Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: zl/lTqViTlMVzOzrPGu2jsNP2lhjsZAVD7TM0QiEMNY=
Subject key identifier: 47:7E:56:E3:C5:B2:31:A7:A4:3D:CF:F5:83:A2:D5:0A:50:47:26:A2
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 019CAAC5FDB5B05061FC068C327C8554BF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 16A5
Signing time: Sun 01 Mar 2026 19:00:28 +0000
Manifest this update: Sun 01 Mar 2026 19:00:28 +0000
Manifest next update: Mon 02 Mar 2026 19:00:28 +0000
Files and hashes: 1: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: kCm/Hy4MsQA19+GHLkcvWZUEfKITQSs0Cv1w1TlI4YY=)
2: pFus08PMDQCfPbxZAkSpS82Y4PY.roa (hash: lAjRzwyi3k9OQRK/TA2meKEJxn+Uz1ODnyqv3gesdQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fd:b5:b0:50:61:fc:06:8c:32:7c:85:54:bf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Mar 1 19:00:28 2026 GMT
Not After : Mar 2 19:00:28 2026 GMT
Subject: CN=477e56e3c5b231a7a43dcff583a2d50a504726a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:1d:a9:bd:00:9a:8e:9b:e6:c6:8d:80:b5:
b5:36:ff:b6:4c:fe:be:e9:2a:27:90:64:bb:9b:83:
f1:61:52:b0:cb:97:f9:65:dc:b6:4c:a0:bb:ef:f8:
ae:f5:0b:f3:52:de:f2:a1:c2:bd:0d:0a:d1:e1:80:
2c:bb:1e:52:38:b8:3e:7a:c9:8e:e3:59:84:da:cc:
6a:98:7e:58:81:38:f1:5d:cf:1f:d1:12:27:7b:4b:
2c:c4:54:34:80:2a:0a:6d:2d:c8:25:a1:bd:1f:19:
7f:0a:c2:96:81:52:ea:11:5e:ca:2f:9c:b1:03:4d:
e1:a9:ca:c8:ef:7e:8e:b0:5e:48:f7:eb:9f:8d:3a:
d5:d6:67:ee:56:26:5b:ca:44:68:52:3f:21:9a:81:
01:14:1c:82:71:f3:7f:ab:1d:72:4f:73:d8:04:bc:
2d:94:06:5e:29:8a:69:a4:9b:bc:6a:d0:ca:7a:2c:
52:ad:86:01:67:42:90:c7:5e:52:68:5b:7f:2c:d8:
80:4f:02:7a:ac:6f:85:3e:e6:e7:2b:c6:e8:65:76:
78:0d:9e:2d:42:40:1c:bc:c4:82:84:7e:d9:03:93:
a1:58:a0:76:32:4c:99:3c:68:dc:2b:f6:a9:ba:4a:
73:e7:de:65:b9:bc:08:07:c6:dd:8d:13:09:96:5b:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7E:56:E3:C5:B2:31:A7:A4:3D:CF:F5:83:A2:D5:0A:50:47:26:A2
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ef:30:2d:5b:a8:e7:9e:f2:b2:93:95:69:f3:8c:71:da:f3:
7a:ed:22:c9:39:63:83:a3:38:d8:d6:03:a5:6d:64:b8:ca:de:
79:80:0d:05:1a:06:de:19:39:f6:60:ed:ae:ff:fe:54:4f:ff:
b8:8d:0c:d8:08:b2:7a:c6:c6:ff:5f:6f:80:5f:66:87:5d:16:
f4:a0:80:01:32:0b:50:fc:fb:91:5f:d9:8f:72:c7:87:e1:e4:
f0:03:34:32:81:ef:42:1a:ca:0e:6b:c8:4a:e7:53:7f:fa:f2:
77:20:eb:ad:c2:ca:72:7a:d9:92:f4:6b:8f:d4:ea:cd:f1:57:
44:62:aa:7b:0b:b3:60:f5:40:0b:f9:83:52:6b:19:d2:84:31:
40:b5:f5:2e:96:24:da:e9:9a:60:ba:c8:d8:82:6e:83:b2:12:
a1:61:92:ca:36:2a:30:48:30:65:8f:23:59:37:21:6f:20:a1:
2f:28:bd:d4:e5:09:8d:46:74:0b:62:09:3b:1b:8a:1d:86:40:
94:59:34:e2:6b:9d:ac:0d:f2:91:07:02:15:70:51:fe:ad:0a:
9e:d3:d3:8a:eb:cb:4f:2b:ed:71:8a:00:84:93:a6:17:4c:a8:
48:51:e2:9b:f4:8a:c7:00:fd:be:04:e1:43:d6:41:37:0e:8c:
c7:b8:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:12 2026 by rpki-client