Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: 2a/53zOH7ixyabwhptnP5dM3YzebpUta9898jK1RYZ0=
Subject key identifier: 2D:6F:9A:3B:FE:5B:7B:81:07:AC:F3:BF:6C:E3:2A:DC:C4:1E:8B:05
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 019CAAC698958D96598330ACF695BCD4D42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 188C
Signing time: Sun 01 Mar 2026 19:01:07 +0000
Manifest this update: Sun 01 Mar 2026 19:01:07 +0000
Manifest next update: Mon 02 Mar 2026 19:01:07 +0000
Files and hashes: 1: FDadFeqXdB-4hSls4tkk3SxPK0c.roa (hash: vYzxw+U9C6N8QQp+gQ4+C6IjpNypmXaiCUE3aon4FxA=)
2: MfgRriYJp7m_VcqdOdfAbTb2DNo.roa (hash: KLVx3gQAbv0plQDb9I4VjnfX1uzxg36H8GHKeOJlzFY=)
3: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=)
4: QqOOXG2U8KmftWPIGkmnz-He-1I.roa (hash: 9H7M4l3KUWpTvpSo8NQDnFUn85s8Qh4futzKFfEpRME=)
5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=)
6: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: uPn9hrIL9Qo6f0XZog2kpFUAZ9DRfE0LtVvTRmj+3Ic=)
7: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=)
8: kT2l4aAekYpUQWufDkupbupuegk.roa (hash: rw2rc2iNkA7LVF7/4CAp2ausXlmtVnPSsdvSUBErb28=)
9: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:98:95:8d:96:59:83:30:ac:f6:95:bc:d4:d4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Mar 1 19:01:07 2026 GMT
Not After : Mar 2 19:01:07 2026 GMT
Subject: CN=2d6f9a3bfe5b7b8107acf3bf6ce32adcc41e8b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:17:e9:53:48:df:95:3c:61:70:5f:d7:c9:
b4:30:43:2e:44:cd:4d:53:b0:57:77:76:c2:25:8d:
df:a9:6d:aa:b4:5a:f2:89:ed:ae:4c:6b:0d:a9:51:
2d:aa:a8:10:51:7b:6c:f9:b1:e7:56:c4:e1:3c:4d:
11:51:7e:d6:36:a1:fe:2d:33:f7:30:9f:f2:bd:09:
f1:93:6e:c1:86:78:9a:ec:91:ff:5e:ba:3f:dc:4d:
e6:03:86:2c:c6:e8:24:c6:34:eb:53:45:56:73:09:
bb:93:04:28:ca:25:63:7d:93:f4:18:15:cc:1f:76:
26:10:d0:54:69:76:01:7c:cc:c3:cf:58:41:62:49:
68:43:e6:98:d8:bf:4c:f1:3a:4d:8b:89:5b:5d:e2:
19:a7:4a:3b:2e:a1:84:51:c5:c6:e3:51:ca:f5:a7:
c7:55:71:93:14:61:20:80:76:46:4f:dd:a0:12:d4:
30:6f:a1:37:c8:96:18:b0:db:dd:b1:11:c0:b6:5e:
68:3f:16:29:f4:c3:21:7e:47:27:61:09:6e:19:38:
7d:2c:41:ef:58:e6:7c:04:a8:40:b1:ba:c1:08:84:
4c:2c:81:5a:cc:76:c2:b0:13:da:15:86:7e:00:3b:
5a:96:7d:27:f1:6c:ac:d6:76:29:3e:5f:75:17:41:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6F:9A:3B:FE:5B:7B:81:07:AC:F3:BF:6C:E3:2A:DC:C4:1E:8B:05
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0f:e9:c4:ba:c7:91:1b:8c:72:cb:81:e4:59:8d:2b:46:c7:
40:63:88:47:d0:5f:84:02:00:d1:eb:c0:3c:3d:25:66:4c:e6:
1f:b9:3a:5c:2b:fe:c1:ea:4d:10:25:d9:bf:bb:1f:1a:a9:27:
93:68:70:9f:ff:50:e1:92:d0:4a:10:c6:cb:bb:ad:c5:fd:b5:
d3:47:a6:30:14:7f:32:d0:42:ce:e9:1b:43:a1:3a:8e:40:14:
ba:f9:85:23:40:db:e6:50:30:f6:c7:38:dd:63:da:82:47:8f:
19:cd:0a:fa:2d:95:79:7b:3c:3c:72:e9:70:c0:20:f3:4f:d9:
59:f9:86:4a:76:51:fb:13:3e:f4:f5:27:88:17:8e:75:fe:f0:
49:a0:f5:e1:73:f0:61:ef:8d:13:d6:0a:69:7b:3d:b5:cd:3a:
4c:d5:3c:77:32:9e:01:f1:6d:32:01:ca:02:60:31:17:76:09:
7a:15:40:6d:57:e0:94:2f:2f:84:d4:01:9c:93:5d:70:90:67:
3b:fd:37:3d:f9:b3:2f:84:56:9f:2e:0a:2f:a5:ff:eb:ae:49:
af:a0:96:6a:37:34:d6:e8:47:ec:ed:ec:2b:7f:ff:e2:a4:3c:
6b:bd:93:1c:01:2d:51:27:99:b5:32:c8:76:c8:d8:60:88:e4:
03:95:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:03 2026 by rpki-client