Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: vu8frHd/iQufQfYzTXORqorepEi+kcfwkXB0vYPnfGo=
Subject key identifier: F5:7E:CF:FB:EF:50:88:E8:3D:33:4D:0F:A9:A5:ED:D4:99:DB:45:A0
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019CABD97F4C932E9CA7FE5648F29F4CE2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0CC7
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: B+Redxj9Wy1u/RqeMqPGKlHVLz0K4qMsl1XopBLc7k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7f:4c:93:2e:9c:a7:fe:56:48:f2:9f:4c:e2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=f57ecffbef5088e83d334d0fa9a5edd499db45a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:97:d0:23:1c:47:ec:ca:1c:42:52:62:17:
ff:49:be:50:4f:cc:83:8a:1f:cf:9d:cc:27:13:ff:
86:00:e0:af:6f:62:1a:af:11:c0:f3:f5:4a:b6:69:
eb:4b:32:6a:43:9d:76:51:13:b7:c6:7a:04:3e:87:
67:74:9a:8b:f9:d1:cb:df:99:19:44:ad:1b:aa:4c:
94:33:e4:29:9f:73:d8:ea:ea:a5:2f:90:65:e4:57:
29:d3:52:0e:67:57:a7:ed:80:2c:01:b8:9e:0a:fa:
9f:98:fa:ea:4a:1f:16:2b:35:c4:93:b2:e3:88:f8:
b1:ac:94:05:30:ad:69:13:4f:78:66:5b:08:07:74:
ca:02:6d:66:0f:33:0c:a7:13:06:97:32:4c:4b:7f:
dc:b0:6a:b5:5b:24:8d:4b:4a:49:db:9d:eb:e4:06:
0a:5e:97:ae:34:f5:b5:1b:c7:2b:83:a1:59:aa:af:
fd:67:3e:f0:14:12:e3:cf:90:ee:6d:cd:1e:d8:6e:
72:a3:a8:65:3c:7c:1f:44:65:1c:d9:fe:d1:d4:e9:
54:3e:f5:ac:5c:c1:83:fb:c1:64:ad:7c:c8:c7:c6:
b1:53:67:18:d0:30:ea:6a:f0:33:dc:2b:50:5b:e4:
0e:51:b1:e2:19:53:d0:3d:89:bd:bc:3a:31:20:e4:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:CF:FB:EF:50:88:E8:3D:33:4D:0F:A9:A5:ED:D4:99:DB:45:A0
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:db:a4:ee:27:d5:3d:01:0b:e3:94:b6:fb:b7:0e:28:0e:8b:
6a:39:3f:d2:ea:9c:7f:21:e0:1b:2b:f7:72:43:99:0f:1f:93:
79:29:e4:b2:12:18:b7:66:1b:63:45:bf:89:47:f2:8a:27:6c:
41:45:3a:35:fc:50:af:0d:51:e4:7d:5e:ce:eb:67:a0:15:cd:
aa:ba:97:71:2e:7f:17:80:50:40:68:e7:eb:73:0a:a6:2d:ff:
84:32:64:db:fc:70:26:66:92:76:2b:c1:40:69:82:fd:b9:d8:
82:f4:31:85:6f:1e:3d:a5:e3:1b:8c:8e:cf:70:91:30:fb:71:
4a:fc:09:c4:b0:77:db:58:3b:7a:44:8d:5d:19:08:b8:d1:e8:
00:aa:76:b1:32:0e:bd:65:d9:1f:75:02:e0:e8:bc:12:cb:a8:
68:b8:5e:c1:fe:88:5f:fc:64:bf:d9:ef:1a:42:76:5f:77:c1:
ae:b8:79:e2:8f:31:c5:a2:47:cf:c8:90:ae:26:70:25:43:c3:
36:ad:a9:4e:d1:10:11:d1:89:c4:37:39:8b:c2:a0:22:2c:43:
d7:b4:47:11:3f:0f:4b:fc:1a:dd:7a:90:79:3d:c6:fa:af:df:
a7:96:a2:ba:97:4b:10:2d:65:37:04:f4:d9:0d:9d:0f:12:46:
d5:ed:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:33 2026 by rpki-client