Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier: gIVW9KAleOUIsEXjzki4biqv3FVhJ9LXurKFx5SrNyc=
Subject key identifier: 20:B8:F6:47:70:EC:99:BA:AA:99:6E:8C:B4:84:1C:C1:5A:43:83:82
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial: 019CAC7DC7D72C75FFFAAEB3DAEF78EE8D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number: 09C8
Signing time: Mon 02 Mar 2026 03:00:50 +0000
Manifest this update: Mon 02 Mar 2026 03:00:50 +0000
Manifest next update: Tue 03 Mar 2026 03:00:50 +0000
Files and hashes: 1: 2QZIkDsVUFZ0fA9DNP2jTLVLSAM.roa (hash: qGAsY/mj+KUshvP9IGbzdbP+lJhmdQPEPt6/HveTaYk=)
2: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: ATEjLyw7ZCXmdZlNorfr0k+Q33NX+GO9M175ocZ8v9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c7:d7:2c:75:ff:fa:ae:b3:da:ef:78:ee:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Validity
Not Before: Mar 2 03:00:50 2026 GMT
Not After : Mar 3 03:00:50 2026 GMT
Subject: CN=20b8f64770ec99baaa996e8cb4841cc15a438382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:be:3c:a1:3b:2d:93:15:50:47:9c:fa:cd:
c0:64:fd:28:0e:d1:c1:7e:7e:39:de:dc:f6:4e:ef:
b0:3c:09:25:83:26:58:77:c5:01:76:0b:4d:1e:53:
cf:3d:06:87:a3:03:96:1f:ed:97:09:3e:fb:d1:49:
a7:f8:cd:7d:b7:c1:af:e7:9b:d5:38:57:e5:2d:9b:
cd:03:75:b0:3e:3a:fa:ce:6f:d3:a2:c4:e8:3c:62:
94:8c:5d:72:0a:6a:07:fd:5f:93:46:2a:f3:5f:54:
1d:b9:24:01:4d:6d:a0:f8:b8:42:e2:b6:a3:20:d7:
2e:5d:c3:83:4a:22:72:fa:57:74:9e:48:40:87:ec:
63:a1:8b:3b:c3:85:91:bc:f8:59:4f:52:43:c5:44:
41:71:2e:50:c7:d4:4c:59:65:4a:28:d3:fb:11:82:
b4:23:e9:4e:ed:16:bc:63:d9:aa:06:9e:97:1f:4a:
61:ab:2b:b3:a5:e0:0a:1b:b2:5e:38:b8:87:55:ba:
85:ce:49:c8:12:a9:e4:99:b3:c7:fc:d1:a0:0d:ed:
d2:fc:c9:5a:32:e6:6b:18:bf:2f:52:94:72:33:ae:
6a:cc:9f:7e:9c:25:1b:64:6a:ef:9a:51:5c:ad:96:
c6:aa:df:70:58:e7:36:c7:51:cd:84:ab:ee:f0:32:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:F6:47:70:EC:99:BA:AA:99:6E:8C:B4:84:1C:C1:5A:43:83:82
X509v3 Authority Key Identifier:
keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d0:e2:10:8c:08:19:84:77:ea:41:a0:d5:fa:77:6e:f3:52:
42:03:ab:14:50:a1:81:8a:cf:93:ad:89:27:8f:3c:a2:02:81:
4f:72:26:4e:d8:2e:2f:15:ee:f2:04:3f:70:0c:95:7d:7a:b7:
74:ec:b1:19:29:44:7c:d0:48:fa:b6:7e:ad:53:a8:4f:97:fe:
39:62:2f:42:51:5e:9d:1f:06:e7:d0:5c:67:aa:55:a5:38:4d:
3a:38:77:f6:97:59:cd:14:66:b4:7e:1b:a0:d2:1e:4c:6e:81:
ad:bb:df:c8:7c:07:22:1c:a3:96:cd:b1:bb:c6:87:65:dc:d9:
4a:09:09:56:6c:ec:af:bc:94:38:61:07:e3:03:34:d0:3e:81:
f3:a9:ee:91:70:65:cd:9a:d0:5c:02:79:c6:8d:03:6c:b5:7c:
ff:6d:53:7a:44:5f:a0:c8:06:91:66:52:9a:d7:b7:4f:0a:a3:
c1:99:46:4c:3b:3d:f2:f4:f0:b1:8a:f5:7f:49:b2:3e:ae:09:
6a:db:cb:9e:06:17:f5:3f:76:16:e3:c4:69:c2:51:2d:f1:b9:
b2:26:d7:dd:bf:72:12:3b:37:bd:30:a3:ef:fa:fe:e6:68:5a:
49:03:4d:f8:f1:b9:63:e8:a6:cb:35:d8:65:c0:77:ab:7a:d2:
71:fb:26:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:55 2026 by rpki-client