Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: 7iYBt+y2LzDxuw6zvphuW4a5SacHbt/keRQQnsUCO/g=
Subject key identifier: F1:7F:FD:BA:56:8D:C3:D0:BE:83:06:B2:75:AB:3F:31:AB:FE:13:E2
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 019CA945A69EC048682AD4DD6CEB0E699040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1531
Signing time: Sun 01 Mar 2026 12:00:39 +0000
Manifest this update: Sun 01 Mar 2026 12:00:39 +0000
Manifest next update: Mon 02 Mar 2026 12:00:39 +0000
Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: E+eRN8bt7QbLFXaYvV5KLz8dgpUCxLZS2BSborTfiGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:a6:9e:c0:48:68:2a:d4:dd:6c:eb:0e:69:90:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Mar 1 12:00:39 2026 GMT
Not After : Mar 2 12:00:39 2026 GMT
Subject: CN=f17ffdba568dc3d0be8306b275ab3f31abfe13e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:1f:61:f7:c0:0a:18:85:63:93:07:9b:33:
35:95:81:39:28:25:cc:64:7a:2e:c8:4f:a1:9a:5b:
07:80:36:29:f2:9d:82:aa:e1:8a:9f:90:71:62:fb:
ad:73:e8:9e:c4:4b:68:12:8b:39:de:74:4b:01:23:
38:c5:2a:7a:ee:94:6e:07:82:a9:11:de:a1:1e:ba:
51:97:05:f2:23:d1:be:94:99:13:7d:fa:b2:35:b5:
9d:aa:03:23:52:18:88:d4:e3:0d:50:4b:62:4d:00:
26:5a:45:0e:a8:fa:19:9a:13:71:17:5f:f6:7f:5c:
99:53:5d:81:07:44:3c:39:34:41:94:c2:95:c3:4e:
69:b8:e9:b9:06:43:eb:8b:41:43:48:8d:70:3c:b0:
a2:7f:5f:eb:42:ba:0d:6e:45:3d:0c:ef:ba:96:8e:
5a:7c:6a:a5:5b:c1:a9:bc:de:e2:45:6b:e9:3d:37:
b3:b8:6b:8c:75:70:50:85:00:2d:57:ba:18:32:5d:
9b:98:b5:66:ae:8d:23:8f:52:89:de:71:b0:72:de:
8b:41:9e:1d:5a:f1:18:9c:b9:7d:4c:cd:e7:fa:dc:
cd:e2:9e:8b:53:95:76:27:fc:8d:85:41:01:45:06:
18:21:c3:5a:dc:f7:3b:5e:06:1f:e3:1f:22:f0:67:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:FD:BA:56:8D:C3:D0:BE:83:06:B2:75:AB:3F:31:AB:FE:13:E2
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1e:79:af:99:0d:d6:95:a4:ca:f5:5b:6d:00:2c:5d:1f:0f:
cb:a2:49:2e:cf:21:fd:8a:b6:d3:83:48:a2:3f:a3:16:d3:aa:
3f:0a:57:59:ad:48:fa:b5:9a:60:cf:df:1d:4f:01:9d:28:23:
50:d4:fb:c4:19:70:9d:2c:cc:d9:dd:5d:4e:bb:3d:86:97:07:
ee:34:79:9a:75:6d:07:86:af:5b:08:8c:68:cb:f2:ed:fc:5d:
99:15:f8:69:51:30:8e:2f:7e:7b:dc:7e:b5:6d:2a:28:bf:15:
4b:32:a2:27:89:da:1b:c3:39:ff:e2:6a:1b:3f:42:24:ec:4c:
f3:62:dd:6b:a3:67:b6:be:57:9b:c5:a6:54:0f:5a:77:c6:6e:
cc:2a:24:3e:f5:b8:02:d3:96:15:8c:f3:7d:30:0d:53:41:22:
77:2d:c2:d6:e1:62:9b:f0:b1:22:84:e7:19:34:30:66:1d:f5:
4f:71:d7:cb:e1:87:f9:99:b7:97:72:4d:da:5e:e0:a6:ce:60:
ce:c5:0d:ca:2e:0f:12:86:c2:bb:ae:e8:ad:10:a4:65:d7:28:
ea:6d:aa:6f:27:ea:ae:71:fe:d2:63:b1:92:fe:b6:a4:61:37:
e4:c4:f5:b7:03:e1:ad:65:d2:26:5a:15:37:05:5f:be:16:f4:
b2:8b:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:25 2026 by rpki-client