Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: wR1hPmfYud9LqhPtrnd7Vdhipq0LfcXXw0+QKa3Dw2I=
Subject key identifier: CB:3D:F1:7C:26:B5:86:79:E7:9C:A0:E3:01:9F:92:E1:2A:01:EF:EE
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 019CABD9AF1974B2CCE7113E7781276B9931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 162B
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: +Sx79poXVtyNxi/QF1n3yAUVHkjtIWt/nfxWtLbEyxE=)
2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=)
3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:af:19:74:b2:cc:e7:11:3e:77:81:27:6b:99:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=cb3df17c26b58679e79ca0e3019f92e12a01efee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:3f:3e:8b:d8:e7:4e:3f:15:7b:7b:27:da:
49:03:03:a6:1f:e5:c7:20:6b:cb:ae:b6:ae:aa:d4:
f0:7f:d7:ba:b1:7e:20:8c:08:72:2e:24:95:bb:9c:
4c:8c:28:e8:f1:f6:0c:3d:28:07:f3:63:f1:2d:ba:
48:bf:ed:61:54:c7:1d:57:8f:55:cd:31:31:41:99:
72:4d:fb:3e:1d:f4:3a:95:ed:64:dc:8d:a6:4c:05:
df:20:02:a8:f9:f6:f2:3c:74:6c:67:e3:43:58:58:
9d:5d:aa:d9:6a:05:20:a5:a3:42:3e:db:30:5b:f4:
6e:53:b4:39:89:f6:10:bc:b9:99:cc:1c:2e:d4:1b:
92:ea:26:f2:a0:a0:5a:fa:1f:5c:0e:4c:99:cf:fc:
28:c7:e9:c1:6a:cd:9e:93:42:3f:66:3e:34:68:a9:
16:e2:1a:55:6f:87:58:0e:0c:dc:91:e8:48:bf:25:
b5:5a:6d:5d:9a:fc:46:71:94:e8:74:76:13:e7:f3:
cf:a7:4d:3f:8d:72:44:0e:36:8a:6e:83:e4:c2:f7:
31:20:77:9f:c8:8e:45:df:1c:97:50:94:0b:89:da:
a1:65:cb:da:5f:16:8b:d1:9e:d3:b7:ad:83:37:03:
a8:f8:6e:77:91:33:b8:6e:f7:f1:18:fe:1a:59:05:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:F1:7C:26:B5:86:79:E7:9C:A0:E3:01:9F:92:E1:2A:01:EF:EE
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c0:03:1e:3a:63:5f:56:69:d0:0b:e5:45:a7:e2:71:e4:41:
3d:48:be:db:7a:af:92:dd:9f:be:f1:33:0e:63:da:e3:83:3d:
a0:6b:2d:1c:c0:81:23:0e:39:6b:a9:be:22:63:b2:c3:77:d3:
07:3b:95:0f:de:7c:a8:37:70:e7:c5:9b:fa:c5:23:1a:f7:10:
2b:82:8d:f9:8c:53:4c:6c:3d:b4:a1:6c:27:33:08:65:07:05:
ea:e7:eb:66:46:55:72:1b:f7:b9:76:c9:42:22:c3:0b:a2:b5:
46:dc:da:ed:e6:92:97:8d:1c:27:f1:15:95:80:a4:df:0a:3a:
14:3b:bc:b7:f8:b6:6f:b2:bb:be:ee:dc:8f:d5:2e:a8:fb:96:
2c:17:26:4f:90:9c:dc:f5:25:e1:82:ac:a2:04:c0:7e:ee:b2:
cf:80:c4:76:25:06:e5:34:62:70:d1:48:5e:8f:41:87:03:c2:
0e:7d:69:26:33:38:9e:62:04:5d:4b:cc:fc:ee:14:58:e0:f0:
61:ec:08:8d:22:a1:f1:30:05:50:6b:83:57:fc:03:e2:76:10:
8c:8b:38:e8:fd:22:6e:ee:d3:86:69:82:21:b0:04:32:52:e8:
c1:52:1d:17:ae:85:67:5b:34:29:a2:6e:7e:f3:e4:66:f5:97:
49:49:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:13 2026 by rpki-client