Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier: tsrIOGqzTCXSXJ8U9IW2d0r290Rd9LABxxTnyM1niMk=
Subject key identifier: DC:A8:9B:01:03:21:C2:CD:86:A2:7C:98:A4:A3:2C:A4:93:E2:63:E9
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 019CAA8F5A195E2C9128C112CBCC0CFE46C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:00:47 +0000
Manifest this update: Sun 01 Mar 2026 18:00:47 +0000
Manifest next update: Mon 02 Mar 2026 18:00:47 +0000
Files and hashes: 1: C5jsnVKUNd-QjxAfcYEN208S_pw.roa (hash: hPHsfdIlUzljJe1+AZwmO8/boBM8APNo8d6nTn8lWf0=)
2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: 1jBYvRUC8ecIZnB7oTT37tRbmg6axHEiM7nDUSuhSPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5a:19:5e:2c:91:28:c1:12:cb:cc:0c:fe:46:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Mar 1 18:00:47 2026 GMT
Not After : Mar 2 18:00:47 2026 GMT
Subject: CN=dca89b010321c2cd86a27c98a4a32ca493e263e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:14:8b:07:c5:a8:47:4d:67:eb:d3:c8:a2:
14:64:c5:ef:91:d3:f1:7a:dd:3c:27:81:b7:81:42:
39:17:d4:2f:75:5f:39:17:f9:00:6b:03:95:13:9d:
dc:51:80:91:65:01:4b:8f:ef:ae:28:04:14:22:5d:
1a:8f:28:02:2b:3e:d1:37:4d:d1:40:30:b7:50:19:
4d:c1:81:ac:e5:39:5a:2d:7d:dc:b5:7b:1e:d9:9b:
97:08:1b:35:0b:41:96:46:80:44:4c:99:c5:79:90:
20:56:65:12:ca:7e:22:43:b5:0f:d1:a7:32:28:a5:
cd:cd:d0:fe:b1:de:36:7f:1c:0c:8b:51:9b:d2:1d:
95:d7:63:f5:cd:9b:ac:79:f7:b5:cf:f7:34:ed:a1:
33:e9:df:c6:6c:28:76:30:a2:cd:13:f8:7e:66:1f:
6a:48:2c:f5:4e:44:bd:5f:7c:64:98:dc:ce:24:f9:
83:30:c4:90:cd:a4:ca:96:ec:37:03:d0:03:da:5b:
c3:75:07:4a:c5:f4:3b:99:e3:ed:39:0d:74:b9:8a:
4b:f2:40:dc:d6:02:a1:1b:d2:d4:23:bc:00:8e:49:
f4:83:14:43:57:54:20:5e:00:0d:8a:01:f9:57:8f:
ca:79:0e:a9:b1:f2:ce:83:df:cc:6e:40:b9:84:f4:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A8:9B:01:03:21:C2:CD:86:A2:7C:98:A4:A3:2C:A4:93:E2:63:E9
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:38:07:91:cd:68:24:9e:29:fb:3a:0d:ad:4d:ae:b5:1a:fd:
98:2d:5a:6f:a2:4a:1e:45:f5:eb:2c:16:1c:2e:6c:c9:63:9c:
b4:1e:34:df:92:32:49:e7:68:51:ff:02:90:78:99:b4:80:f2:
cd:f3:22:0f:ea:1f:43:1f:a9:3e:b7:79:06:13:2f:20:0d:b2:
1f:24:d3:f5:00:64:8a:b2:f9:a0:1a:03:fa:09:13:4a:e4:d8:
a9:d5:dc:f3:b9:0e:10:5a:c0:28:d3:cd:28:1e:bc:8d:e8:6c:
7e:27:ed:6e:51:55:64:00:3e:06:17:85:cf:64:59:ee:e8:04:
c9:96:7c:aa:7f:76:7f:9f:8e:97:6a:4c:96:45:ad:dc:5f:97:
4d:36:d3:0b:46:a4:32:c1:cf:55:2f:00:47:1d:dd:6e:64:28:
c9:82:70:16:be:9a:22:71:ab:8b:81:94:c5:9e:11:6e:a2:4b:
7d:d7:32:42:db:83:6f:d7:d7:57:90:3b:d4:4b:f7:ab:e2:17:
92:1b:27:20:57:7d:21:56:c9:0f:46:3f:18:c1:e0:19:50:4e:
4c:3a:f6:b0:fa:98:fd:5f:5e:43:d5:01:be:86:c6:55:fa:83:
e1:fd:40:db:21:21:5e:00:5f:bc:ba:a8:09:0c:15:77:8f:db:
df:5b:28:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:25 2026 by rpki-client