Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier: y+dMT9aOc88oDVe2yPrhe838UKFoglpAjbQJnNtCEi0=
Subject key identifier: 2A:AB:00:74:CD:9A:94:41:65:78:7E:4A:F5:C1:A6:B6:B5:89:71:D1
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 019CAA58E0709EE65DD5A4397C23D21C5772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:01:17 +0000
Manifest this update: Sun 01 Mar 2026 17:01:17 +0000
Manifest next update: Mon 02 Mar 2026 17:01:17 +0000
Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: JAsHa9jyZ9DCNqYbBvw/zEw+dhdqX9lNRqtiX5SedC4=)
2: tgcnf14aynpCDHSaD58uVjKIxEc.roa (hash: DCplR2F0sZ78zHn6+9bhiFCaCAnd3KIcfPI0d7dZVY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e0:70:9e:e6:5d:d5:a4:39:7c:23:d2:1c:57:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Mar 1 17:01:17 2026 GMT
Not After : Mar 2 17:01:17 2026 GMT
Subject: CN=2aab0074cd9a944165787e4af5c1a6b6b58971d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:fb:9d:b4:b7:08:9a:2a:3b:e4:9c:e1:bb:
c0:75:d0:98:97:9c:b8:ca:41:27:19:87:ac:96:9c:
78:d3:7c:92:93:f3:64:56:b5:3f:69:e0:76:ed:39:
06:01:eb:74:e1:88:1c:fb:6f:39:a7:fb:76:c7:f0:
67:c5:ae:9a:10:7e:d9:bd:a2:06:f4:22:84:d6:5d:
05:3c:07:89:e5:8f:c3:7f:b3:23:62:45:f9:cd:05:
1d:5c:19:93:3c:12:2a:c4:df:55:8c:6c:47:23:7c:
19:78:87:ba:5d:7b:f6:12:08:31:d4:81:ac:01:82:
85:5e:f5:13:f1:0b:7a:ce:35:d3:9f:a4:1d:85:2e:
53:d3:ee:81:bc:72:2c:14:d8:df:d9:e4:5f:db:c9:
31:4d:69:44:6b:4b:01:80:21:cb:19:e8:53:27:cd:
29:af:6d:1b:ce:ae:cf:49:fd:cc:a1:df:56:7a:bb:
7b:ff:67:d4:09:87:2a:91:f5:e5:9e:f5:19:e4:e3:
09:aa:b2:a6:4d:fa:b1:d9:09:5f:89:f1:f5:09:f9:
0e:65:c4:f2:ce:b6:f6:9a:bb:a1:1f:9e:e5:ff:15:
5b:af:71:bf:f5:a1:9a:b2:a9:c5:45:49:0c:3a:b2:
45:23:7f:3b:b3:3a:16:2d:4c:99:08:02:b9:11:68:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AB:00:74:CD:9A:94:41:65:78:7E:4A:F5:C1:A6:B6:B5:89:71:D1
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d1:07:ec:33:df:d8:8f:5f:57:9c:8c:ca:0e:5d:8e:bf:3e:
52:80:73:41:24:00:5d:75:bd:32:ba:81:cc:e4:89:47:7c:cf:
75:c0:2e:69:1e:a5:6d:b6:e5:37:19:96:3d:8b:66:59:9b:79:
6f:e6:7f:a8:8f:65:32:58:8e:14:a4:63:f2:89:42:3c:2a:e9:
54:dd:3a:37:d2:59:03:a5:ca:70:62:16:ce:c4:fd:66:10:dd:
ad:0b:f2:cd:1c:3d:0a:a4:59:08:ca:72:81:04:9f:31:85:c0:
98:9c:5f:00:2e:a6:a1:a8:69:e6:89:6c:1e:4a:46:44:e8:2f:
b5:49:52:bd:6f:e3:c2:bf:0e:6c:c4:8c:b0:fb:73:4d:c9:52:
21:70:73:82:14:c9:4a:d6:1e:1c:fa:c5:c0:35:2c:f8:5f:36:
34:5f:39:a6:74:e6:f7:f3:4e:65:a9:87:36:37:ba:f8:b1:9e:
25:b5:6c:f8:7e:e2:80:bb:5d:67:ac:56:8b:22:dd:c7:61:76:
1b:92:76:1f:10:14:a0:31:ef:86:ab:b2:b2:de:43:72:94:de:
72:d3:e3:c8:ef:a9:d7:56:10:19:15:13:13:25:b9:f7:af:4b:
cf:60:eb:45:31:ba:78:21:c8:f8:3e:43:65:69:68:ea:b3:cc:
b2:9b:8c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:52 2026 by rpki-client