Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: GVoYcrp4mwbcMclREeoSbIpWmscqgnIi/uI+Uuml7yc=
Subject key identifier: 33:05:CF:D1:70:D7:79:1A:F5:C2:41:5F:52:A8:74:4A:92:4F:C9:AD
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 019CAA59054733CC2013BF4E42A252B721BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:26 +0000
Manifest this update: Sun 01 Mar 2026 17:01:26 +0000
Manifest next update: Mon 02 Mar 2026 17:01:26 +0000
Files and hashes: 1: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: vhUX0/yIWn2iDWorb5xat7xZ/BXdCBpgSoQlXgm2bo0=)
2: etj0sShjec2CBR92UCLlU4OhoHU.roa (hash: T3WyGa+EDgJcqKV7smiXEGZnclSaocbCUmsz9FP6vjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:05:47:33:cc:20:13:bf:4e:42:a2:52:b7:21:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Mar 1 17:01:26 2026 GMT
Not After : Mar 2 17:01:26 2026 GMT
Subject: CN=3305cfd170d7791af5c2415f52a8744a924fc9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:f8:2e:d9:7a:c9:f8:69:1d:e7:f9:13:42:
82:c4:ea:e4:0c:10:74:f5:bf:bb:2d:5b:d6:60:bf:
72:28:f0:a2:df:69:d7:41:52:b4:eb:10:1c:96:a2:
5f:e7:2a:b0:62:a1:d8:1f:03:2a:7a:98:c2:11:89:
19:54:0e:b6:e1:9f:74:67:ae:7e:2c:3c:8a:ae:8d:
63:54:86:a6:1e:d9:db:58:3a:1f:80:7d:39:4c:10:
da:45:15:ac:aa:50:8e:c6:9e:0e:ec:cc:0d:5f:83:
d5:1f:27:e9:33:85:2a:e1:8e:5b:ca:e5:08:1e:0a:
4f:75:21:fe:4f:4a:3c:25:e9:55:d6:c2:54:10:69:
9e:93:db:c0:d2:44:e1:0d:33:39:97:a0:88:4d:63:
93:1d:97:af:d3:2d:d2:e2:fd:c8:2c:a8:b5:3e:8b:
68:52:7e:a7:ef:14:15:05:69:05:70:9a:18:89:29:
1a:dc:76:e7:7c:c9:47:c0:ea:1b:99:f6:d7:2b:46:
e1:91:7e:51:3f:85:90:d2:5d:06:5e:a8:52:ef:a6:
bf:2e:b6:af:1a:de:48:2b:3c:71:01:d2:7d:18:19:
bb:2b:b4:5c:47:fb:d7:73:27:21:0b:51:90:92:04:
cf:6e:7d:f9:52:cc:46:b8:a9:08:1c:a1:78:04:31:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:CF:D1:70:D7:79:1A:F5:C2:41:5F:52:A8:74:4A:92:4F:C9:AD
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f7:df:d3:e6:93:72:01:0b:7d:58:ed:26:7e:25:df:02:27:
72:6c:04:72:b6:f9:4d:9a:89:2e:8c:d1:08:4b:2e:28:6f:89:
4f:72:6c:d6:8a:42:da:f1:eb:17:57:f3:77:03:c3:9a:13:6c:
c3:4f:56:f3:8e:38:1d:ec:b9:de:21:f7:21:67:be:aa:b9:c5:
50:f1:f1:0f:47:63:d8:a9:d6:f8:1f:52:60:d9:99:8d:6e:53:
9d:74:2a:c5:2c:da:5a:da:ec:e1:05:84:15:1c:55:f1:2f:47:
01:b5:fc:5e:22:e7:96:68:66:19:b7:11:7e:33:e3:00:0e:ad:
f1:36:72:67:21:35:fb:27:9c:d3:5a:b0:7e:e8:3f:ed:a6:38:
b5:43:12:e1:b0:16:9b:f9:cb:a0:19:5b:8b:d1:d7:85:a0:6a:
2b:27:91:d5:c8:59:a2:da:00:67:e7:0f:cb:6f:f0:44:35:d2:
88:41:a5:d0:83:c6:d4:8e:5a:7f:ce:26:29:49:f3:28:e1:19:
cb:04:8f:b1:32:a6:34:3e:27:09:c9:c1:11:78:ae:9c:3b:0f:
02:02:a0:0b:cd:20:bf:f5:88:d8:f9:98:74:1c:f5:dd:81:8f:
1d:c2:26:df:a1:c5:ed:44:d3:58:a7:f0:b2:cf:d1:33:26:a1:
e3:95:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:50 2026 by rpki-client