Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: gmiKpdM2b9MI6oyodR3avwdbW1y3TN/Zbl2cF0Nj7BE=
Subject key identifier: A9:AC:FF:22:0A:84:FB:DC:BB:8C:86:A5:33:75:6E:4C:A2:5C:8B:9F
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019CAA8FEA522048DAF732A7361B7EDBEA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 153F
Signing time: Sun 01 Mar 2026 18:01:24 +0000
Manifest this update: Sun 01 Mar 2026 18:01:24 +0000
Manifest next update: Mon 02 Mar 2026 18:01:24 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: EAmVgmV6PZPGsYy9+i5HEpwoYy7u+08fOF6FnaSecqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ea:52:20:48:da:f7:32:a7:36:1b:7e:db:ea:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Mar 1 18:01:24 2026 GMT
Not After : Mar 2 18:01:24 2026 GMT
Subject: CN=a9acff220a84fbdcbb8c86a533756e4ca25c8b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e7:00:0c:a9:64:2d:54:80:86:4f:13:64:42:
ad:73:c4:ae:34:3f:66:d1:5f:3d:06:56:95:b8:69:
05:2e:d7:e9:a7:b9:f1:6c:21:2c:f6:a8:47:e8:21:
20:03:51:75:36:2b:28:f3:2e:34:a7:3a:69:9c:39:
c5:66:e5:69:27:a8:a9:b9:94:8f:7e:ea:cb:45:64:
ad:69:43:20:ad:bf:f4:7d:8a:77:29:9e:f1:df:9d:
a4:a2:86:9b:a4:cd:c9:d9:53:e0:1f:db:25:92:30:
89:47:b4:75:f6:b8:73:d9:5a:e3:f6:a3:d2:ad:00:
62:f8:37:47:41:43:f7:c2:9e:ac:83:fa:9d:03:db:
43:6b:16:8f:51:db:9d:de:1d:05:20:07:ea:33:cf:
46:99:91:eb:36:64:89:d6:d2:b9:e2:75:79:03:88:
3a:fa:f5:44:36:24:29:18:3e:d5:72:95:90:e0:83:
49:fd:ee:5d:94:47:32:b0:43:23:dd:d4:1c:61:63:
7e:70:80:8c:6c:2b:4d:06:70:57:58:43:9b:1e:be:
2f:17:12:40:dc:85:09:13:26:e9:97:62:38:9a:2b:
4f:4c:bc:c4:0a:df:2b:10:d8:af:fd:57:36:94:5e:
ef:37:d7:d9:6e:a4:35:31:fb:4d:56:f5:0f:ed:7f:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AC:FF:22:0A:84:FB:DC:BB:8C:86:A5:33:75:6E:4C:A2:5C:8B:9F
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4a:0f:04:3c:3e:73:76:8e:5b:9f:d0:7b:19:69:36:70:35:
3b:20:e3:59:a3:3d:1c:da:10:07:33:b4:b6:5f:a4:8b:a2:5b:
75:8c:30:7b:b7:4e:f9:aa:9d:d3:f8:d7:18:55:58:e1:06:df:
e3:9e:c8:6d:38:21:82:bc:32:02:7e:be:66:9e:05:0c:f6:72:
9a:5b:18:df:5f:00:1d:1c:39:56:9f:7d:b1:59:d3:7e:b4:9d:
e1:2f:64:04:f0:b9:ef:60:c3:c1:03:fa:1d:23:a4:ce:b0:9e:
1e:09:38:99:f2:a4:53:60:cd:23:b1:b9:12:d0:87:1a:b5:45:
8f:62:7e:2c:ff:f8:e8:99:1e:05:8b:70:7b:7d:6b:1c:29:fa:
56:93:5b:d3:f2:89:95:02:0d:8c:38:1c:7d:05:76:f9:be:c8:
04:ee:32:0a:21:af:c2:34:75:19:8a:75:43:9b:9a:a7:0f:f1:
be:f9:35:dc:7b:46:67:6b:3b:b2:55:af:0e:c9:00:17:4e:9b:
04:36:1d:22:d7:c5:71:d0:af:b5:59:9b:b3:88:7c:9d:a1:17:
8e:53:21:5b:41:df:78:e8:9a:98:a0:db:d9:d5:37:19:c9:e7:
5e:e6:95:34:95:cf:eb:d8:19:a9:17:9a:4e:8e:4d:9e:85:db:
8d:5b:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:48 2026 by rpki-client