Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: glo/TiaTd2RFwU9cfD+7lU0JnTMukOBbVwzzfR0vLPc=
Subject key identifier: 7F:20:C1:A0:37:03:1F:A2:E2:CF:7C:A9:0E:C5:F3:19:99:19:89:A4
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019CACB4A8016DD073A61A4CC6E3EBF89129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 156A
Signing time: Mon 02 Mar 2026 04:00:46 +0000
Manifest this update: Mon 02 Mar 2026 04:00:46 +0000
Manifest next update: Tue 03 Mar 2026 04:00:46 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: QV8c1j8DsUDd2IHgwEkbqScA8gcMmDUHwnRT+sUp4fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a8:01:6d:d0:73:a6:1a:4c:c6:e3:eb:f8:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Mar 2 04:00:46 2026 GMT
Not After : Mar 3 04:00:46 2026 GMT
Subject: CN=7f20c1a037031fa2e2cf7ca90ec5f319991989a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c6:8e:72:5e:a5:69:03:f4:a0:8b:95:31:45:
ad:f2:7c:3d:f2:46:f2:74:fa:2f:11:e5:59:5d:ae:
57:23:b4:73:a6:67:55:0c:62:67:05:ab:71:4d:28:
f8:8a:5e:af:c7:0c:4c:96:3b:5b:d3:a0:9e:7f:1a:
80:3a:70:26:76:0c:43:60:99:a8:ad:dc:c4:13:52:
7b:0d:1b:7e:8d:39:c9:16:e0:d0:b4:77:db:87:07:
8a:22:74:a6:c2:aa:67:45:4a:d5:d7:88:9e:11:34:
a1:90:81:01:ac:9c:8a:44:8d:65:a3:48:7e:57:f3:
8e:98:32:94:b2:07:48:95:f7:b8:79:88:a3:15:fd:
b3:5d:fb:9d:68:82:5d:32:c1:7d:33:f1:2a:f9:77:
a5:f3:7c:b8:55:b9:1b:35:05:de:00:00:b2:49:25:
06:4e:f7:06:b7:16:7a:af:00:b3:7b:7d:73:39:34:
6f:f4:f7:c3:77:0f:8f:36:5b:7e:65:24:48:dd:b6:
2c:84:ee:aa:c7:76:f9:67:9b:21:50:cc:08:24:62:
8e:6d:30:1b:f3:6e:2f:32:1c:ac:97:89:c7:2a:ae:
1b:fb:b0:de:53:60:f6:d6:f7:4f:5c:60:62:54:da:
5c:d2:6b:44:83:cf:d7:f7:16:78:0b:2c:31:a7:72:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:20:C1:A0:37:03:1F:A2:E2:CF:7C:A9:0E:C5:F3:19:99:19:89:A4
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d4:98:3d:81:57:eb:37:fd:df:d5:64:d6:df:b6:55:83:55:
4e:b2:11:44:8b:6d:44:c0:1f:18:a4:a4:44:f1:77:18:f3:0b:
ab:91:fa:ed:9a:47:03:18:f4:45:6d:a7:5d:f6:7f:8c:a4:df:
87:44:2d:93:b4:38:79:88:81:07:38:31:75:bd:04:2d:14:56:
77:3c:c8:a3:f4:9c:f3:e7:4b:6f:39:67:74:03:a6:13:ec:95:
b1:c8:e6:fb:a4:68:cc:42:07:d5:cb:f8:a3:b9:8c:b0:58:46:
c1:b9:15:d1:55:7c:9a:48:98:d4:0b:e0:71:43:11:7e:8a:02:
52:00:de:08:88:c9:57:9a:ad:29:5b:cc:eb:84:ef:d9:ef:11:
a6:3f:13:51:fb:12:1d:5e:94:0b:bd:2a:bf:3d:1e:06:7f:1b:
c3:f7:43:db:5c:d9:21:74:27:4f:94:7f:a1:7f:2a:28:e5:66:
c2:a6:f0:c8:c7:8d:4f:3b:bf:d0:00:ca:61:fa:f0:17:68:dd:
e8:07:7f:bc:c7:87:41:25:50:d8:5e:b5:d9:15:c1:3a:e7:c9:
fb:d9:e6:1b:02:c5:c3:f2:11:14:73:55:d5:ca:c5:1f:c4:ad:
e0:57:18:c2:a7:81:c1:e6:51:99:cc:58:8e:ca:f6:fb:33:ee:
31:98:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:10 2026 by rpki-client