Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
File: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft (raw, json)
Hash identifier: 3thzCXXBS1IPJor/lkdEEns6ITgifSr2/PtNB/J8BM8=
Subject key identifier: 20:77:32:DD:F4:6B:EF:11:C4:DE:75:8D:ED:8A:26:C4:98:F9:73:3A
Authority key identifier: 6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
Certificate issuer: /CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Certificate serial: 019CAD9033264E23FD01DCBD3125E7BC59AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
Manifest number: 5F
Signing time: Mon 02 Mar 2026 08:00:34 +0000
Manifest this update: Mon 02 Mar 2026 08:00:34 +0000
Manifest next update: Tue 03 Mar 2026 08:00:34 +0000
Files and hashes: 1: _Y3KWPgW5g7tWbAn0IxId-tYvoE.roa (hash: aYg7tkOr0lKYUUmicpFlbnWgT/KohMLQLxFqgfb/dJo=)
2: bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl (hash: pQ4Fj/atR9D1b646QQ/ZNYTv+q9QPeounTu0RSaULkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:33:26:4e:23:fd:01:dc:bd:31:25:e7:bc:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d4cd3302e643385f6b507ce8f1e5729dc84aa04
Validity
Not Before: Mar 2 08:00:34 2026 GMT
Not After : Mar 3 08:00:34 2026 GMT
Subject: CN=207732ddf46bef11c4de758ded8a26c498f9733a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:9f:a2:04:4c:d8:47:8c:b3:81:c4:16:02:
78:0f:07:41:8b:45:5c:1b:61:9e:63:2f:89:76:64:
d4:07:04:db:e8:ca:3a:e7:66:28:c5:9e:03:f7:87:
6f:87:31:64:eb:ae:36:e5:56:0b:b7:62:f0:a3:46:
b3:fd:02:ce:9b:ab:4c:68:3f:cd:38:f8:83:36:13:
32:a6:ca:fe:2d:43:08:b6:f0:db:6c:98:50:71:d4:
7c:f9:f7:3a:23:8c:22:66:eb:a1:fb:6c:8c:6e:ef:
73:b2:78:ec:23:92:a1:c3:c8:62:40:e0:e9:c2:0b:
79:f9:14:8b:52:13:e7:42:29:2f:b3:06:6c:f9:95:
5f:df:44:29:8a:4d:22:f8:a8:6f:d4:b9:5d:4f:5d:
91:ad:88:3e:2c:af:0f:75:32:d9:18:a1:70:da:16:
86:c5:33:26:e7:98:bb:79:45:5d:6d:4d:06:5a:9e:
53:bd:dd:96:e0:2c:17:34:35:83:d2:14:76:50:e7:
7e:48:42:35:cd:b9:5c:b6:1c:64:07:0a:6f:ca:77:
c6:20:74:8f:74:d4:ce:93:63:43:8c:2b:70:ed:dd:
52:6c:d1:43:11:99:cf:38:0c:12:36:2d:5d:a0:05:
67:2b:a0:86:3c:20:50:a5:3b:ce:33:c2:2a:06:6a:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:32:DD:F4:6B:EF:11:C4:DE:75:8D:ED:8A:26:C4:98:F9:73:3A
X509v3 Authority Key Identifier:
keyid:6D:4C:D3:30:2E:64:33:85:F6:B5:07:CE:8F:1E:57:29:DC:84:AA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/bUzTMC5kM4X2tQfOjx5XKdyEqgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:08:20:5d:a9:d6:b5:77:1b:30:97:bc:e3:8d:1d:81:e7:08:
c4:df:6a:45:d3:8f:3e:26:bf:76:12:df:53:0a:79:5b:23:b3:
84:63:75:a5:78:33:5b:ba:ca:16:ee:95:19:78:e2:d7:c5:8e:
0a:61:c4:ba:c8:a0:c7:45:6e:40:fb:19:0d:bc:95:b6:d3:e7:
20:ed:d8:ad:27:fa:77:1b:d2:54:fb:e2:8b:6d:22:95:a8:79:
d6:7e:fe:33:6e:a9:8a:48:a0:03:90:8d:59:fe:43:8c:48:b3:
b2:8e:78:a5:21:e8:5b:6e:ee:20:9d:5d:85:df:33:bf:d7:ab:
04:9a:95:fa:93:cc:08:d6:e2:e7:ea:20:e2:ba:84:1d:3a:a5:
80:78:83:ad:6c:db:84:22:77:c6:28:a7:0d:19:07:23:c0:c5:
9f:83:8b:55:81:e0:8a:2f:15:c3:74:a3:41:64:36:d5:e3:86:
99:f3:97:d9:4b:55:47:55:0a:43:0e:16:43:7c:f5:f3:a2:41:
e3:97:49:84:00:24:e8:9b:2d:df:56:0d:2b:7d:0d:5c:c1:fc:
99:95:1b:fb:c9:56:6f:1c:f4:9b:85:16:7e:3c:f8:a0:c4:65:
9f:7d:bc:5d:20:ab:a0:a9:0d:f5:b0:ba:d3:f5:e6:0b:6d:ed:
f6:9a:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:01:16 2026 by rpki-client