Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: gKj7mZbwKk+MkzapZFZDzHyWYYm+tASa3ayV3EhzkRw=
Subject key identifier: F4:27:EE:8A:62:49:EE:59:9C:44:2D:AB:3F:18:6C:03:92:A3:72:55
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019CAD9043AF24479FE085C39BEDC1F9F557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0DF5
Signing time: Mon 02 Mar 2026 08:00:38 +0000
Manifest this update: Mon 02 Mar 2026 08:00:38 +0000
Manifest next update: Tue 03 Mar 2026 08:00:38 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: EiepvedFIa+IxssM/nq45wwZHabAxQQ4aGGp4b3JLsA=)
2: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:43:af:24:47:9f:e0:85:c3:9b:ed:c1:f9:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Mar 2 08:00:38 2026 GMT
Not After : Mar 3 08:00:38 2026 GMT
Subject: CN=f427ee8a6249ee599c442dab3f186c0392a37255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:a6:cd:7e:ca:84:f3:5f:3b:24:67:08:c7:
ad:42:9c:9a:40:0a:7e:47:ab:70:25:23:34:df:9e:
2e:83:f7:4e:2c:ca:85:10:38:f3:7b:96:31:f6:69:
35:fc:36:fc:50:b8:79:77:42:e4:3b:1f:ab:f8:6c:
8e:2c:8d:fa:25:c3:45:b7:a6:71:6d:76:99:f0:db:
7f:d1:d9:92:6a:5f:c6:1e:17:df:78:99:05:60:0c:
0a:39:11:2e:15:a9:26:07:40:e3:03:7f:f1:51:b2:
fb:e4:9b:5a:8d:5b:63:c7:83:2c:6b:ee:57:d6:43:
f1:7b:32:89:89:1e:f6:11:c8:76:f7:a0:d8:f0:cb:
d1:a2:29:57:08:a6:84:df:1b:74:3a:af:38:f1:21:
5f:eb:f5:2a:8f:2d:19:be:c8:0a:05:17:ee:69:69:
ef:3b:15:5d:1a:cc:da:e5:27:41:aa:f7:5d:6e:22:
bf:5b:27:8e:52:d4:eb:7a:6b:bf:a9:ae:1d:85:05:
1d:80:41:14:15:ef:bf:c6:94:9d:d9:67:31:1e:90:
40:2c:9b:de:ab:70:77:0f:3b:18:20:36:e2:c1:a5:
c3:c9:d0:d0:73:13:db:2c:27:ba:8a:e0:26:56:77:
b0:fa:65:d6:db:8b:6c:e5:1c:81:1d:f1:f3:19:62:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:EE:8A:62:49:EE:59:9C:44:2D:AB:3F:18:6C:03:92:A3:72:55
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a2:b9:15:9b:cd:0f:f6:3f:5c:0b:f6:c8:f1:3c:6c:66:e4:
01:5f:1d:04:1c:a1:06:2c:7e:0e:9e:06:37:fd:35:f4:a4:cf:
af:58:7d:01:52:ff:b0:e6:20:7a:33:95:a7:b9:0b:09:53:cb:
ee:c0:44:ce:e9:2c:1f:b1:cc:25:44:90:1c:71:42:9a:90:81:
95:ea:71:b8:bc:c8:4c:b2:11:45:c0:b5:5e:29:0f:fb:8a:42:
99:9b:71:58:9b:b7:fb:9f:12:5b:1c:de:7b:70:b1:eb:51:0b:
d3:96:f4:7a:e2:1f:43:6d:65:41:09:29:b8:9b:cb:8c:64:7a:
84:0d:12:5f:6a:4a:72:28:e9:03:fb:96:eb:76:8f:dc:a4:1d:
8f:2c:0e:32:64:7d:69:cd:b8:a9:5a:e1:b8:da:5c:12:67:10:
d7:e4:72:79:5f:65:d6:86:3a:0e:29:67:7b:64:a4:d0:e5:4e:
26:fe:11:1d:d0:f5:1d:68:ce:a0:08:88:8e:9e:66:e9:3f:a9:
a4:11:5b:92:38:0e:ce:17:44:67:e7:a8:6c:cd:cc:7d:12:c5:
81:9a:12:18:92:3c:2d:c8:44:75:e1:28:e9:35:fd:51:e1:fb:
1a:b4:f9:a0:c1:b5:a7:a0:c8:7a:87:54:44:eb:d0:e3:af:1f:
6d:16:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:22 2026 by rpki-client