4P2n1uEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:11:a3:d2:19:a4:52:af:13:b7:d0:ac:30:84:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Mar 1 20:00:37 2026 GMT
Not After : Mar 2 20:00:37 2026 GMT
Subject: CN=950a1cebda97a58ffac08ca05ef2cf948189261c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:3f:3b:52:54:3c:9d:0d:59:ff:67:35:e0:
ae:f9:85:24:d7:4f:61:23:9e:c7:25:aa:af:64:36:
0e:a7:d1:ea:83:dc:15:64:46:56:f2:70:01:44:d7:
0a:24:cb:07:8b:81:b6:69:09:f6:d7:78:e5:79:4e:
48:fa:2f:41:03:18:b2:92:7e:24:90:17:70:17:80:
f1:78:14:e7:e1:1a:47:95:10:8f:02:52:79:14:95:
22:6c:13:31:83:69:73:c2:48:3c:aa:dc:c4:ff:6f:
1d:46:e3:ca:b6:90:82:02:dd:eb:bf:3f:7e:98:c3:
e1:cb:27:fd:57:54:0e:0c:fd:9d:31:ea:4c:bc:e7:
20:eb:0e:13:c6:06:92:a6:60:c4:71:b9:d9:79:ce:
d6:f5:cc:e7:8a:33:81:5b:ce:02:f9:56:a9:07:22:
2b:2c:e4:56:c2:44:60:1b:00:00:d9:a2:6d:42:a1:
95:33:b5:dd:fb:43:b9:56:07:5e:6c:d5:f6:0e:5a:
db:bd:63:ef:b8:a1:36:7c:41:65:c5:2e:d1:d2:0c:
7a:07:cd:1a:91:73:e6:34:7a:a4:ef:bf:4e:a4:40:
d4:5c:32:60:67:c4:e5:bf:8e:86:c6:ce:b8:a0:b5:
76:2d:85:97:75:9c:11:76:62:13:39:be:dc:fb:cc:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0A:1C:EB:DA:97:A5:8F:FA:C0:8C:A0:5E:F2:CF:94:81:89:26:1C
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:b1:5c:41:9a:ee:c3:36:75:72:ce:1a:2a:fe:61:91:62:
df:3e:01:80:c9:88:b8:c4:37:31:79:b5:8f:df:f7:d5:7c:a0:
fc:de:3b:04:69:80:3a:98:28:8c:55:87:5c:70:ac:0a:b2:59:
42:99:6d:b6:29:3a:1a:bc:64:97:c0:48:1a:8d:7c:fe:66:78:
1c:bf:97:e1:9d:e9:c9:a1:8a:c4:54:76:47:a8:03:ea:52:31:
c4:7d:5e:fe:ec:88:6d:08:4f:83:6a:eb:1c:a8:5c:ae:e0:63:
80:a6:dc:a6:dc:aa:58:7f:53:e7:22:4c:3e:42:4e:91:ac:d9:
58:bb:8a:7b:9e:b5:8f:4d:68:30:c1:f3:9a:63:e0:25:04:1e:
31:cd:a0:aa:4f:7b:4b:05:d6:ec:c7:0a:af:c4:2f:b4:30:d6:
3b:48:cd:0a:31:39:26:72:9f:0e:aa:26:f7:41:a3:55:5c:2c:
17:35:57:74:26:ef:43:ec:25:f2:a5:48:2f:46:cf:3f:d7:d7:
6d:31:69:20:a3:7a:fb:d2:20:9a:38:62:c5:35:47:8f:bf:5a:
cc:00:4d:94:3b:ce:cd:3c:84:43:7c:bf:e8:90:20:30:79:64:
91:5a:81:4d:d5:2f:40:4b:32:6c:c3:80:c9:94:7b:4d:9f:00:
06:25:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:41 2026 by rpki-client