Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: Co9JXa7yEjWAh01Sk9OK4lOv+UKNREcHQCGZrNigcI8=
Subject key identifier: 0B:CC:79:E8:29:F0:34:7C:A0:AE:8D:53:DC:C8:97:CE:FC:A6:51:67
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019CA86AB27E6BA8893ADE5FC9F3FD638FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1850
Signing time: Sun 01 Mar 2026 08:01:30 +0000
Manifest this update: Sun 01 Mar 2026 08:01:30 +0000
Manifest next update: Mon 02 Mar 2026 08:01:30 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: gQn/M2mv5cm5DiLFeCwL5vQy6/3tmnyQ/y9j2EIbWc4=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:b2:7e:6b:a8:89:3a:de:5f:c9:f3:fd:63:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Mar 1 08:01:30 2026 GMT
Not After : Mar 2 08:01:30 2026 GMT
Subject: CN=0bcc79e829f0347ca0ae8d53dcc897cefca65167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:09:fe:84:e6:be:37:b9:e2:36:8f:e3:d5:
33:25:2c:5d:10:4c:d6:6b:3c:bf:59:b0:39:dd:60:
ec:9c:db:e1:87:1b:f7:62:61:a6:f2:ac:28:8a:9b:
21:fb:04:21:2e:3c:f4:09:8b:b4:45:b4:4b:3c:33:
09:ec:19:eb:a1:d9:c8:28:a2:17:a7:a9:26:b8:16:
8c:cd:46:73:c4:34:fa:16:0c:e8:20:ca:b5:6c:c8:
74:d4:a0:8f:74:fc:c6:b2:53:cb:6b:57:67:b2:e9:
d1:34:83:d5:f3:19:2e:13:15:99:bf:9e:d7:84:f8:
24:d3:d1:07:29:75:eb:10:33:8c:49:08:e0:dc:d2:
12:49:9c:e3:96:11:f9:19:7a:31:3b:e4:cb:3c:d7:
2f:ae:ef:de:aa:a2:5c:ea:b6:29:af:79:09:46:3f:
39:92:a3:5c:a7:56:80:40:0e:48:3e:8f:9c:89:ae:
46:b8:10:6d:00:66:0c:7c:ee:1a:ff:c6:0d:12:3f:
d6:cc:a7:f0:84:d7:17:07:79:b2:4b:b0:24:8d:d7:
2b:e0:9d:77:d9:d9:54:92:95:b9:e6:18:0e:62:c7:
a9:c3:58:9b:15:42:9c:9f:ab:8a:5c:20:de:29:9f:
e1:11:66:1a:14:05:6d:9f:a4:07:0d:0d:0c:56:cb:
35:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CC:79:E8:29:F0:34:7C:A0:AE:8D:53:DC:C8:97:CE:FC:A6:51:67
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8a:7e:36:65:d7:2c:9c:31:fd:3c:20:ec:cb:76:b9:b7:45:
0d:fe:d6:85:61:9a:b7:a3:45:f2:72:15:51:f0:0c:f2:6c:0b:
77:c6:37:6d:19:79:50:fb:ea:d2:00:d7:44:ec:87:d1:4c:0f:
80:7e:7a:72:b8:6c:bd:e7:bb:1e:32:f7:3b:15:58:7c:39:6c:
52:f0:c9:4b:46:82:ad:58:27:e8:89:5a:60:4d:af:f3:9d:64:
c6:43:88:9f:31:9b:4d:de:1f:b8:ea:25:b2:bf:31:e8:46:5c:
e2:66:be:38:c8:b3:65:ac:7a:52:83:2f:c4:f3:66:76:d6:03:
1f:99:a3:76:cc:4e:5f:50:d9:f4:45:0b:18:a3:18:0a:90:b8:
3a:c0:00:77:c9:02:4d:17:b9:d4:11:b2:8a:0e:18:e0:9e:f1:
af:16:24:b0:20:62:8d:1c:a9:3f:54:2b:a2:67:6a:d3:b7:6a:
e5:a6:d3:10:07:3a:8f:46:d9:3f:ab:b9:5d:3b:f3:25:ee:d4:
16:44:a7:73:eb:26:c8:82:3d:65:ed:8a:37:f0:ed:7d:21:41:
ae:22:86:d6:6a:29:eb:05:88:e5:a2:9b:62:07:53:18:e4:f9:
db:78:40:50:bc:18:fd:21:25:22:2d:a2:2c:b1:7f:f0:b2:45:
97:ae:90:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:54 2026 by rpki-client