Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: IwWEekiOSN16Tq1Xb0bSfsws5QllnwP1zsw1COAxnk0=
Subject key identifier: 64:28:BC:AE:48:FF:15:A7:91:4B:3D:F4:3A:9F:F2:E9:6B:20:88:2C
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 019CACB4D4429C1748522F96AB5817540BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 04:00:57 +0000
Manifest this update: Mon 02 Mar 2026 04:00:57 +0000
Manifest next update: Tue 03 Mar 2026 04:00:57 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: GYbe54MH+xq9JfGFfTtoViXJLFCOsNSKwIIwC1+xsxE=)
2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d4:42:9c:17:48:52:2f:96:ab:58:17:54:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Mar 2 04:00:57 2026 GMT
Not After : Mar 3 04:00:57 2026 GMT
Subject: CN=6428bcae48ff15a7914b3df43a9ff2e96b20882c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:d0:a0:98:bb:69:ee:ed:7d:6f:b3:0a:f2:
c4:66:eb:fd:6d:3b:85:8d:45:8b:b5:72:bd:38:e5:
6e:0c:14:d1:95:01:0c:a6:c0:77:5c:a4:2e:57:54:
a6:fa:84:65:eb:73:a6:db:34:13:6b:4a:da:b0:40:
e7:4d:1a:bb:a2:68:38:98:d6:17:72:b4:bc:c0:b3:
0d:7c:6c:15:f8:c6:93:3b:5a:65:88:4a:4f:bb:08:
7d:5f:38:20:4e:61:bf:9d:9f:b5:36:a3:4f:a6:fc:
50:5a:9d:27:80:38:23:d7:2e:37:99:fd:d6:27:ed:
42:c8:eb:4d:e5:76:82:17:fb:f3:c8:65:ea:d2:2e:
43:07:7c:02:2f:0a:a9:b5:c1:61:17:76:7e:ce:6b:
cf:ae:ac:5e:7d:02:d3:aa:03:e4:16:a3:be:75:17:
3e:88:7c:e6:61:4e:0b:c8:e7:84:0b:e3:35:74:56:
1c:fa:75:a8:12:6e:7b:9d:4b:43:4d:5f:10:fb:ad:
5a:ae:70:fe:4d:79:a0:83:95:83:28:fe:89:69:01:
56:a7:52:3d:2f:bb:62:c0:b6:9d:68:c3:ad:6f:58:
9c:d8:05:bf:51:05:7c:c8:b4:92:86:0b:b5:dc:a7:
df:55:49:0c:5b:03:2f:cf:67:da:5f:18:1b:87:5f:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:BC:AE:48:FF:15:A7:91:4B:3D:F4:3A:9F:F2:E9:6B:20:88:2C
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:46:a8:54:f0:d5:4b:d9:a0:5a:ce:3f:54:dc:c2:8e:47:d0:
4d:24:61:73:1c:76:5e:cf:de:78:71:ec:a8:bc:19:90:ba:dd:
8c:0b:53:10:6b:43:4e:84:9b:fe:16:66:0e:06:58:84:fc:2b:
01:8e:48:79:98:a5:1d:80:6c:cf:f4:5e:7f:8d:23:f2:7a:28:
62:9d:10:cf:e3:48:23:d2:0e:d3:f0:b1:3b:3f:0e:39:5f:9d:
98:a7:1b:d0:24:2a:40:21:34:65:0a:22:cb:10:bd:e3:64:68:
b4:8a:8d:b3:02:32:ca:83:4b:ba:50:85:1e:d7:5f:6c:43:3f:
96:8e:05:d5:1e:3b:26:f7:36:fe:cf:00:4d:77:08:8f:23:82:
ed:10:4b:dd:17:3b:e2:e8:60:c7:8c:01:6d:ee:72:ca:30:f2:
69:35:fc:74:1b:f5:26:89:b7:2c:9e:e7:e1:87:2a:88:ac:61:
cf:05:12:dd:33:46:23:b9:05:1a:77:1f:4f:01:81:f2:0b:f8:
64:fd:28:33:e6:2e:bc:92:3f:50:ef:3f:79:21:6f:da:cd:2b:
65:2b:5e:f0:aa:5b:ba:e3:12:b0:be:19:0c:3f:35:46:43:06:
99:7b:e1:47:1c:44:eb:d4:eb:d5:9e:b7:fd:02:66:aa:91:33:
a2:99:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:28 2026 by rpki-client