Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier: 2p3W5gyHekKuryv5o83zGW7nxHpppFAsrfPJzhPuwQk=
Subject key identifier: B4:91:9F:B1:D8:36:66:04:05:90:8C:30:33:1F:6A:CE:26:A9:37:68
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 019CAEDA10B07C0BFF0AB2F6B0A73223ECC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number: 0172
Signing time: Mon 02 Mar 2026 14:00:52 +0000
Manifest this update: Mon 02 Mar 2026 14:00:52 +0000
Manifest next update: Tue 03 Mar 2026 14:00:52 +0000
Files and hashes: 1: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: LhS0v1O/HQw6wyq91Y5QBsiN0nlzPFVDP2aanbq3sEk=)
2: nL_aguQpzIBZS3kFzk0GEh4Kv14.roa (hash: gVKNRs2PmMSobccBYIWx5t0HLiyk7RnkUIOuOgpaP2A=)
3: rtWwTl9MBmDLdQSKYIL-yECsxyQ.roa (hash: +411KUF7k/iuzsKKk7k0b7Q2qWA88IGJo6IfbnCC2V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:10:b0:7c:0b:ff:0a:b2:f6:b0:a7:32:23:ec:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Mar 2 14:00:52 2026 GMT
Not After : Mar 3 14:00:52 2026 GMT
Subject: CN=b4919fb1d836660405908c30331f6ace26a93768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:0c:46:86:34:bf:3c:b7:a7:9d:ff:b3:b3:
21:9f:51:2b:5d:bc:3a:37:33:d5:ef:75:70:8e:78:
0d:c6:12:6d:ab:e6:e8:45:29:6f:76:af:90:9a:13:
88:79:e1:f7:67:00:f3:5f:d6:a1:61:3f:47:ee:a7:
43:c6:02:14:0d:1e:2d:1c:bb:97:41:f7:87:46:cc:
e0:a1:d6:50:22:fc:e3:dd:2b:b5:fa:6b:bf:d2:d4:
fa:51:cc:55:30:1c:05:b0:2d:84:fb:bb:b7:aa:df:
40:b7:a3:cb:f5:b4:af:a8:71:2c:98:96:64:44:18:
2a:0d:5d:91:5b:03:62:88:cd:e0:6f:45:ba:9e:21:
99:04:af:49:b9:d9:79:1a:ca:9c:18:da:1f:8b:97:
b8:2e:20:6e:26:26:7b:1e:f9:c5:5c:94:70:32:94:
9d:ef:62:84:23:d9:89:b0:86:d8:2a:be:43:4f:44:
07:76:79:3f:21:56:28:35:a6:e1:d0:85:a2:e7:37:
81:c0:fb:ef:fc:b1:42:a4:19:88:99:f1:11:05:12:
9e:8d:cb:16:7a:fb:9f:c8:8d:01:62:b8:0c:b1:62:
24:bb:33:d4:3c:26:ca:e5:22:e2:ff:d8:74:4d:08:
54:1a:7f:4d:63:d8:14:ca:d7:97:85:95:23:b6:0c:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:9F:B1:D8:36:66:04:05:90:8C:30:33:1F:6A:CE:26:A9:37:68
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d6:b4:83:09:53:75:59:ac:e4:c3:10:d0:4c:cc:9a:6b:7d:
65:da:82:7a:2e:9c:97:0a:fd:2f:fb:b5:1a:30:0f:01:ea:c6:
ac:ea:9e:8f:eb:84:8f:6b:76:35:fb:da:7d:f1:95:ce:f1:d9:
77:82:8b:46:c9:76:b5:96:81:ff:09:0f:4f:fb:4e:25:43:fe:
9c:ce:f7:c1:af:12:1a:83:83:4b:e1:df:ce:40:d9:57:f9:e4:
da:7d:6c:70:84:4d:04:20:ca:62:11:1b:14:33:86:3e:23:93:
55:62:8f:d5:22:51:d8:f0:e5:84:9d:18:25:0d:c1:2b:70:8c:
62:5d:55:51:46:53:f9:bf:81:8f:d5:bf:3d:20:fb:75:b3:36:
7d:03:a0:f5:2e:5b:91:7a:78:ab:71:bb:08:1d:71:c0:d0:23:
0f:c5:a7:25:b1:36:26:b9:c9:fa:4d:2f:9f:0b:42:ed:8a:f7:
c8:c9:1c:a6:6a:5e:8b:07:ae:e8:cf:3b:f4:23:31:80:e2:b4:
08:a0:a2:63:82:18:42:c1:6f:ce:25:6c:e8:69:f3:7a:d0:d4:
5f:c4:13:62:92:48:1c:cc:17:8f:cc:b7:dc:a7:a7:8d:46:7b:
dd:ce:e6:3b:74:41:cc:c9:93:fe:ea:4f:ac:70:07:78:a0:fa:
36:99:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:52 2026 by rpki-client