Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: db9opNLaNGpS9svWchEGw0t49SEOfgKQsQz4v5InBS4=
Subject key identifier: AE:55:77:5A:B4:BC:77:51:E0:36:BA:FE:4E:FA:EB:04:35:8A:B1:D1
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 019CABA255EFC0F886E213C384390D7FB25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 23:01:08 +0000
Manifest this update: Sun 01 Mar 2026 23:01:08 +0000
Manifest next update: Mon 02 Mar 2026 23:01:08 +0000
Files and hashes: 1: GbafPr-nz6jETA4H3wKy_jppcV4.roa (hash: GL7nF8v33Tb4evsXGeNMyUBxyv4eJPoUXT5+dY5suko=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: v1k3rFQ2s8ysi7Ns5lYLTXEEHAVHqAzSA/ONxqIQyrU=)
3: cFG914qlPQB4YDvh08j7jEMTfx4.roa (hash: 1oFDI2LGaWGL7rDxIaArFNWC7E0yI6jeFwwPeHOnfC4=)
4: esWqFZA6YGUlmlFQv207YFzQliM.roa (hash: SiLfsGKvYKpDqpwOejtKUBiKs266PQZB0yILqSdDMeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:55:ef:c0:f8:86:e2:13:c3:84:39:0d:7f:b2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Mar 1 23:01:08 2026 GMT
Not After : Mar 2 23:01:08 2026 GMT
Subject: CN=ae55775ab4bc7751e036bafe4efaeb04358ab1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fc:01:99:2a:e8:ea:37:cb:d7:6e:d5:47:85:
cb:cf:a3:48:3f:eb:62:4c:ea:00:8b:0a:49:6f:5c:
21:ae:44:3c:d4:64:aa:c7:f6:78:d7:da:17:87:cb:
e7:10:50:07:4d:6e:a7:30:f3:17:4b:b1:01:63:1a:
e0:22:18:24:75:c9:0e:bd:f8:6e:81:0f:a1:fd:cf:
c4:4b:33:32:ad:99:05:91:f1:65:a4:86:a8:ce:5c:
83:06:b0:4d:b6:0e:98:71:08:17:88:ec:12:3c:94:
36:bf:02:58:59:63:21:20:28:60:06:8a:3a:81:78:
cb:04:78:ba:57:ab:15:2a:8e:d8:52:fc:a9:96:c7:
c8:76:a0:11:fd:57:84:8a:a6:41:9f:d2:9d:18:de:
66:36:6f:27:42:a5:48:80:4a:5b:77:2c:72:f6:de:
b4:9e:69:8c:f2:ba:25:94:26:36:ba:38:28:46:05:
33:e6:8b:71:fb:16:48:01:d0:25:a4:bc:cd:91:94:
3b:17:29:be:a7:8d:9c:38:52:28:d2:86:c9:d5:aa:
94:14:8f:9b:11:f8:2b:78:e3:ae:35:3e:00:6b:89:
2f:c5:76:60:15:a6:83:48:28:38:53:e9:e0:f2:58:
fa:4f:4c:0a:98:a6:ed:59:0d:e9:5e:63:82:95:16:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:55:77:5A:B4:BC:77:51:E0:36:BA:FE:4E:FA:EB:04:35:8A:B1:D1
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:fa:84:c3:6e:b1:22:b1:8c:72:c8:f5:b1:86:4e:fe:52:
68:64:00:8c:9a:68:fd:98:69:89:ca:bf:9a:31:38:cb:3b:fc:
78:5e:b7:b1:1d:09:ee:0a:0a:8b:4b:66:ad:e1:e7:68:d2:f4:
92:cd:36:3d:00:98:c5:9c:7f:a5:32:d0:d9:7c:64:4a:3d:1a:
2d:66:d0:ee:57:96:b6:b8:5f:18:4e:8e:fa:6a:e6:05:62:26:
c6:be:81:29:c1:1e:e3:62:28:1f:be:15:8b:b0:cd:f0:f2:a4:
94:fd:c5:72:36:bc:2f:5f:f7:31:06:68:7f:75:a9:06:85:27:
60:2a:aa:39:e4:61:28:f6:5c:a0:f0:d9:2e:b5:ec:83:56:bf:
4b:b7:ec:08:ec:ef:15:ba:50:c1:cb:c8:3c:1e:75:cf:cc:f4:
fe:60:c3:7d:e0:7b:a8:a6:d7:f0:04:bb:20:6a:90:83:96:86:
03:19:4e:e9:bb:6a:57:8e:0f:3a:04:f6:50:61:67:73:a3:0e:
ff:58:e2:52:8e:55:f2:b9:d3:6a:66:e2:69:89:6e:2e:26:56:
29:0c:bf:63:2f:bd:c3:cd:e8:d2:33:0e:9f:f2:f7:a3:49:3f:
7a:17:3c:12:08:53:05:70:01:90:10:d0:bc:4b:f1:31:72:6a:
75:b8:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:47 2026 by rpki-client