Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: a7ql8pyNINPXrXmVtug1xKn+YTAWTSHC/+M+GuT3mpE=
Subject key identifier: 6B:48:9A:06:6F:33:08:F4:14:B7:94:1A:4A:28:2A:C7:C4:D5:6E:98
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 019CAD22BCB73557F5355C436208D7274D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 1593
Signing time: Mon 02 Mar 2026 06:01:00 +0000
Manifest this update: Mon 02 Mar 2026 06:01:00 +0000
Manifest next update: Tue 03 Mar 2026 06:01:00 +0000
Files and hashes: 1: 13x6q0kK4jWtFgTsaQE2IuvYeC0.roa (hash: jOVJU7qUmDkbddDyA5OyhBcSOp8ncmsAOoZ16mvRU1k=)
2: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (hash: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck=)
3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: B0nhGG/euubgpbJmaqZlk5Mxz/6+vGTo03KEEbxG2k4=)
4: ekrqCKLizVAMKQXSGPD3DpBP_OY.roa (hash: s5CParuuwC3JvXqHExuQ7yQFo1a7fTuNWPzfjB6dlrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:bc:b7:35:57:f5:35:5c:43:62:08:d7:27:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Mar 2 06:01:00 2026 GMT
Not After : Mar 3 06:01:00 2026 GMT
Subject: CN=6b489a066f3308f414b7941a4a282ac7c4d56e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:3b:52:75:f4:6d:d4:22:5c:27:95:6c:50:
12:e9:e7:3e:be:01:70:5f:6d:7d:7b:0d:4a:84:b0:
b9:ef:b8:ec:52:29:30:77:42:1e:fe:de:7f:c7:69:
2c:a7:50:a7:90:95:f1:a8:90:c2:c5:e7:d8:44:14:
6d:b7:3a:f7:41:5c:cb:fb:22:19:0e:ed:f6:fc:22:
8c:a8:b3:aa:ee:eb:12:96:88:7d:38:fe:5e:02:80:
d5:95:7b:97:bc:d6:de:c3:2e:bb:e4:ef:cc:68:67:
fd:de:88:da:96:d1:42:18:07:01:54:5c:07:25:fd:
50:ee:4c:68:dd:7d:1a:ce:54:81:b4:99:56:41:32:
e1:9f:1e:e9:05:79:c4:4e:7c:32:b8:2d:e8:e5:26:
0c:06:68:48:d4:44:7b:38:2d:75:97:f6:d3:d9:63:
40:22:9f:a2:a9:71:c8:32:28:13:f8:9b:1c:6c:72:
52:b2:26:5f:69:5f:c7:ee:ae:37:fe:f2:0e:60:06:
97:cc:30:bf:73:d6:d9:46:ea:43:97:fb:a9:a6:79:
c4:5a:02:7f:a4:e8:b6:69:3c:72:ed:21:df:9a:08:
15:65:cb:25:1a:1d:e7:f9:01:90:f5:3e:46:fa:d5:
3c:6e:13:ec:ee:84:f9:6b:7f:de:55:b0:8a:99:a3:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:48:9A:06:6F:33:08:F4:14:B7:94:1A:4A:28:2A:C7:C4:D5:6E:98
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4f:e6:f0:38:a1:b7:fd:f5:10:f4:c1:7c:db:f7:62:91:44:
51:3b:84:54:95:ef:d9:b6:b5:9d:27:89:72:04:fb:f0:78:85:
14:c9:a9:f1:14:6c:de:37:a3:72:5a:2d:65:c9:0f:1b:7e:95:
7d:06:48:06:cd:b9:95:37:22:fe:4d:d4:2d:12:c6:45:bc:10:
a6:be:07:81:2d:c0:2b:e4:5c:7c:4c:84:c0:41:ad:b1:6f:f0:
f4:66:a0:9d:b2:ee:5c:00:b0:ac:f4:ae:c6:ac:c8:ed:d0:38:
df:c5:d4:77:fb:9f:4e:7c:74:cf:fd:cf:56:36:dc:ad:a3:fe:
bc:99:3d:6e:71:60:4d:bc:c2:d0:d4:48:97:8b:f6:6b:79:cb:
f8:ac:fc:d2:8e:af:4b:21:8e:71:56:3f:fa:b8:3b:39:3b:30:
c1:1b:0e:45:c2:93:26:4b:cf:55:ca:47:bb:ff:b0:db:37:d0:
98:a5:15:a8:2b:33:cb:e8:a6:14:d0:d3:9f:48:13:0c:a1:f9:
cc:46:ba:c0:cd:52:f9:b8:4b:55:38:50:c1:40:a3:6b:59:85:
ce:29:3b:af:7f:10:e6:57:48:d8:89:50:cf:3c:92:bc:50:f7:
ff:64:87:37:3a:dd:82:5b:dd:71:46:8d:d0:13:0c:69:d6:b0:
c1:a6:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:40 2026 by rpki-client