Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
File: bc0iYSmgbEho-hD-gtImFrsvZps.mft (raw, json)
Hash identifier: v9oqqMrNAEnPMRFKKaDH6XZ2NwQKtSC7gbhVCiXNXBM=
Subject key identifier: 16:25:21:57:7E:C3:95:BF:A2:48:06:F7:61:81:0E:A4:CA:E6:7E:EF
Authority key identifier: 6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
Certificate issuer: /CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Certificate serial: 019CA97C87D6562F9409657E15F262005084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
Manifest number: 0D
Signing time: Sun 01 Mar 2026 13:00:36 +0000
Manifest this update: Sun 01 Mar 2026 13:00:36 +0000
Manifest next update: Mon 02 Mar 2026 13:00:36 +0000
Files and hashes: 1: 1j0v6CTKjKHoeHupvW1VryYAU0Q.asa (hash: Y9y1TGorxkMNGkkP+ukQKU1wNgOPabfj1IxCSuv+2dI=)
2: bc0iYSmgbEho-hD-gtImFrsvZps.crl (hash: y5TVpOZ0AX88qC009PpuyXBGLOY5OBJKnRHac8yXAYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:87:d6:56:2f:94:09:65:7e:15:f2:62:00:50:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dcd226129a06c4868fa10fe82d22616bb2f669b
Validity
Not Before: Mar 1 13:00:36 2026 GMT
Not After : Mar 2 13:00:36 2026 GMT
Subject: CN=162521577ec395bfa24806f761810ea4cae67eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:ab:84:86:6c:bd:11:24:0a:91:d4:d0:bd:
7a:13:57:fd:35:b2:f6:e6:c8:7d:62:d9:cc:19:7c:
44:c6:6d:53:1b:2c:6c:2f:03:e6:18:d1:5f:43:7d:
e3:12:f2:d0:33:17:a5:98:84:0d:04:bd:93:82:c1:
40:35:e0:dd:4c:e1:15:70:a6:c5:9d:c6:2d:c2:ae:
47:b6:1f:df:fe:a9:10:ad:fc:71:fa:80:8d:72:98:
4d:9b:2b:54:d1:37:3b:d5:c0:50:8a:95:ca:dc:35:
38:1e:bb:f8:62:6f:86:59:35:2a:20:0a:86:93:0c:
2a:ea:76:da:8e:c0:3a:c9:35:b8:20:a9:d7:97:9e:
9c:fd:7c:dc:b1:bd:50:4d:82:73:0e:b7:27:f7:49:
55:b4:18:86:0b:ec:60:b1:b7:d7:7e:a2:73:26:b7:
99:f8:f0:60:53:ba:45:8f:32:e3:59:d9:9e:9d:8b:
52:0f:ee:1a:0f:08:15:71:a0:df:ab:39:53:ac:3b:
67:02:65:73:e2:fe:29:0d:c9:f3:72:aa:73:68:2e:
90:9f:f8:dc:60:e9:d1:da:b4:f5:80:0f:b6:8b:8b:
48:54:9e:ef:87:be:3c:75:24:be:ce:8c:ef:cd:7b:
20:51:45:98:85:82:e6:21:72:89:41:19:e6:9c:36:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:25:21:57:7E:C3:95:BF:A2:48:06:F7:61:81:0E:A4:CA:E6:7E:EF
X509v3 Authority Key Identifier:
keyid:6D:CD:22:61:29:A0:6C:48:68:FA:10:FE:82:D2:26:16:BB:2F:66:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc0iYSmgbEho-hD-gtImFrsvZps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/adfaea-b7d7-46e5-84de-1602bfef37e9/1/bc0iYSmgbEho-hD-gtImFrsvZps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:c0:06:65:4c:1d:b7:57:d4:e7:96:a0:14:dd:01:1c:0d:
14:3e:87:8a:4b:b6:a1:63:b8:0a:35:32:7b:35:71:06:11:8a:
42:bd:b7:31:3b:30:a7:c4:42:1e:c1:49:5a:c0:16:1a:05:02:
db:6b:c3:6e:cd:79:35:66:34:3b:a7:aa:14:4d:fc:11:10:52:
3b:9b:6f:a5:a7:20:e7:c2:81:93:cb:90:86:df:59:89:37:a0:
d5:6a:84:cf:ac:4b:20:30:2e:cd:95:70:f5:91:1a:27:fa:ae:
54:51:23:0e:9c:bd:70:ad:5b:07:30:9e:f6:cc:cd:d1:d9:0b:
db:ad:36:53:44:7f:be:c3:b7:66:1e:6a:f6:18:72:45:37:70:
b7:a4:0d:52:83:cd:83:23:93:dd:50:4c:f9:60:ff:b3:c2:da:
43:f0:2a:1c:b8:b1:49:77:46:0c:80:92:d4:1c:5a:80:e1:a7:
04:4e:ee:c4:27:b7:8c:02:20:a6:2a:83:98:77:0f:41:b4:e2:
5f:f5:19:df:aa:eb:fc:a3:dc:77:4e:fe:48:8c:5d:60:0c:48:
3b:2c:4c:5c:4a:43:98:11:6d:cc:0a:22:8e:47:e6:84:ad:ab:
02:a6:99:40:52:40:60:1f:53:3c:b0:f8:6b:74:54:48:7e:88:
48:b7:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:23 2026 by rpki-client