Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: J+/c2UxIaTrJFjlSpGcqlgTY9EX9fnc1aLJQ6bWWOOM=
Subject key identifier: ED:8A:70:66:83:03:00:11:C5:6E:F3:DB:3D:1F:80:32:C6:6C:5C:F5
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019CAEA3C45515035337E9DA50FBE73E9FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0A3F
Signing time: Mon 02 Mar 2026 13:01:34 +0000
Manifest this update: Mon 02 Mar 2026 13:01:34 +0000
Manifest next update: Tue 03 Mar 2026 13:01:34 +0000
Files and hashes: 1: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: WjCmyvRrDBeFUQxirzp3t0jlQ6StR5Hz5OOSMw5I1Jw=)
2: niUV0djy4P_JQW5PwXS4h9UDq3c.roa (hash: dUR1gqSul+jZS5ya9pRLXgQp3A3g2Y76zvsEH9Fq7CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:c4:55:15:03:53:37:e9:da:50:fb:e7:3e:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Mar 2 13:01:34 2026 GMT
Not After : Mar 3 13:01:34 2026 GMT
Subject: CN=ed8a706683030011c56ef3db3d1f8032c66c5cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:c4:60:0d:63:6e:78:0c:35:a2:31:46:8e:
e6:84:90:fe:20:23:70:8b:1f:c9:0b:57:fa:63:5c:
a2:57:b3:45:79:1e:b6:03:2e:e9:9b:38:94:5c:b4:
a6:c5:bb:f0:3b:54:a6:43:5d:55:b1:3b:e7:ac:c3:
49:f5:b9:ed:6a:f3:ca:a9:97:c9:13:3f:96:4d:c4:
33:d0:63:9a:eb:11:33:66:25:70:86:5a:96:6c:b8:
cb:f8:fa:eb:07:11:f8:9f:e5:09:2e:da:36:98:51:
6f:45:46:53:fe:60:97:16:40:58:57:6a:12:01:c8:
ae:82:2d:8a:c1:5f:5b:fe:97:6d:2d:83:4f:66:a7:
71:db:36:f3:ae:d5:8a:23:8e:6c:bb:13:a9:04:66:
ab:2f:3e:8e:22:d0:55:0a:38:06:06:a8:c3:15:01:
92:55:17:00:84:7e:9c:33:b1:14:1e:c4:06:77:01:
10:ab:2a:c2:b5:9c:22:ec:b4:bc:53:d9:3e:74:f4:
90:c2:4b:6d:8a:dc:43:7e:a9:11:39:a8:45:c6:3a:
77:61:ac:ff:85:40:c9:ed:f7:1d:42:8e:86:a4:89:
4e:84:0e:2b:e0:d7:b7:cf:7b:30:d5:4a:7b:68:c3:
f5:30:c6:b0:40:a8:51:c3:5c:c3:ac:6f:9b:db:e8:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8A:70:66:83:03:00:11:C5:6E:F3:DB:3D:1F:80:32:C6:6C:5C:F5
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6a:68:91:cb:12:53:18:ef:bd:22:5b:03:8c:e3:6e:8b:36:
d9:59:70:6c:5c:65:a1:1e:e9:69:ec:72:9f:fb:a7:ad:ac:07:
30:b8:d3:15:27:02:98:35:c1:dc:33:7b:ad:33:31:8f:84:c6:
4d:60:83:1a:fb:5b:d7:d6:75:51:2a:12:c3:af:de:a0:5e:e6:
c4:df:f7:f9:71:00:16:36:c1:7e:0b:18:fa:8c:49:b4:ca:3c:
38:fa:a7:be:03:19:e5:42:d4:a1:28:8f:3c:d8:21:a1:db:e9:
9f:b4:82:27:c6:4d:e2:4e:47:19:60:73:01:75:6d:bb:50:6d:
0f:34:f1:d7:03:81:21:82:7d:78:7f:ed:a6:9c:39:8e:b4:8c:
6b:94:bc:0b:d7:bf:ac:94:2b:05:af:c2:22:3b:13:92:7e:6b:
f5:49:e7:9a:8c:ce:35:35:a5:fe:ef:f5:a9:86:e4:73:c1:91:
ec:44:56:ca:a8:4d:82:57:e4:bb:33:74:46:20:69:ac:17:53:
e4:63:66:9e:32:b9:87:35:81:43:0c:be:02:b3:f9:b9:e3:de:
8b:98:8a:bf:b7:50:9c:1f:a7:fe:b4:1e:85:ec:da:ba:9b:f9:
bd:2f:4f:d7:31:73:4c:ba:b0:b5:39:7d:2d:8e:a7:f6:ed:5a:
d0:a6:86:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuo8RVFQNTN+naUPvnPp/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTAzYzFhMmU5MDZlZDhjZDJlMzYyY2NjNjdkZjAwYWRl
MWI4MjUwHhcNMjYwMzAyMTMwMTM0WhcNMjYwMzAzMTMwMTM0WjAzMTEwLwYDVQQD
EyhlZDhhNzA2NjgzMDMwMDExYzU2ZWYzZGIzZDFmODAzMmM2NmM1Y2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNHEYA1jbngMNaIxRo7mhJD+ICNw
ix/JC1f6Y1yiV7NFeR62Ay7pmziUXLSmxbvwO1SmQ11VsTvnrMNJ9bntavPKqZfJ
Ez+WTcQz0GOa6xEzZiVwhlqWbLjL+PrrBxH4n+UJLto2mFFvRUZT/mCXFkBYV2oS
Aciugi2KwV9b/pdtLYNPZqdx2zbzrtWKI45suxOpBGarLz6OItBVCjgGBqjDFQGS
VRcAhH6cM7EUHsQGdwEQqyrCtZwi7LS8U9k+dPSQwkttitxDfqkROahFxjp3Yaz/
hUDJ7fcdQo6GpIlOhA4r4Ne3z3sw1Up7aMP1MMawQKhRw1zDrG+b2+hvOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2KcGaDAwARxW7z2z0fgDLGbFz1MB8GA1UdIwQY
MBaAFGyQPBoukG7YzS42LMxn3wCt4bglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEt
MGU1OWYyZWNiMTc1LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8zNzVjMDItZDc3Yi00YzJiLWJhZWEtMGU1OWYyZWNiMTc1
LzEvYkpBOEdpNlFidGpOTGpZc3pHZmZBSzNodUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWpokcsS
UxjvvSJbA4zjbos22VlwbFxloR7paexyn/unrawHMLjTFScCmDXB3DN7rTMxj4TG
TWCDGvtb19Z1USoSw6/eoF7mxN/3+XEAFjbBfgsY+oxJtMo8OPqnvgMZ5ULUoSiP
PNghodvpn7SCJ8ZN4k5HGWBzAXVtu1BtDzTx1wOBIYJ9eH/tppw5jrSMa5S8C9e/
rJQrBa/CIjsTkn5r9UnnmozONTWl/u/1qYbkc8GR7ERWyqhNglfkuzN0RiBprBdT
5GNmnjK5hzWBQwy+ArP5uePei5iKv7dQnB+n/rQehezaupv5vS9P1zFzTLqwtTl9
LY6n9u1a0KaGZg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:34 2026 by rpki-client