Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: 4C9ZieXVFSIcxfhPc2v1TUquAeLjpTYtvbHOV/+rZeY=
Subject key identifier: 02:FB:9B:8F:AF:65:F3:44:05:DF:C4:53:B8:99:F9:FD:3C:91:8C:30
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 019CAD5A02845FDB4D4901A8A3A9A33BD2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 17D6
Signing time: Mon 02 Mar 2026 07:01:23 +0000
Manifest this update: Mon 02 Mar 2026 07:01:23 +0000
Manifest next update: Tue 03 Mar 2026 07:01:23 +0000
Files and hashes: 1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: 9EFduUdX79RiHFlz2vyYSI0+dcui0q7AjUMqA2IIsak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:02:84:5f:db:4d:49:01:a8:a3:a9:a3:3b:d2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Mar 2 07:01:23 2026 GMT
Not After : Mar 3 07:01:23 2026 GMT
Subject: CN=02fb9b8faf65f34405dfc453b899f9fd3c918c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:fe:c0:4a:f5:e6:d2:90:0d:64:b2:a3:b5:
67:88:7a:ab:a3:c6:41:61:d6:b4:ae:3d:2c:38:a6:
05:5f:10:c9:d9:08:8b:30:a6:a3:4b:ee:e6:b8:10:
db:9b:58:f9:52:29:29:ea:2b:79:0d:6c:94:50:ae:
fc:d8:0e:70:d9:ea:1d:7d:84:42:0b:1d:33:df:1f:
00:75:1c:84:77:74:c4:18:9a:10:e8:49:9b:94:1a:
02:d6:62:68:26:3a:5e:63:21:4e:76:cb:67:f1:a3:
6b:0e:73:60:93:4e:0b:cd:34:d6:bf:a4:9d:f3:90:
75:dc:56:39:e9:72:cd:e9:e0:86:f5:6d:ce:82:70:
ba:2e:20:d7:92:ed:ed:a2:b9:76:07:fc:41:6b:d6:
a6:a1:43:d1:d2:04:5a:b3:1e:23:67:2d:f7:58:4d:
90:34:49:7f:d9:cb:ea:3c:3f:9d:d4:4e:c9:f3:9b:
b7:b7:81:2b:84:c3:93:b6:c5:f5:ec:82:d8:aa:38:
1e:ae:79:a5:4d:0d:d7:81:cc:5f:fc:d1:b3:d1:7c:
05:8a:63:6f:66:45:fa:18:6d:b4:68:39:7b:df:70:
47:f3:f4:71:9f:f6:89:3f:78:ef:8a:90:31:f6:b3:
3b:30:38:1b:ce:79:65:fe:ba:61:22:88:cf:09:c0:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:9B:8F:AF:65:F3:44:05:DF:C4:53:B8:99:F9:FD:3C:91:8C:30
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:84:d5:e5:86:73:2d:a8:ec:09:87:cc:78:04:fd:77:a2:3e:
8c:90:8b:9b:ad:7f:ac:32:d1:e2:65:39:fb:7c:63:2b:d9:85:
33:5a:9e:0a:c0:91:94:29:2d:ef:4f:31:0d:fb:bf:fa:4b:54:
70:fb:f7:01:78:33:6b:ae:cf:e4:8a:37:3c:8f:dd:1d:87:6d:
2c:ed:2b:d0:41:ca:eb:cb:b5:40:18:2a:02:4a:90:e7:5e:0f:
1d:ef:13:2c:3a:01:21:8a:e6:70:1b:c4:0b:e7:c4:77:72:f8:
1e:a9:ca:df:53:c8:a0:3c:5b:5d:3e:b3:3b:ee:65:2e:c6:f3:
00:bf:d1:26:57:c9:e3:26:0a:03:5a:0b:e4:3d:9a:a9:0f:35:
17:72:95:23:d9:cd:03:8c:0f:1f:9f:a4:a3:95:25:e8:65:4a:
85:e7:61:94:15:0b:66:8b:69:ae:26:d9:d7:1e:33:2c:7e:0d:
bb:64:ee:e7:6c:e5:33:bf:89:fa:69:e0:48:5a:f6:86:39:f5:
3a:06:90:39:36:50:73:16:9e:2a:88:82:23:ce:29:36:64:23:
a6:b7:09:f5:f9:2a:22:26:fc:ae:a3:cb:9a:90:2f:bb:eb:ba:
28:da:27:35:8d:27:45:2e:f4:27:c8:c9:33:89:9a:e0:3e:8a:
be:87:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:43 2026 by rpki-client