Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: 114ZPUUFqTitUYgkYSKUMeVwnIe3651DqBD8Aeh8l8w=
Subject key identifier: D0:4A:EC:E2:53:EF:E3:06:9E:60:58:F8:2F:15:A8:BE:AD:0B:CE:B5
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 019CAD90B5D4C455C143C444F7940F841857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 1219
Signing time: Mon 02 Mar 2026 08:01:07 +0000
Manifest this update: Mon 02 Mar 2026 08:01:07 +0000
Manifest next update: Tue 03 Mar 2026 08:01:07 +0000
Files and hashes: 1: B2icUM6CeeejuMgcUvx_kDaA564.roa (hash: MnhHbagUBXFrbwkwtXZWHt9EfUip9vPtnZBoYPXkEak=)
2: I_-ZDRnwIe3YxtISBfXd7uTtNzo.roa (hash: CvvU8QwgatBH8M1Cq+F7WmSuoj+U0VtrnMnDWpsz+50=)
3: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: lljhNntDg+Juyz7IaiKKMfGoEGnzzCf6K1Dw/QG2NIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:b5:d4:c4:55:c1:43:c4:44:f7:94:0f:84:18:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Mar 2 08:01:07 2026 GMT
Not After : Mar 3 08:01:07 2026 GMT
Subject: CN=d04aece253efe3069e6058f82f15a8bead0bceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:ed:53:1c:28:f7:61:b6:15:36:fd:fe:4a:
22:4c:e3:e2:67:09:ec:ee:2f:19:d2:26:25:a0:9c:
36:be:d5:45:ea:20:a8:e5:6d:b0:9b:5c:28:95:08:
d5:26:b6:d8:f9:24:fa:73:7a:67:6d:11:22:7d:d5:
45:9a:4e:2f:fe:1b:bd:8f:13:c2:3b:22:0c:18:d3:
0d:7a:d5:50:3c:57:fa:82:56:a8:89:6d:59:78:5b:
c2:32:bc:5c:83:c6:99:22:5f:01:ec:61:2f:1c:67:
f1:67:7c:e0:f5:d0:98:cd:94:57:bc:35:8f:88:25:
cc:55:54:0b:9b:d6:71:3a:66:7a:f8:d3:37:7b:d2:
8d:e2:55:12:d5:1d:ac:fc:25:f2:5b:48:9b:55:f0:
68:9f:34:73:fa:18:e2:f3:09:da:71:be:41:aa:34:
9d:f4:5f:4a:67:e4:e7:f5:e5:0d:b0:fa:12:a7:f7:
7a:65:4b:75:5f:c4:40:d6:4c:dc:2f:ba:03:e3:1d:
eb:ef:01:e9:ad:56:0d:42:a3:e9:a2:6e:4e:30:d5:
b4:da:1a:1b:42:30:58:f1:48:79:20:04:89:8f:d0:
88:6f:c7:9e:0f:79:45:a5:01:98:fb:ee:8c:67:d7:
9a:0e:73:a8:a3:61:51:79:39:2d:b5:20:dd:90:b4:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:4A:EC:E2:53:EF:E3:06:9E:60:58:F8:2F:15:A8:BE:AD:0B:CE:B5
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:80:cc:ae:a4:3c:a2:bf:6f:2c:26:10:af:8f:6b:2d:50:92:
7d:5d:d5:2a:23:b6:40:44:ea:92:19:a4:3d:57:7a:64:5c:7b:
e2:46:57:a3:2a:4b:7b:47:d6:e8:47:cf:d5:c2:9b:bd:51:ad:
18:dc:73:9f:ca:fb:0b:cd:26:45:c4:b0:f6:1f:58:e8:da:cb:
82:f5:dc:0b:76:91:92:9d:04:10:c6:1f:a8:ff:5c:4f:14:12:
7a:e7:b1:b9:89:7b:46:f9:77:16:01:3c:2c:98:84:4f:80:71:
2f:c0:c7:3b:ee:8f:ed:fb:0a:74:5d:a1:f3:6a:36:2d:de:0d:
fc:f2:3e:49:73:91:d6:da:54:ac:cd:af:76:88:a7:3b:71:1b:
61:75:89:fb:53:2e:28:64:d6:35:00:34:0b:30:a3:8a:92:07:
12:94:42:f7:85:c2:b4:47:92:25:b6:3c:4e:2a:a9:85:09:e9:
cc:6b:60:d1:4d:25:90:11:a1:98:90:f7:69:00:3f:27:3a:c6:
26:d9:a9:d0:6e:22:f6:51:57:76:f1:d2:3b:0d:c9:61:80:cb:
46:3f:9e:bb:67:97:85:ab:e6:5b:f2:54:b9:3c:00:94:53:a3:
cc:52:97:ea:d8:db:2b:7a:8d:98:80:18:62:b1:ba:12:53:ec:
3f:f4:a4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:40 2026 by rpki-client