Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
File: bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json)
Hash identifier: hJc5ARZbCloV8aLZsyehyb8OPJINTTmlp86ZvzgBoJU=
Subject key identifier: 6A:5F:B3:E5:1D:43:A1:4B:F4:81:C3:0B:23:29:43:D5:FA:45:BE:9D
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 019CAD59704B48BBDD189FE470CDC0F5559A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
Manifest number: 1858
Signing time: Mon 02 Mar 2026 07:00:45 +0000
Manifest this update: Mon 02 Mar 2026 07:00:45 +0000
Manifest next update: Tue 03 Mar 2026 07:00:45 +0000
Files and hashes: 1: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: wAxxBlpN9JjznbXqqbC6CZNVaNeCYAbh1RPeA1Rg4gA=)
2: dAtJXk54QeNvdrIj2y9sPVigo4Y.roa (hash: VR9GSCDMRB0j9JdvpO5E9iyI6YnfCrylbELLiWuyElY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:70:4b:48:bb:dd:18:9f:e4:70:cd:c0:f5:55:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Mar 2 07:00:45 2026 GMT
Not After : Mar 3 07:00:45 2026 GMT
Subject: CN=6a5fb3e51d43a14bf481c30b232943d5fa45be9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:63:3d:12:99:ab:61:21:0b:cc:65:fb:85:
90:65:83:56:3b:b9:41:31:57:ab:2a:69:d4:82:b5:
3d:38:82:c1:3d:c4:8a:83:e8:d5:d7:9b:51:75:b0:
14:da:c3:42:dc:d6:9f:6d:45:ce:4c:6d:7e:f8:5b:
bd:5a:d6:13:6c:6f:84:73:e3:7a:0c:87:24:9d:44:
c5:bd:fa:b2:dd:1d:2f:a3:18:7c:9f:e9:0b:67:c1:
ae:87:92:e4:ce:13:ea:24:22:b4:0f:df:51:dd:4d:
ac:38:96:9c:bb:97:cb:ec:18:0f:e5:55:4f:c8:30:
1d:2c:01:e5:83:be:d5:02:4a:18:b5:ae:8f:52:63:
b8:90:98:1f:94:28:de:c5:2e:60:3e:f7:71:53:6e:
d5:cf:9d:91:09:b2:bf:15:74:ef:43:df:f1:03:0e:
bb:2b:5e:98:43:03:1e:f7:92:7e:23:80:40:81:07:
10:81:c2:b2:35:2d:3d:7f:7e:d6:e1:68:6f:90:35:
be:94:58:02:6d:5f:ee:16:4b:3c:79:b0:b8:0f:39:
a1:32:25:7b:92:dc:df:9c:2a:f7:2c:e2:22:90:e6:
bf:35:8a:d2:9e:72:c3:a1:06:15:7d:f6:52:4c:4a:
93:64:f0:4d:b6:40:8b:c0:4a:72:f4:e5:36:e8:19:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5F:B3:E5:1D:43:A1:4B:F4:81:C3:0B:23:29:43:D5:FA:45:BE:9D
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:cc:dd:04:00:ef:96:20:df:7c:99:fa:38:40:15:2b:b2:
b9:44:14:c1:3e:bd:09:a3:6e:1d:86:4b:35:1d:5d:c6:f1:b4:
55:32:f9:f2:31:72:c0:00:7b:6b:cf:bf:8b:86:8b:b1:7f:38:
d3:24:8f:1f:47:60:28:ed:b8:86:f4:da:0d:dd:13:a8:0c:ec:
59:21:ca:5f:76:db:f0:be:1c:77:e3:5a:e2:05:52:fb:d3:25:
25:71:6a:6d:54:80:66:8e:4c:1b:a8:49:48:3d:fe:c8:55:17:
fc:13:b2:e0:2e:b2:b8:68:3c:53:af:7e:84:f0:38:2d:7b:58:
df:c1:0c:b8:01:89:a7:d4:d4:95:02:b3:91:4c:2f:a1:8b:76:
62:cf:e1:31:45:15:c0:08:b4:07:09:35:26:29:74:8d:b6:b0:
a0:3f:ee:6b:48:a0:d1:28:6e:b8:9f:10:81:1d:53:9a:35:10:
23:f3:b3:af:dd:e5:31:41:17:dc:40:3b:fc:d1:ea:88:b9:35:
25:a5:4e:79:73:5e:91:e9:c8:cb:b9:b1:6a:e7:d2:35:b4:4c:
79:d9:b8:bc:50:59:3d:14:2f:8f:19:72:80:09:c3:4c:11:2b:
4f:0d:ac:af:24:3c:3f:31:1c:a8:d1:21:a3:c0:08:dc:07:d2:
98:f0:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:06 2026 by rpki-client