Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
File: bG9jkROWOM74MYEUEyzPJuFn06Q.mft (raw, json)
Hash identifier: a4CvhFaGKGBJnSbnKemip9O4++yLQmbmfAdJOerGbWU=
Subject key identifier: E2:6E:C5:23:E4:D0:41:84:F3:96:62:38:CC:83:EE:FF:F1:D0:45:83
Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4
Certificate serial: 019CAA584EB3305A855F373CD402DD950286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
Manifest number: 151F
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: aCRE3gLyqKdnvA-j-2aLcuCjRwM.roa (hash: ynx5tfnKZJH99nxW03XgpU3cYgXZihD5CZxo4tNLmhI=)
2: bG9jkROWOM74MYEUEyzPJuFn06Q.crl (hash: JGVdqgAKddPwtP7m4W+N+X0yEz5DHFPxSgbPGd7A2Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4e:b3:30:5a:85:5f:37:3c:d4:02:dd:95:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=e26ec523e4d04184f3966238cc83eefff1d04583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:5a:c9:5a:4a:71:15:b8:85:ce:e9:90:87:
42:15:4e:0d:17:a5:6e:d2:ed:81:48:f0:53:89:c9:
12:1a:15:9e:21:62:f1:ec:3d:32:e6:d1:e5:33:74:
29:bf:9b:0b:cb:54:cc:c6:15:b6:53:48:33:02:8d:
0b:80:f1:0e:42:ab:62:a9:38:a5:49:69:d8:db:22:
3e:eb:5c:82:c0:9d:0c:5f:7c:f7:ee:11:92:97:0a:
60:49:d2:2f:9d:bd:34:d7:c3:4c:96:54:46:86:91:
b9:6a:d7:54:70:40:16:b1:e8:1f:05:76:92:5c:c3:
f1:a0:6b:3f:a3:ff:61:29:91:f3:7e:65:c5:ac:56:
22:86:63:cf:d7:59:cb:ba:1b:ba:1e:25:78:4f:0f:
c3:ba:11:cb:06:12:5d:ca:04:58:0b:46:0f:8c:e7:
42:c2:04:e0:a4:3c:6a:a7:40:f3:f2:70:6a:fa:95:
a4:fb:a1:02:d3:8d:1c:ea:8d:70:36:1f:b5:d6:21:
04:1c:ac:a6:9e:1e:b1:58:87:a8:bd:43:f9:61:10:
8a:ea:c1:63:7e:32:f0:99:85:4e:47:db:ed:cc:50:
da:e7:7b:24:69:bb:eb:f3:8d:81:68:56:85:bd:24:
3d:62:0e:a8:c1:f5:56:88:1e:e4:2b:f4:4a:0a:60:
a0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6E:C5:23:E4:D0:41:84:F3:96:62:38:CC:83:EE:FF:F1:D0:45:83
X509v3 Authority Key Identifier:
keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:3d:e2:85:90:5e:f4:9d:b9:2f:9e:cb:9d:7d:8f:09:7e:
e1:61:d9:20:bb:b0:5d:2a:47:1c:a9:4e:17:fd:99:dc:01:c3:
28:28:b7:37:ec:da:46:41:7f:21:5d:9a:96:27:3c:7b:27:b4:
d8:0d:bb:43:5d:ec:33:85:2d:9e:76:82:d5:17:f4:5d:0d:af:
5b:26:89:a2:95:97:05:5a:b3:fc:42:57:48:3e:42:7d:10:2b:
37:12:14:c7:22:47:7c:fb:e6:3b:d8:18:1d:b0:73:e3:57:bb:
36:8a:45:39:c8:10:90:66:4c:82:0e:26:1a:87:15:88:94:2a:
f2:4b:00:4c:59:9c:89:c8:12:c0:26:c6:48:8a:8e:0b:7e:17:
3a:8c:ce:b7:f4:35:89:31:04:4c:14:c1:e0:9b:55:7c:13:ad:
14:8d:57:6c:a6:74:42:d7:fb:f1:17:1b:8b:76:ba:1a:4f:9b:
6d:83:9f:9d:6c:b0:16:59:4e:1f:80:77:f7:ca:19:dc:21:37:
37:74:a6:f2:f3:01:2c:2e:cf:a7:d4:5b:e4:df:25:7b:30:da:
42:3a:7a:f3:d8:25:3a:89:f4:4f:97:7a:64:2a:56:65:01:b9:
e6:74:0a:21:2b:d7:49:6e:61:21:64:67:71:06:7d:44:b7:bf:
a5:46:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:40 2026 by rpki-client