Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: TUXVHsTCBNuGq3rjEFw9oaj2wYFoBx/XR2+v7DURasI=
Subject key identifier: D9:40:A6:76:FC:EB:E6:64:78:31:97:C0:74:7E:67:A1:7D:0E:66:72
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 019CAA8FFE18DB0CEB9AC26B4735C151C955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0FFA
Signing time: Sun 01 Mar 2026 18:01:29 +0000
Manifest this update: Sun 01 Mar 2026 18:01:29 +0000
Manifest next update: Mon 02 Mar 2026 18:01:29 +0000
Files and hashes: 1: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: OFGlGH44xSu0m7vO0G4PdUsG4GzOBDXzzcFwFKVphy0=)
2: uW6MqNVytVrssfUBxC2o5Ci36m0.roa (hash: 0xEUcG7sHwDRILOo98qDKEy+k04HnajY0Lu0XSxmDN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:fe:18:db:0c:eb:9a:c2:6b:47:35:c1:51:c9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Mar 1 18:01:29 2026 GMT
Not After : Mar 2 18:01:29 2026 GMT
Subject: CN=d940a676fcebe664783197c0747e67a17d0e6672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:dd:8e:42:a4:48:1c:ad:8c:71:7b:f2:2f:
74:6f:ba:5e:29:25:73:53:34:0e:bc:9d:b0:b8:06:
93:51:df:bc:34:a8:3b:02:00:0f:e1:a4:69:38:ab:
0e:de:22:d9:a5:9b:8f:e2:a8:53:51:8b:64:6d:33:
92:74:0a:1d:b0:8f:65:6a:81:1f:b5:3c:fc:0e:6b:
af:39:90:7d:62:b3:82:f7:ba:34:3c:6a:1b:b2:7c:
32:42:e9:2a:6b:96:c9:4f:73:31:52:fc:8a:c0:f4:
48:30:3a:1f:1d:1b:f6:1b:17:7a:56:8b:6b:04:9f:
3c:74:5b:58:3f:0a:12:96:43:2c:cb:c6:c5:dd:12:
19:e2:ab:10:66:10:e5:83:29:ee:b1:da:65:b2:0b:
4a:89:62:2f:5f:d9:c7:aa:c5:9b:97:f5:89:27:23:
db:99:3b:df:5a:30:ab:a0:f9:88:65:45:8d:8a:2f:
85:8b:cf:ac:b3:e3:5c:f7:5b:ba:d5:4b:b4:3b:cc:
6a:3d:89:56:54:bc:09:b8:6b:03:dc:e1:7f:69:72:
93:69:bd:7c:be:5f:4a:40:d3:80:c3:2b:1a:87:36:
ff:01:6e:b3:d0:ab:64:06:c2:d9:22:ef:b7:47:51:
a0:c6:6d:13:55:67:31:31:ff:39:82:5a:cb:ac:aa:
9d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:40:A6:76:FC:EB:E6:64:78:31:97:C0:74:7E:67:A1:7D:0E:66:72
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:7e:32:d0:28:46:b3:70:19:db:f0:1b:a5:dc:83:27:0b:
94:12:21:e7:0b:3f:34:d9:d3:df:33:fd:53:70:70:d9:02:8a:
94:12:77:73:bf:91:2b:dc:1b:40:00:3d:f1:9f:30:b0:fc:c9:
3a:5e:32:b7:70:1b:16:01:51:f8:a7:52:b1:51:10:e8:23:d9:
9f:f0:3d:97:3b:0a:5f:29:83:6b:18:63:44:22:47:e6:6c:bb:
bf:c3:fb:c1:a4:51:0a:20:06:f3:65:de:97:eb:65:57:cc:1f:
ea:fb:83:0f:48:19:b6:d7:ed:04:63:e8:79:25:15:15:28:02:
e3:66:a9:ee:e1:01:84:6b:55:28:e0:40:60:51:b0:9f:34:56:
00:6f:f3:37:1c:72:3b:e1:64:c6:3d:32:a5:5b:ce:26:19:6e:
50:61:47:20:ee:c7:aa:b5:27:f1:00:4f:bd:3a:b7:74:fe:79:
d2:8f:06:38:94:d1:b3:c1:a5:47:4b:e7:67:fa:67:8b:72:fc:
63:75:c8:0b:47:8f:7c:01:d8:04:4c:73:69:03:dc:84:25:80:
68:e6:d3:9d:9f:5a:a4:50:6a:fe:3a:bd:91:18:8a:14:39:ae:
e8:48:97:e9:10:6c:6c:8c:fb:34:25:dd:ee:1e:61:f9:9b:27:
4b:d9:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:20 2026 by rpki-client