Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: LYigzFoYKf/v5DIxRxnaoFLWbWNXhliBbXjo8UNo4YA=
Subject key identifier: 21:79:E8:1D:96:E8:3D:D1:DC:B8:E8:92:EC:F5:35:5B:D4:EA:96:21
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 019CAC4728D541CFBF08078E002F000D62AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0F83
Signing time: Mon 02 Mar 2026 02:01:10 +0000
Manifest this update: Mon 02 Mar 2026 02:01:10 +0000
Manifest next update: Tue 03 Mar 2026 02:01:10 +0000
Files and hashes: 1: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: mE7PwbGaH9d1xAjRyMElhePvP6EW/wl5FmA7zHxGQ9s=)
2: rvG6Pqknht3C9PPJsjRV_-EkR94.roa (hash: imN0OYjaMMnMPtfQkitSZR5ocmTWX3N8NSgzVWFNEvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:28:d5:41:cf:bf:08:07:8e:00:2f:00:0d:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Mar 2 02:01:10 2026 GMT
Not After : Mar 3 02:01:10 2026 GMT
Subject: CN=2179e81d96e83dd1dcb8e892ecf5355bd4ea9621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:bd:5d:63:0a:bb:d7:76:c8:e3:52:af:e6:
1f:70:1a:d7:88:2e:e5:c9:b0:e0:54:5e:39:5c:46:
11:f2:2c:43:fd:d4:1c:c9:5b:d2:2b:8c:52:49:b2:
f0:52:94:ae:bd:e0:dd:bd:54:54:26:bc:5d:f3:f6:
ca:87:4d:35:20:ec:7f:46:7c:0c:10:99:f4:db:58:
41:9e:49:f1:3b:22:fc:e4:80:d6:0b:aa:e2:12:1c:
f3:0c:2c:26:2b:18:0d:f5:e9:88:2d:16:46:82:84:
f6:f8:e5:ce:f4:d8:fb:41:46:a8:cb:6c:ea:57:63:
b0:2d:5a:6f:5e:5f:55:ac:fa:77:b4:83:1d:ab:77:
91:c7:f6:9a:97:75:a4:f2:34:2e:4a:45:de:bf:a8:
e8:88:40:a0:02:37:f9:7e:79:83:17:ac:76:08:46:
43:3b:68:1b:7c:17:de:4b:38:82:8a:b7:9a:a0:21:
20:84:f7:1a:63:fd:b5:dd:61:78:1a:33:08:79:b8:
04:5a:69:77:11:26:39:aa:b4:74:b1:9d:83:83:79:
d8:ef:2b:a5:e3:9f:9c:b7:df:d0:7e:61:57:38:9a:
b1:81:b5:9c:b8:64:92:2a:15:76:34:89:6f:b6:1b:
a7:1e:5f:fe:cd:c7:00:35:c2:f2:9f:66:47:34:0b:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:79:E8:1D:96:E8:3D:D1:DC:B8:E8:92:EC:F5:35:5B:D4:EA:96:21
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:77:cb:16:8a:8c:c0:01:7f:ed:d2:da:f5:42:86:c9:af:
53:4c:1e:77:a9:da:e0:99:ec:4a:90:7c:84:76:de:c3:77:4c:
2f:9c:e3:8d:b3:7c:8e:5f:e8:a1:65:50:ef:bb:6e:01:68:1e:
8d:25:20:3c:d3:21:c1:44:2c:70:a1:8b:84:7e:a8:76:13:dd:
6a:74:7f:a6:ca:2d:5b:37:58:de:cd:3c:09:10:5c:b7:26:7e:
b7:4a:be:8d:2e:7a:28:17:03:c3:b8:ae:eb:d4:17:16:4b:95:
4d:38:99:47:0a:7c:2f:d1:4a:12:38:fb:39:e8:ea:b7:75:8e:
2e:db:a6:20:ee:3f:a4:77:f0:9b:4b:cb:4b:ca:f3:07:a7:b8:
d5:8a:3f:45:6b:2a:cc:b2:dc:1d:a3:25:d0:4f:88:7b:e2:a0:
09:be:ce:e6:28:07:a5:0c:ca:f7:79:db:ef:1d:85:1b:af:11:
2d:ee:55:b3:98:60:47:99:1b:10:ba:46:76:f4:0e:34:ba:a1:
c4:c3:b5:e4:eb:99:9a:ad:d3:ec:58:40:eb:9a:9c:fc:78:24:
ab:33:e0:44:73:bd:83:6e:65:d9:df:db:5e:bb:af:af:9d:21:
14:72:6c:3e:f4:9f:93:4d:75:d6:36:ff:29:41:7f:33:90:e4:
89:5b:c5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:09 2026 by rpki-client