Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: qN1mp7rlJKdZsIjKAouml69PLyZ8+kRAdt9PVhB+1lM=
Subject key identifier: F8:3E:B8:1C:23:A5:93:34:84:64:06:C4:14:E6:B4:0A:BE:B0:FB:27
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019CAAC7164F7803C9C968B896BF6496D7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 09DD
Signing time: Sun 01 Mar 2026 19:01:39 +0000
Manifest this update: Sun 01 Mar 2026 19:01:39 +0000
Manifest next update: Mon 02 Mar 2026 19:01:39 +0000
Files and hashes: 1: 1wP7tKrHU793i9lAANAvF98w4jY.roa (hash: tk+jnzJLSmGPklGJJhOITYrmNwlbyXIF9jo1MJSghJ8=)
2: Xw4UeKgRwb2lGPFXPKGIgFV8zIg.roa (hash: O4zDvnneI6b8HVvHo7KP4twgP2izdITJyTreaB9hdaQ=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: xsKP4d5dUJg35E8wYfRwt1rReNXz7ZPvt8NmItxsiGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:16:4f:78:03:c9:c9:68:b8:96:bf:64:96:d7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Mar 1 19:01:39 2026 GMT
Not After : Mar 2 19:01:39 2026 GMT
Subject: CN=f83eb81c23a59334846406c414e6b40abeb0fb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:58:78:64:05:c0:b3:2d:0d:57:66:53:96:
03:f3:96:ff:10:1b:52:f1:e8:3a:1e:5b:9a:ad:66:
37:f6:7e:eb:12:82:e9:2a:6f:2b:0b:5c:e5:70:e8:
f2:0f:22:a4:48:1a:1e:21:ae:ec:62:02:3b:85:bf:
c8:83:f0:ee:cd:c0:33:16:92:91:d2:e4:74:8d:75:
b4:34:85:18:90:a8:4c:72:9e:52:fc:74:64:9f:fd:
e9:36:ab:ca:75:e3:99:1c:f6:67:a9:b4:45:92:c8:
86:23:cf:38:67:4f:0b:dc:c8:34:73:dd:1e:f4:52:
77:f0:ee:ad:7c:79:5b:11:7b:1d:9e:7f:48:f4:7c:
6c:9e:6c:31:20:9a:53:93:43:9b:a7:b3:37:11:90:
15:e9:7c:4c:af:ba:3c:0f:0a:0d:3a:47:13:55:33:
dc:e8:06:82:be:c7:e0:35:5c:6a:15:57:ea:b4:93:
5e:f4:49:43:41:be:6b:7e:68:92:74:cd:15:46:51:
94:cf:1f:bc:d6:54:b6:2d:40:55:41:ad:40:b6:de:
06:de:88:72:fd:6f:76:0e:2f:cb:bc:82:06:da:5c:
eb:53:a7:98:75:1d:68:33:01:41:80:3a:f7:57:6f:
aa:8a:93:72:54:7a:7c:8e:77:d2:cd:da:b5:13:c5:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:B8:1C:23:A5:93:34:84:64:06:C4:14:E6:B4:0A:BE:B0:FB:27
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:32:e5:2b:1f:8b:79:04:6b:a7:50:98:c5:59:02:aa:9d:
1b:12:81:77:c5:64:e0:93:0c:c0:cb:7d:1c:73:55:5c:fa:ad:
76:80:06:41:ee:22:79:7a:e0:b9:a8:05:9a:b9:bc:64:31:68:
c9:34:a8:20:37:5f:fe:a7:e4:58:0b:6b:28:2b:a9:11:69:6a:
04:dc:93:31:4c:90:c2:d8:d7:af:e7:a8:28:93:20:d6:a4:c5:
86:e0:60:c8:8f:ce:83:ea:fa:5b:62:61:b9:ed:35:fd:aa:03:
34:08:7e:c9:40:1a:ea:f4:fc:84:af:97:db:db:c6:88:64:6f:
0f:8e:61:86:0e:4e:d1:56:ee:b5:30:52:3b:61:c1:ad:85:c7:
47:0b:80:7f:b8:10:89:2a:a1:35:17:e2:cc:59:e2:04:62:39:
8c:73:2c:7f:90:7b:08:d8:8c:cf:3a:e5:d3:70:51:5a:20:47:
a1:28:82:8c:d5:85:51:6b:b2:0a:27:e8:3e:0c:dc:a6:f0:e3:
52:97:16:4a:77:19:92:6c:e2:1a:b6:86:4e:b8:db:20:64:7d:
c4:94:cb:42:2c:fe:5f:7e:94:cd:6d:1e:7c:6f:63:46:67:e2:
23:6e:99:d8:ee:e5:19:54:74:67:6e:7c:a0:40:08:44:3e:8c:
18:46:5a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:43 2026 by rpki-client