Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: IfvaAegkHUf3ZNU9HqNSdQavMD3eGWwoc5CXD4PHhA4=
Subject key identifier: 0C:C8:EE:89:78:E8:C6:D9:62:63:DD:13:49:B1:C2:DA:9E:75:55:FE
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 019CAAC692E3B1AFA0072E5D014A1486D6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: MPBwSzlgEkP7PSEfMHPZPq4J+Fjb+1osxSP6WL2WqXM=)
2: u5hJOCynJQAu4PH5D56C-AeKtEc.roa (hash: 53JyrjI2rSv7IJ0kdQIBEc2NY8BsRGlwPaWvUaVHA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:92:e3:b1:af:a0:07:2e:5d:01:4a:14:86:d6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=0cc8ee8978e8c6d96263dd1349b1c2da9e7555fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:af:b5:a8:51:1d:de:9b:4f:b4:9e:3f:8c:
f7:41:5c:39:d2:35:a4:b2:4d:be:d9:0b:cd:7a:68:
b6:b3:66:d6:35:c8:54:17:ea:b6:87:df:66:68:e8:
61:d9:0a:da:20:e2:e2:1c:de:18:95:9e:5b:23:1d:
ae:ff:9a:be:84:c2:88:58:a6:58:c5:8c:0b:e2:ad:
bf:4d:58:2f:29:7e:a8:4e:b0:71:2f:e0:60:58:70:
aa:c9:e9:0a:a7:0c:56:ac:48:08:56:e5:d2:c0:01:
0b:6e:53:f7:23:52:4b:95:4a:36:a5:6c:ed:3f:00:
db:e7:f6:cc:81:d1:7d:26:e6:98:33:74:bd:1a:b0:
8c:ad:5f:6e:c5:5f:1c:94:31:2f:fa:e9:ca:9e:63:
ea:42:46:a3:f5:a9:cd:f0:2f:ca:13:fc:95:4b:bd:
f3:37:c1:40:34:78:b7:42:3f:5e:8e:ee:87:1b:d2:
6a:dd:97:7d:08:7f:9e:4e:c2:9a:6f:6e:52:72:ae:
bc:30:a6:70:54:14:de:e7:c2:89:d6:c8:c5:73:b4:
b4:36:40:1a:2d:77:a1:2b:aa:c3:4e:a2:bd:c7:90:
a8:8e:8a:74:d2:c8:1d:20:34:78:87:c1:0e:ae:f4:
8f:cb:30:f3:f5:7b:33:16:6a:b0:74:21:b0:34:c4:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C8:EE:89:78:E8:C6:D9:62:63:DD:13:49:B1:C2:DA:9E:75:55:FE
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:57:17:14:b3:85:72:09:fd:63:2e:5f:96:90:58:f6:61:
50:01:ea:2a:00:6d:5c:59:0c:28:ed:c4:5f:a5:61:13:f0:87:
57:c6:c5:37:6d:27:ac:4c:af:35:3a:c2:b6:22:55:37:60:6a:
70:6f:9a:ba:4c:47:bc:c9:31:3b:ec:38:0b:60:94:bd:9b:f0:
6e:c4:90:56:ca:a4:ea:15:11:23:e2:dc:33:82:be:de:ac:1f:
15:ca:19:d0:1d:22:97:63:d5:3a:89:40:de:cc:85:76:f2:d6:
68:15:99:10:ec:29:aa:e5:18:c8:25:97:1a:d0:b9:b6:98:2b:
da:91:98:80:1c:20:da:76:d0:32:0c:ca:5f:c0:b2:a8:bf:8d:
13:4b:a3:97:cf:72:43:cc:bb:90:81:c9:65:d2:9d:33:c0:70:
a7:70:e9:4e:d3:94:92:4c:ff:8b:d5:11:6e:9d:3c:f5:ef:be:
37:67:3d:da:b2:2d:04:27:70:72:d7:c5:ec:24:8a:20:f1:2d:
75:d1:d8:6c:14:09:16:5e:16:37:ab:a4:a4:83:53:c9:e8:ca:
0f:49:cd:a2:68:c2:f5:03:14:dc:26:6a:51:85:2f:2a:5d:15:
64:7c:2e:cd:b9:28:ef:fd:17:9f:b5:a0:82:a0:6d:2f:59:1d:
b9:d7:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:29 2026 by rpki-client