Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
File: bW812JkKeylMRTlW4OgkLAqssDE.mft (raw, json)
Hash identifier: W79wp+uynrBLyh9NEwsDAA3Lx4Q4EMqLJoQeL6yaExo=
Subject key identifier: 32:9B:85:E3:85:6B:C6:F6:97:87:A4:F6:3F:30:94:3C:45:1D:1E:C7
Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Certificate serial: 019D9AAB7C92ED4AC35DA7E09290FA6E9828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
Manifest number: 0165
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: _NwNsp9b9uhvyyyQcxAfQ3IS8fI.roa (hash: Ttx9R/0zVGUKZuQJ7g+6z7yt6OgTL+9nJFIi7ROKEa0=)
2: bW812JkKeylMRTlW4OgkLAqssDE.crl (hash: uG92FCduBnUWjOrvrjsSvf043+kjTQGCn5LUQyFMe1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7c:92:ed:4a:c3:5d:a7:e0:92:90:fa:6e:98:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=329b85e3856bc6f69787a4f63f30943c451d1ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:11:f6:89:11:8e:44:98:ed:c8:83:a3:64:
88:75:7b:ec:82:14:d0:5c:4b:aa:53:ee:ca:c3:f4:
fc:85:05:52:57:6e:a2:38:b1:20:3e:3f:fd:32:c1:
8d:fe:9f:ee:ce:ea:1f:95:ef:2c:b2:44:7d:e0:f9:
03:5e:ab:60:d0:ee:94:e9:4b:ae:80:0b:4b:0c:1f:
01:65:9b:28:1a:1a:55:c6:76:02:1e:9d:f9:91:f9:
52:49:80:57:85:82:13:31:28:0b:3a:5c:76:54:1b:
61:fa:50:d3:0e:07:2e:f5:08:49:b1:e5:b1:bb:20:
b0:b1:93:bc:f7:d7:52:7a:28:04:7c:97:04:ae:24:
db:28:b6:6e:5a:2d:c2:33:61:c7:27:b5:32:d9:88:
ce:00:ee:90:b6:14:cc:48:72:ca:14:62:7a:88:49:
32:56:60:85:10:95:ce:e9:71:20:7c:43:8d:9d:62:
62:c9:db:c8:9e:18:54:41:35:f6:aa:30:6f:ca:b9:
37:80:e1:a4:2f:c8:eb:22:11:6e:9b:0c:bc:e7:8f:
c7:75:fb:80:99:f6:78:9d:48:66:7a:c6:ab:54:05:
7f:2e:28:af:95:f5:e6:c5:b3:c5:bd:ce:89:0e:7e:
fc:c1:6d:15:8d:f5:1c:17:bc:7a:e2:74:0e:ad:e3:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:85:E3:85:6B:C6:F6:97:87:A4:F6:3F:30:94:3C:45:1D:1E:C7
X509v3 Authority Key Identifier:
keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:34:e4:65:d0:2a:97:e5:3c:17:6c:a5:00:06:0a:81:d4:b4:
9b:20:d3:d5:75:50:52:50:fc:03:40:75:40:04:cf:aa:c0:22:
ed:b9:c5:21:ac:6c:42:51:fc:e9:98:17:d6:fb:8e:c6:2e:c4:
7e:de:f1:ad:cf:74:b2:7b:20:ed:68:74:66:71:99:20:78:d7:
f3:87:e5:b3:20:65:72:a2:46:29:51:e6:d2:42:d2:ba:81:7f:
74:be:1b:3d:ba:a0:7e:70:a2:b9:d4:a3:cb:91:2a:7c:13:c3:
d4:2e:32:7b:56:ce:e0:61:fd:09:43:f0:78:5e:29:aa:e0:b7:
48:78:d5:ed:05:0c:74:38:aa:eb:b5:58:c4:5e:a6:f6:13:84:
27:e4:e1:4f:4c:20:d7:7d:af:85:f0:ae:e6:2e:1e:d4:dc:b4:
0c:d4:13:5d:45:26:ae:96:df:c6:13:00:db:83:5a:23:90:5b:
ac:eb:ff:06:7c:68:3f:7c:b0:09:e9:99:f7:84:ad:27:a6:cf:
86:81:20:67:fb:52:9d:71:25:75:5f:e3:c6:9d:30:d3:55:e8:
60:15:d1:8d:32:75:15:d0:1f:ec:57:c4:e0:27:58:f7:0b:a1:
33:52:5b:c3:0e:50:d7:11:a7:98:21:00:02:c9:60:1c:f7:aa:
7a:fe:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:08 2026 by rpki-client