Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: m7mPLQgWzZGzTPIYsjFkBCtSfOAXIYgRs9Dr/EtdLWY=
Subject key identifier: 40:77:96:DD:C1:58:C5:4B:A0:D0:2A:41:1A:1F:AA:07:AC:C8:96:F8
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019CAA215739CDB318AAF33605FC59B477BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 11B2
Signing time: Sun 01 Mar 2026 16:00:37 +0000
Manifest this update: Sun 01 Mar 2026 16:00:37 +0000
Manifest next update: Mon 02 Mar 2026 16:00:37 +0000
Files and hashes: 1: FT6hKDdOscZGglIPmnTSBT_NdEw.roa (hash: XuMv35p4+01j1k8oQho1O4/aKo7qUhSStQREoa1ANMI=)
2: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: JW7pyD+2oMdM3KTIBE6VqsQTmVvy528bSOQ7ZehdRUU=)
3: saGe65xuOQseP3c8kU3JX4FXHXE.roa (hash: /UkorSrGGemFtdnd/VIVCcjbVQGt7/xFaIltioMhlUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:57:39:cd:b3:18:aa:f3:36:05:fc:59:b4:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Mar 1 16:00:37 2026 GMT
Not After : Mar 2 16:00:37 2026 GMT
Subject: CN=407796ddc158c54ba0d02a411a1faa07acc896f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:c4:53:bd:99:a1:76:8d:92:f0:36:27:52:
d4:36:d3:97:f4:3c:83:e4:15:e7:51:05:a8:68:37:
70:67:71:5f:e5:a3:29:c3:3d:3e:73:de:5a:1f:1f:
c5:d7:92:af:25:a3:d6:af:7e:c3:8a:c7:66:51:94:
85:d2:77:1c:06:41:b4:c1:9e:39:39:44:55:85:d6:
a8:41:f7:2e:08:e9:59:b8:10:59:5c:43:66:7c:a4:
5e:c3:d5:41:bb:25:04:c2:05:4b:2c:82:20:fd:4a:
f2:35:1e:3d:48:3d:0f:d5:03:55:9a:46:87:b7:b6:
cc:12:27:70:ba:21:6e:b2:d6:75:1c:1c:1d:97:d6:
c5:14:28:bd:f0:06:b5:16:43:7f:e2:13:c1:11:31:
60:8f:41:ca:4e:dc:95:4a:0b:c7:b5:c2:5e:0d:a1:
ba:47:78:7d:cc:b9:ae:e2:80:85:9d:02:cb:4d:32:
8a:e2:f3:9d:55:bd:8a:02:a3:dc:35:7e:73:49:6c:
0c:06:2e:ad:ae:bf:ea:ea:c6:73:51:bf:a8:26:22:
9e:70:6f:3e:2a:12:93:38:60:c8:02:eb:a3:b4:ef:
06:63:65:a4:e1:86:72:be:9a:e0:c3:e5:e8:d6:34:
73:d4:2a:ef:c3:db:d8:00:dc:de:49:81:17:37:05:
7b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:77:96:DD:C1:58:C5:4B:A0:D0:2A:41:1A:1F:AA:07:AC:C8:96:F8
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8c:92:50:26:2f:36:08:f6:5d:05:78:b4:4b:83:e1:12:fc:
08:09:40:66:1a:f5:4c:6b:78:58:2f:fd:e2:4c:b5:72:0a:03:
10:f6:24:cd:04:89:52:03:0d:65:18:c3:dc:e2:93:71:d9:80:
81:7d:6b:25:b3:ca:8f:a5:6c:fc:1e:0e:4d:2b:c5:fb:b5:2c:
9e:c7:a0:7a:0e:52:0a:47:26:dd:24:7e:ab:43:84:c0:96:c9:
a0:6d:3d:de:a5:76:57:4f:59:07:b9:ed:9f:a0:c1:ac:5d:4b:
91:95:2f:2a:41:ab:18:66:a7:b9:50:e6:05:2f:0a:d3:2b:0c:
bb:f6:b9:dc:d4:51:a5:ce:c2:d8:6a:86:e1:e4:54:69:d1:28:
e7:8b:f9:50:e4:f6:3a:1b:b5:aa:70:bf:45:a8:14:d4:e5:31:
0d:99:3e:07:47:8c:1c:c2:98:14:ab:88:d2:19:d2:3c:93:e4:
7c:d8:4d:e4:6c:3e:a2:0b:1e:cd:ee:4b:5d:6a:fa:5a:cd:be:
67:06:ec:af:1a:3b:75:1c:b6:35:05:a1:8c:ee:d7:96:cd:61:
56:62:10:9f:d6:84:db:49:15:a4:88:fd:56:e5:16:b1:1d:47:
2c:69:b4:6e:33:cb:5c:ca:14:d2:66:01:65:06:96:8a:7d:ff:
a5:51:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:21:36 2026 by rpki-client