Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: 3f9sO//jNEovWlodDVQWFrUQWl4YHxqpULGNezly9AM=
Subject key identifier: C9:14:11:79:48:0D:C9:A5:3D:96:CB:20:82:17:79:33:DC:DD:28:C9
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019CAE6C70060708BEECFA42A67FF0DD2C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 02BE
Signing time: Mon 02 Mar 2026 12:01:07 +0000
Manifest this update: Mon 02 Mar 2026 12:01:07 +0000
Manifest next update: Tue 03 Mar 2026 12:01:07 +0000
Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: nanyNv16JmiovG78p68E16R6iDVK+eaIJuFrNRkjWUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:70:06:07:08:be:ec:fa:42:a6:7f:f0:dd:2c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Mar 2 12:01:07 2026 GMT
Not After : Mar 3 12:01:07 2026 GMT
Subject: CN=c9141179480dc9a53d96cb2082177933dcdd28c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:45:18:ec:9b:94:56:63:54:68:63:39:75:
c6:56:92:9e:6c:ee:a1:1b:ab:eb:fd:53:67:e5:c0:
b3:50:1e:12:fa:45:5e:f6:60:d3:e1:fc:0a:a3:a2:
90:4f:c7:5e:78:d9:c7:af:66:34:0a:e0:52:c5:4c:
d9:c1:32:dd:0e:f1:94:60:aa:97:e5:52:07:a4:65:
95:4b:77:02:93:37:fe:32:a4:b6:db:f6:72:5b:f7:
c8:32:fe:c7:ff:db:14:6b:8f:d9:6d:b4:24:1a:cd:
87:e5:1a:46:43:25:02:64:e3:c5:e9:fa:0d:52:82:
e3:af:ce:aa:df:d9:1d:3e:a5:e0:5c:37:1f:0a:f6:
5c:ba:f8:99:b9:05:35:cb:d3:3c:50:ba:02:49:66:
5e:92:b2:19:5a:2f:4a:b1:fa:67:24:9f:e9:c2:04:
02:7b:e3:78:dc:a1:25:fa:8e:51:3f:44:9a:f4:dd:
09:e7:2a:0c:f9:39:ee:ea:05:8b:4b:ba:6a:17:d2:
1d:7c:a1:23:81:fa:b3:45:a6:5b:21:b7:54:c8:40:
22:7f:55:52:10:64:6e:65:87:2e:e7:d6:2a:c1:0a:
00:e3:05:d9:0e:f9:b0:4f:50:d5:96:10:10:47:97:
fc:59:71:46:ac:4e:7b:84:79:10:5f:26:35:a7:9e:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:11:79:48:0D:C9:A5:3D:96:CB:20:82:17:79:33:DC:DD:28:C9
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:59:85:80:c2:32:57:3b:57:ba:68:18:46:5f:54:cb:7f:a6:
af:8d:a4:d1:4d:82:c3:34:6b:6c:6d:d7:3d:3d:aa:e9:be:dc:
97:6c:7c:5d:9d:cf:a7:2c:c2:87:10:b0:ee:ee:6b:c6:2e:3f:
e3:33:ed:3c:e2:ae:7a:dd:db:29:ef:63:bc:85:b8:f9:fc:5e:
f2:59:8f:ea:b4:6c:fd:dd:b9:21:85:de:9d:72:87:40:99:59:
86:cd:27:01:db:d8:c8:b2:a2:90:a5:9f:d1:dd:44:1e:fe:d4:
85:68:85:5e:dc:5a:b6:94:1b:73:23:b5:4b:be:22:f8:70:1b:
28:ba:7a:99:76:eb:f3:75:9a:4f:10:08:be:7c:4d:cf:76:d0:
c2:d0:a7:b4:0a:19:bd:34:88:ba:26:e8:41:7a:51:f0:99:80:
11:6e:59:8e:1b:6d:b3:9d:b0:37:92:e0:d6:49:1b:a1:64:b5:
c7:cf:7c:b1:64:8e:ac:9a:8a:b1:82:b4:c6:66:13:67:b6:33:
fa:39:b9:54:a0:e7:a4:21:b5:43:63:f6:cc:fa:ee:f8:62:dd:
70:62:3f:6d:d2:94:dc:d7:8e:76:cd:dd:f7:5d:88:43:c8:c4:
62:76:18:9c:a8:2b:77:55:e1:39:66:1d:4d:d7:5f:86:e0:bc:
71:01:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:07:42 2026 by rpki-client