Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: R82105HU1cAfYsZNt/dD9lMk1NPQTZlrG+3Yf06dQ0U=
Subject key identifier: 68:4D:AB:07:37:A8:86:F3:6A:A1:52:B9:5E:52:9E:21:87:2D:B7:FF
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019CACB5235EB148570EC0F0492C8CC4C6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 104A
Signing time: Mon 02 Mar 2026 04:01:17 +0000
Manifest this update: Mon 02 Mar 2026 04:01:17 +0000
Manifest next update: Tue 03 Mar 2026 04:01:17 +0000
Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=)
3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
4: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: gBxHQPaoCOi9EBMfJboQG7UOhIiZTUgCh5kFmrDhaX4=)
6: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:23:5e:b1:48:57:0e:c0:f0:49:2c:8c:c4:c6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Mar 2 04:01:17 2026 GMT
Not After : Mar 3 04:01:17 2026 GMT
Subject: CN=684dab0737a886f36aa152b95e529e21872db7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:bf:63:7e:1e:89:27:c8:92:f6:64:98:72:
e8:6b:50:64:df:15:10:7b:48:24:81:0a:2d:7f:87:
40:0d:8a:26:7a:76:4a:12:65:78:d4:a4:c8:51:bb:
2c:df:92:7b:86:6e:4d:c1:9e:ff:3e:06:d9:77:20:
29:94:44:e3:f7:41:c8:26:29:c5:26:2c:98:88:c8:
7a:62:b6:9e:bd:41:51:f5:08:fc:ed:63:c7:52:2a:
30:99:3a:c1:3c:1e:33:58:a1:25:9b:a9:88:c6:57:
83:d8:32:42:68:79:34:49:69:6f:bb:4b:30:71:4d:
8b:be:63:e1:75:dc:af:5b:2b:ca:32:ef:bb:e0:0b:
62:5e:0c:37:1b:56:48:11:8b:93:24:cd:83:65:2b:
9f:3d:b4:29:e7:1d:d9:3b:77:d4:e7:bb:64:f8:f6:
52:b5:9c:16:c3:06:74:52:eb:61:54:67:1a:e5:7e:
a9:98:82:42:85:38:a4:2d:78:65:f4:99:7f:23:d5:
c4:18:c1:88:1d:e5:e6:3d:65:22:ce:fa:da:8e:33:
c6:bb:87:4c:65:37:67:93:b9:1f:cd:54:9a:4a:8d:
3c:0b:a2:fd:1d:c9:ea:0d:7a:e9:02:c3:a2:58:05:
fb:e8:2c:10:23:15:ef:ff:36:d4:3b:13:04:d6:af:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:AB:07:37:A8:86:F3:6A:A1:52:B9:5E:52:9E:21:87:2D:B7:FF
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:52:f1:c6:72:c2:c7:16:4a:9b:06:a2:08:23:2e:23:ff:5e:
6d:dd:7c:da:59:82:19:b8:ff:e9:b8:9a:9d:78:7f:cc:77:83:
2f:a4:8e:69:fc:2f:f0:88:80:ab:66:85:64:b6:a7:55:af:5c:
49:48:40:f6:d9:98:b8:b8:9b:d5:4a:0f:23:2d:ca:4c:2b:6b:
6c:8f:17:f6:73:69:71:22:07:ff:18:d3:ca:93:69:15:b4:ef:
73:a0:e6:b3:fc:9f:4e:2e:c1:1d:7e:9a:f7:28:b9:cf:5f:e4:
9a:03:87:ba:c0:af:9f:1a:23:b9:2c:dc:29:5e:42:48:af:a9:
ff:a4:af:41:e2:1e:4c:26:12:8d:2d:bd:25:4b:02:57:30:cf:
61:34:f1:7f:5c:b6:00:e3:6e:21:48:20:4b:22:49:ad:c6:21:
2b:eb:bb:ef:5f:1b:6d:fd:60:0c:0f:7e:25:a4:1e:24:fc:1b:
c1:d2:3d:f8:c2:64:52:fa:dc:1d:f4:80:85:8c:43:09:11:e6:
99:4e:26:f8:37:43:35:8e:8f:c7:5c:f2:a3:73:d8:5b:4c:4d:
ca:62:54:10:4d:e9:fd:e4:ac:41:52:c0:6c:4d:39:cf:5d:a6:
2d:99:4a:33:18:dc:ad:b9:5d:63:32:03:98:13:eb:79:bd:16:
d0:65:2f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:08 2026 by rpki-client