Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier: amYJRMVTnB/u8ZFSJ1oxoZQL3tUBCC8G4Cfgfi4/wDQ=
Subject key identifier: 6F:0A:5E:D8:BF:1D:96:43:3B:20:3C:C0:B0:40:F3:BF:76:1F:4F:9C
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial: 019CAD22A1304F49F367E2F2E37715D27D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number: 0F29
Signing time: Mon 02 Mar 2026 06:00:53 +0000
Manifest this update: Mon 02 Mar 2026 06:00:53 +0000
Manifest next update: Tue 03 Mar 2026 06:00:53 +0000
Files and hashes: 1: aXJznUL0xUln13cBfkJIhsiborQ.roa (hash: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE=)
2: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: BTh4FgZVJLBpBmF/hwNSuc2kzeOslNo6aFLdInnnXqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:a1:30:4f:49:f3:67:e2:f2:e3:77:15:d2:7d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Validity
Not Before: Mar 2 06:00:53 2026 GMT
Not After : Mar 3 06:00:53 2026 GMT
Subject: CN=6f0a5ed8bf1d96433b203cc0b040f3bf761f4f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:1b:23:de:92:b6:ee:44:44:a0:40:78:63:
23:93:75:6e:ab:d2:8a:d3:fb:81:ac:5b:d6:7b:f6:
d3:24:a2:83:9d:5d:f3:d7:bd:5c:2e:7b:8f:65:9b:
95:2d:ef:68:00:82:b3:01:bb:56:ab:02:1c:08:27:
9c:53:a9:ec:89:77:91:57:d9:eb:e8:49:09:ce:b4:
27:c9:de:5c:e1:8a:0f:34:3f:80:ff:2c:15:73:76:
34:15:50:ad:f2:ef:a0:e6:ad:74:d5:56:e7:31:86:
89:30:52:13:48:51:f7:12:06:db:71:75:b7:05:40:
c7:c5:35:5c:bc:ab:d7:66:82:d6:17:05:a5:0b:6b:
fc:58:8a:cc:4f:bd:76:82:70:e9:7f:07:3c:56:88:
18:26:e2:1d:7d:cb:6e:60:64:ca:de:d2:0b:d9:59:
70:b3:40:f4:0a:c1:82:f5:f9:c7:b5:97:6b:f1:3d:
06:fa:1c:c1:f5:0f:a9:6d:4b:0e:f0:0e:c1:b8:e9:
4e:44:86:57:16:d4:0c:29:46:1e:3f:a7:93:7c:83:
82:c2:ed:c6:ae:27:3c:b1:2b:92:ca:b5:28:29:34:
86:41:7b:e5:ef:c4:0f:06:26:73:6d:99:0c:69:f0:
6f:27:86:b6:ce:1a:4a:b2:50:47:b7:84:ca:f1:c4:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0A:5E:D8:BF:1D:96:43:3B:20:3C:C0:B0:40:F3:BF:76:1F:4F:9C
X509v3 Authority Key Identifier:
keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:af:ac:cb:ee:8e:79:1b:34:01:3c:b7:b6:59:d9:70:f3:
54:37:0f:ab:78:15:58:86:eb:66:84:fa:ef:52:d4:5c:da:e7:
9d:3c:ed:ce:25:3d:ed:8b:cf:e6:67:be:60:51:6e:2c:40:f0:
35:19:76:f8:84:a9:3f:0b:de:c8:69:1e:61:4f:0b:bd:48:c5:
12:8d:b9:c7:a6:54:b8:0e:a4:bf:e7:c4:52:ae:c1:f9:3c:35:
e7:2a:2e:b6:3a:f2:36:c0:d0:e2:fd:93:73:b4:bf:95:bc:01:
4b:ee:78:db:b2:08:43:83:79:2e:c5:38:fa:b0:4b:a1:c6:76:
fc:6c:a6:15:74:ae:00:02:f3:0f:0e:13:2e:0f:3b:6e:bb:3c:
6e:e6:d5:fa:d8:bf:cf:8e:bd:2c:48:eb:8e:14:86:9f:8a:d9:
86:1c:97:2c:0e:de:80:51:dd:cd:42:cb:69:ec:85:59:d2:65:
bd:40:b3:73:23:6b:6e:c3:3c:09:8b:74:a2:a6:2d:28:03:99:
90:33:99:f2:a6:a6:b6:29:c8:f2:89:b4:72:24:b0:8a:fc:7e:
a8:13:ce:73:2c:41:5e:6a:b3:50:6f:ed:3e:77:ae:0c:5f:33:
5b:df:67:e4:90:7f:48:a4:09:89:04:c8:50:5f:12:ff:90:ff:
20:83:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:00 2026 by rpki-client