Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: g7ZdTYhmQqZNPPgMdlX2pUfYp+SaYCuz9DjlPHNCc/A=
Subject key identifier: 70:0B:5C:C5:5E:85:39:0F:DF:FB:2E:3F:D5:45:C8:C3:92:E2:F6:BC
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 019CB02411091370F9C8BD4245F15B767B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 02B4
Signing time: Mon 02 Mar 2026 20:01:19 +0000
Manifest this update: Mon 02 Mar 2026 20:01:19 +0000
Manifest next update: Tue 03 Mar 2026 20:01:19 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: RpdI5egKE5IXRVI3jFlOy3H+UtsnTsgp6AlIp2y6OQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:11:09:13:70:f9:c8:bd:42:45:f1:5b:76:7b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Mar 2 20:01:19 2026 GMT
Not After : Mar 3 20:01:19 2026 GMT
Subject: CN=700b5cc55e85390fdffb2e3fd545c8c392e2f6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:0a:9f:ea:86:07:2b:b0:c2:9c:67:96:e1:
61:5d:c4:5b:73:d7:7e:6f:c1:18:54:12:a2:6e:07:
eb:26:b9:62:14:90:6c:6b:dd:37:a9:28:cd:92:cc:
4f:74:c4:db:7c:be:11:74:3f:2e:7c:46:59:07:bb:
de:57:ff:68:b2:ed:73:65:84:dc:2a:03:2a:e1:8c:
4d:d3:80:40:8c:68:1c:3a:2b:0d:f8:23:5a:f4:f8:
54:f0:7d:18:16:7a:48:79:95:86:5c:41:19:40:af:
10:75:e1:6f:1f:7e:2a:81:86:5c:4a:a9:bf:a9:68:
90:32:82:c1:70:60:ff:c5:9b:a6:6f:b1:d2:a2:41:
9c:14:5f:e7:69:95:da:03:55:27:dc:47:6a:7b:d3:
e1:5e:75:42:bb:b5:c6:92:46:59:08:ab:bd:81:ac:
3b:40:47:21:e7:ef:d8:8c:61:ab:ea:a5:62:72:e1:
d1:f5:bf:dc:9c:5b:13:92:40:af:c9:fe:bd:ec:b5:
c2:90:c3:6e:c8:90:98:4a:63:c8:98:7c:3c:72:07:
55:5e:30:b7:db:17:77:0b:b1:2b:b7:03:8e:36:7b:
98:29:f9:92:ca:ae:9d:ad:30:ef:63:63:e1:f2:39:
4e:d2:65:63:59:af:9a:fe:a4:21:cf:85:28:4a:84:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0B:5C:C5:5E:85:39:0F:DF:FB:2E:3F:D5:45:C8:C3:92:E2:F6:BC
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2a:dc:fb:71:48:57:c6:a2:e5:97:f6:23:24:9b:5a:b3:79:
c5:4d:85:f6:63:ce:a5:c9:00:8b:14:b5:49:ea:91:c9:99:d6:
3c:1b:f8:6a:4b:82:3c:5e:60:91:99:e1:4e:4e:ed:f6:2d:f0:
aa:b2:76:25:c0:40:95:cb:94:9a:aa:7a:d5:20:27:ce:62:cf:
70:49:1d:d7:69:65:8b:4b:f2:0d:f1:5a:6d:9b:70:a5:50:40:
e9:2d:86:e0:d0:49:71:d0:c9:ae:62:97:5e:20:df:49:73:0d:
a1:7b:e1:80:27:fe:d7:98:23:16:e0:18:8f:72:47:bc:be:5e:
2a:b9:e7:27:2f:01:80:e2:9b:50:7f:9c:b9:4e:e3:b3:ee:22:
b2:dd:f4:42:2f:96:0d:da:3b:7f:c6:80:61:83:21:3b:84:fb:
44:8c:f5:09:e5:39:59:25:92:5a:dc:f4:17:72:df:7b:04:7c:
96:79:d1:17:30:24:95:88:d9:29:7e:2e:a0:4b:51:05:2f:94:
f2:ed:20:e2:73:fc:8d:e1:af:9a:f4:cb:2e:57:3a:66:6d:93:
2d:e3:c0:71:10:60:f7:8c:4c:cb:e0:c3:22:ff:a9:3a:c8:5e:
00:7e:0e:bc:6d:ce:c6:cc:dd:25:dd:66:46:69:8d:98:e7:b5:
5e:5e:db:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:24:59 2026 by rpki-client