Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: o0gSEndQmsKbPLeD7fEtrIVCC9JbA0yhUwko/+3zVcA=
Subject key identifier: F0:61:A4:D5:E2:CC:34:D7:43:D6:27:24:35:D9:E7:70:83:D7:8F:45
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 019CAC0FC763C1C19DF51C6D93AA7F14F8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:40 +0000
Manifest this update: Mon 02 Mar 2026 01:00:40 +0000
Manifest next update: Tue 03 Mar 2026 01:00:40 +0000
Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=)
2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: UCLpP6/KXb8L5R2iX/zhfgmm/P3rp/JAYP+v5F2iTyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c7:63:c1:c1:9d:f5:1c:6d:93:aa:7f:14:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Mar 2 01:00:40 2026 GMT
Not After : Mar 3 01:00:40 2026 GMT
Subject: CN=f061a4d5e2cc34d743d6272435d9e77083d78f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:63:db:45:7b:5c:07:3f:48:7b:2f:4a:5f:
bd:aa:a5:08:5f:13:73:53:e4:e4:f0:cb:18:bf:ec:
78:f9:39:93:76:ad:fc:95:84:1e:55:22:c7:83:d5:
60:32:ba:ab:12:f7:0f:4b:2d:e3:34:26:03:a4:75:
60:2a:6e:a0:71:07:aa:a0:35:9e:6c:b7:5a:f8:2e:
57:80:2c:3f:ee:06:c5:b6:a7:76:2a:b5:21:54:82:
f5:be:2a:83:83:00:16:1a:52:a6:0d:49:ca:ad:b1:
51:77:8b:be:d6:da:09:e1:c9:8e:c3:08:e6:c5:ac:
de:e8:4a:58:0b:c3:e3:3d:8a:47:83:02:71:38:77:
dd:ea:fc:3a:62:52:1e:2e:78:d4:b1:e6:73:ff:b0:
0c:31:7f:6a:c4:7c:19:2c:03:26:19:45:bf:29:11:
98:1c:70:2c:6a:74:49:3a:c2:de:07:02:45:05:7f:
ed:ef:39:26:fc:18:44:0e:9f:ed:81:18:1f:9c:0c:
14:90:ae:73:22:a3:0d:bc:26:03:c0:b8:57:fb:7a:
7e:9c:17:e0:8e:22:b5:a6:65:70:ae:fd:e0:0e:ea:
2e:01:af:8f:ec:17:be:47:b3:f5:89:ce:6e:3b:c3:
c5:0b:a6:38:c5:f1:40:93:38:5d:e0:04:e7:49:db:
1d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:61:A4:D5:E2:CC:34:D7:43:D6:27:24:35:D9:E7:70:83:D7:8F:45
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:46:4d:30:f5:43:92:fd:29:ca:20:ba:32:18:23:9b:f8:8c:
ce:90:8a:31:fe:24:e9:34:52:be:cc:ef:45:7d:76:01:2e:80:
94:69:8c:66:a8:50:96:f2:9c:9a:c0:34:84:22:df:af:f0:64:
66:29:4d:55:6d:71:55:39:f7:53:67:12:f6:e0:43:42:15:c2:
b1:be:e1:b9:6f:82:d7:5a:55:22:ec:e1:75:a6:69:4a:a9:78:
d5:ad:c8:d9:ae:29:b4:06:db:b8:48:5b:62:dd:91:e2:10:05:
b9:dd:18:18:03:70:6f:b3:18:15:1c:bd:af:07:ec:2c:a7:84:
1f:8f:4b:7a:49:62:2d:bb:84:18:e4:c9:6b:53:bf:3a:66:27:
0b:7f:47:61:27:82:07:7a:69:10:f8:39:9d:66:73:bf:d2:9d:
b3:c1:8f:7e:ab:09:ad:52:23:fe:68:62:76:e4:f1:e6:dd:ad:
f1:b3:02:90:0a:11:07:3e:53:01:6a:18:39:cd:7e:d5:de:7b:
05:02:37:f6:b5:39:fd:bb:e8:c4:53:26:d9:a6:06:6e:5a:06:
69:ec:2c:a3:8b:24:7f:76:4c:b8:9e:41:32:ec:ef:8b:aa:cd:
d1:a5:ca:4c:86:2a:13:d9:df:c4:9e:43:b1:ad:1d:cb:84:a7:
74:dd:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:01 2026 by rpki-client