Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: xSpA4XAo87Y6dk+4iszjc3/LO7t9cbjERWD13HiBRzE=
Subject key identifier: EF:95:F1:4C:56:7E:3F:F0:40:03:5B:1F:B8:73:D7:B6:0E:18:A0:EF
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019CAAFD6FE367489197BB5269BE7F71D7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 0345
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
3: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=)
4: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: WNei4E5cyh7vNrW2rFh3ER8x3ljWrSRDtz2R7Tp+slA=)
5: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
6: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
7: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
8: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6f:e3:67:48:91:97:bb:52:69:be:7f:71:d7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=ef95f14c567e3ff040035b1fb873d7b60e18a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4e:20:66:85:09:b1:d5:77:13:77:eb:41:eb:
1a:1f:29:82:94:51:15:c4:aa:34:5f:4f:ff:60:2a:
91:49:30:71:8d:bb:cf:b5:89:05:aa:ea:11:a2:20:
4a:6e:50:25:5f:e6:0e:a4:13:f9:10:7e:b5:22:51:
05:b6:fb:bb:77:fa:1b:29:a8:17:5a:fb:23:7c:a6:
e9:3b:83:ee:f7:6d:75:66:8c:32:3a:e6:3a:b0:33:
e7:4e:31:81:01:a5:31:59:f1:c7:2c:18:b3:4a:4f:
e0:93:4f:7e:2e:39:b9:a3:7e:df:b0:e2:64:aa:6a:
34:98:56:ce:d7:db:e5:6b:2b:76:1d:05:06:f3:4e:
f9:7e:03:7b:76:cb:5f:1b:8d:ec:a3:e2:95:3d:94:
f1:e7:78:f1:0b:3b:62:71:82:ec:a0:61:a7:2a:47:
40:08:2e:f2:f9:c5:d6:e8:19:16:fb:e0:da:cf:9c:
23:1a:d7:85:11:a9:bc:05:a7:23:e1:bd:ef:c0:40:
92:37:1d:d2:d3:9c:ae:e3:b3:96:f7:39:36:3f:5d:
24:3a:89:b2:3b:12:5d:7d:63:f6:8f:eb:29:de:a5:
bf:12:19:6c:98:0b:92:f9:be:a3:18:a2:a9:c4:1e:
e9:d5:aa:30:7a:d9:17:a6:52:c4:81:34:3c:b8:af:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:95:F1:4C:56:7E:3F:F0:40:03:5B:1F:B8:73:D7:B6:0E:18:A0:EF
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:43:7f:9c:cf:b6:97:36:5e:d7:ae:68:7d:1c:4a:92:7c:ac:
a5:09:6e:5b:fe:07:6b:c7:c8:db:eb:3c:a7:f4:ab:e8:95:25:
4a:80:0b:e7:ec:ab:2a:e1:c5:46:61:9d:60:ef:61:43:6b:2c:
7e:4d:d9:3b:f8:bf:f3:43:e2:a8:3b:1f:2c:89:f0:af:fb:00:
2b:d6:bb:f8:48:52:f7:d1:00:91:7f:52:5e:fe:93:46:01:7a:
b4:b0:e1:8c:2a:48:6e:c2:ad:25:d7:12:87:d9:9c:e4:28:4b:
db:ae:01:2a:c2:2d:43:46:9a:a4:7c:31:5f:e6:9d:7e:ca:c3:
00:88:b3:06:36:f8:32:6d:0f:46:1f:1c:42:62:24:0c:7c:ed:
29:4f:2d:3a:94:59:24:f1:3a:95:cc:bf:9a:5f:55:d6:a6:8e:
bc:d5:0d:ba:79:74:e2:83:6b:4d:80:70:45:69:81:44:4e:c0:
0b:c3:df:08:ff:95:2a:d4:f5:85:f7:3b:7d:9f:10:48:db:ab:
3a:50:cb:89:be:dd:bc:65:bb:e5:9b:62:20:00:89:eb:23:a6:
d1:9f:8d:5c:e4:7d:75:54:4a:e5:25:58:e7:08:23:29:b9:be:
bd:bd:e1:cd:ff:eb:cf:1c:4a:81:e7:34:5a:e2:b5:c5:c4:8e:
f6:f2:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:25:58 2026 by rpki-client