Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: sqg43RYFkcMiya2QRbJiPfy9H8+oW99znjJsRUoi/0A=
Subject key identifier: 80:EC:92:BC:B9:15:36:1E:A5:08:E8:1A:B0:9B:B8:B1:00:57:96:5C
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 019CAB34A5CA91CB69B489D022A093C548B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0FBB
Signing time: Sun 01 Mar 2026 21:01:20 +0000
Manifest this update: Sun 01 Mar 2026 21:01:20 +0000
Manifest next update: Mon 02 Mar 2026 21:01:20 +0000
Files and hashes: 1: ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa (hash: BHGDW/+IDMtJk2UEAihZYue4lahmvlWX5Zbyw1itKuM=)
2: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: lTsQH++GhMym2p6qYB7TXsUFDRLT6gFTdcrawRE3usc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a5:ca:91:cb:69:b4:89:d0:22:a0:93:c5:48:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Mar 1 21:01:20 2026 GMT
Not After : Mar 2 21:01:20 2026 GMT
Subject: CN=80ec92bcb915361ea508e81ab09bb8b10057965c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:44:ae:72:d5:31:85:b7:5f:d0:03:44:ad:
2d:97:d5:3a:b5:c1:e0:90:f5:19:38:64:a9:13:d0:
af:73:db:f8:35:ca:6e:3f:8a:61:c0:9c:b7:4f:c3:
f4:61:3c:c0:22:b6:a8:23:26:55:77:55:60:83:25:
b8:28:65:f6:de:d8:08:12:62:5c:fe:d0:16:65:57:
ae:d0:33:3d:84:e3:37:45:61:a8:02:d6:5a:83:b3:
95:76:6e:67:00:a5:9a:75:ac:d7:65:6b:97:d8:60:
22:17:6f:09:91:48:f6:39:68:34:63:04:d2:1e:80:
54:ef:59:82:3f:7c:d8:15:5f:51:70:c3:7b:db:20:
1e:ee:9c:55:87:e4:0f:99:30:66:f5:00:20:45:ef:
c3:8f:15:43:40:96:30:17:8c:a6:68:85:9d:20:32:
63:78:77:fc:71:48:26:dc:11:cc:23:a8:c2:14:6e:
6c:c6:b4:ac:1c:a9:13:bf:28:03:ba:c0:2d:11:ba:
5a:49:21:58:83:80:ef:a1:3d:71:4d:81:92:da:95:
77:f4:e4:85:8b:2e:d3:dd:47:22:4d:30:f7:92:0e:
7d:fd:df:53:b6:70:20:49:8c:b2:72:d7:af:56:5c:
00:80:a0:3e:90:fc:97:7b:96:55:33:23:28:04:e8:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EC:92:BC:B9:15:36:1E:A5:08:E8:1A:B0:9B:B8:B1:00:57:96:5C
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:0e:70:91:2b:06:b5:20:3d:9a:d6:19:63:7b:e7:bf:d4:17:
d6:8d:2b:c4:83:e5:2c:d6:73:3f:81:3e:e0:79:9c:07:c5:c5:
47:3c:d5:0b:34:f1:a9:86:c6:53:38:8f:4f:72:b3:fb:74:31:
43:b8:84:20:cd:8b:86:a2:0e:8f:c5:03:dc:c5:d9:df:ef:33:
83:e0:0b:0f:db:41:af:c3:be:28:5f:20:7e:11:18:06:44:5c:
4b:3f:29:73:3a:70:75:5f:eb:a4:3c:87:8f:72:fb:71:e6:07:
74:97:59:b3:03:09:05:82:63:ea:4f:44:a8:96:24:de:04:29:
19:0f:34:46:8f:5f:12:2e:e3:8f:de:01:44:6d:75:58:ff:45:
66:da:c8:38:9f:34:73:0f:6c:59:54:be:3c:3b:64:3c:e9:fe:
4e:77:60:3a:50:8a:33:a3:df:7c:ea:fd:f0:f7:05:a5:61:f1:
54:eb:5a:3e:13:b1:75:1a:20:90:9c:3a:00:4c:e0:09:ea:fd:
69:14:bd:47:55:37:1f:6f:aa:bb:d0:17:cd:b3:48:14:ce:3c:
bf:46:ca:f7:be:03:ff:b8:34:e7:d5:af:ed:53:c0:c8:23:16:
3b:91:61:85:ef:15:a6:90:5e:98:66:d8:7c:2b:52:93:59:37:
75:c3:22:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:47 2026 by rpki-client