Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: ie6UXIxrAp6x+Jl+DRXQQP+gMLAdR3RpvYGYMw6JHEE=
Subject key identifier: 0E:CA:32:BA:CD:E2:4C:46:0B:30:64:BC:6B:A9:CF:58:6F:3F:FA:89
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 019CAAFD60D8AB4A4811E8630B6D2129E165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0EDF
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: zKd+WbugWgA4UQENdiH/kIHHaSKiqe07aNR6SOELP9Y=)
2: dxP5s46cfdGtCEKUTwZwMAVD5-o.roa (hash: bdBmbDABGKMk3f6j5ouSrfAperYeR4KSkhr2BdJOd/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:60:d8:ab:4a:48:11:e8:63:0b:6d:21:29:e1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=0eca32bacde24c460b3064bc6ba9cf586f3ffa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:a9:54:f3:bb:52:82:99:61:36:87:0e:2e:
dc:05:c8:a9:7e:27:61:02:c9:fd:88:d2:df:a6:8f:
f0:03:48:24:46:b8:f8:60:05:a7:ef:47:d4:85:3c:
3d:1d:b0:0f:37:3d:75:d1:04:44:29:c6:63:a9:8b:
88:80:46:12:b8:c8:3b:58:07:ba:33:27:b3:c4:1d:
eb:b6:b1:e7:71:0c:1f:18:4a:55:b8:69:da:6e:a7:
da:37:e5:96:6f:eb:ff:e7:fe:cc:bf:1f:eb:76:16:
75:bb:59:e2:e7:73:16:37:a6:fe:c1:37:05:72:ee:
8d:68:3f:b5:28:30:05:3e:34:7c:f8:a7:a1:46:96:
0f:d7:ed:10:d4:78:a0:d5:dc:54:e8:65:7c:22:bb:
2b:35:9a:0c:01:96:e6:74:7d:d2:a2:ee:5d:de:cf:
65:cc:9b:11:78:07:3b:4b:68:8e:6e:62:87:53:c0:
f1:b1:6c:dc:f8:0c:e4:c3:d4:00:da:c7:b0:91:a9:
79:b0:43:a7:3c:e9:7c:4c:ca:57:5e:77:5f:b9:2a:
eb:a6:be:8e:cc:e7:eb:29:8c:76:30:90:16:6b:32:
38:64:22:f7:20:52:56:5b:10:99:13:69:7d:b1:eb:
23:53:84:05:0e:35:7d:cd:5e:90:10:57:56:3c:8a:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:32:BA:CD:E2:4C:46:0B:30:64:BC:6B:A9:CF:58:6F:3F:FA:89
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0e:aa:f8:6e:f8:1a:32:09:17:80:5d:f5:7f:cb:8e:23:c2:
ae:7b:e5:b3:3d:d7:89:7e:26:d3:5c:25:69:d8:8e:1a:37:f5:
4c:82:3d:10:ad:82:34:04:0f:cf:8b:f6:ea:4c:b9:ac:df:65:
bd:52:3e:87:fd:21:08:8e:c7:23:5b:5c:03:32:3d:1d:1a:44:
86:03:fc:d6:c6:78:f8:ac:6b:aa:60:da:e5:d4:f7:6a:fb:bf:
1a:0e:c8:74:13:76:d5:44:c4:d5:74:a7:6e:5a:f4:f5:51:3d:
ee:b0:93:bc:ff:9f:58:7a:46:33:51:45:b6:e1:91:09:d6:13:
60:5f:1c:1d:07:93:26:6b:c1:c1:8c:36:4d:96:b5:74:3f:80:
44:00:76:af:ed:ce:4b:f9:7a:89:33:0f:af:95:30:14:91:73:
f4:1f:f7:3e:d4:4d:af:be:be:45:d1:2a:cf:8e:c3:4f:c9:1f:
92:8a:d4:61:53:08:07:75:85:c5:cd:38:e1:db:35:9f:1b:76:
e2:48:67:ad:cc:c4:7f:a3:27:83:8a:51:42:22:1f:61:59:b3:
d9:68:1d:c9:fa:d8:16:b5:ce:74:12:89:52:3d:f8:98:9d:4b:
ae:9d:cd:6c:67:bc:3c:0f:9c:df:8b:bb:e1:d6:bc:db:1b:d9:
76:73:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:36 2026 by rpki-client