Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
File: bW812JkKeylMRTlW4OgkLAqssDE.mft (raw, json)
Hash identifier: vMrun26ZzBYLjwNypIg8KpuCkcpMB+5zXEpZjv/W3vQ=
Subject key identifier: DF:5A:62:69:D9:A2:22:C1:A4:80:FA:AE:6D:28:D6:37:59:91:4F:56
Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Certificate serial: 019CAD230465045B2C536E5BA3F68AC59ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
Manifest number: EA
Signing time: Mon 02 Mar 2026 06:01:19 +0000
Manifest this update: Mon 02 Mar 2026 06:01:19 +0000
Manifest next update: Tue 03 Mar 2026 06:01:19 +0000
Files and hashes: 1: _NwNsp9b9uhvyyyQcxAfQ3IS8fI.roa (hash: Ttx9R/0zVGUKZuQJ7g+6z7yt6OgTL+9nJFIi7ROKEa0=)
2: bW812JkKeylMRTlW4OgkLAqssDE.crl (hash: qkHHSnBymaWzsJxnCQQSB+Sa/DFOfP+lb5ytwCl4EN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:04:65:04:5b:2c:53:6e:5b:a3:f6:8a:c5:9a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Validity
Not Before: Mar 2 06:01:19 2026 GMT
Not After : Mar 3 06:01:19 2026 GMT
Subject: CN=df5a6269d9a222c1a480faae6d28d63759914f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:e1:f6:54:9d:00:d5:80:33:8c:37:e1:64:
95:4c:ee:76:f8:3f:6e:a7:81:42:39:45:2d:df:e5:
fe:e3:db:36:d5:26:6d:1f:11:bd:e6:f7:2c:3f:fc:
90:da:f1:48:8e:c0:3b:62:f7:7f:1e:9b:81:75:97:
de:60:76:e3:2c:df:88:5c:9d:4d:ff:a5:63:dd:5c:
f0:97:ed:bc:97:51:46:91:30:51:42:7a:28:3a:2f:
e6:7a:85:64:15:3a:75:b2:f3:52:ec:3e:58:22:e4:
48:ee:96:38:ee:14:c4:b6:f3:31:37:e7:38:2d:f8:
9c:97:f9:a1:9f:39:fe:e4:1b:5e:7a:74:c2:a1:62:
fb:2c:04:12:c7:96:2d:dc:20:1d:c8:00:d1:89:a0:
9c:71:b6:a9:71:99:4f:12:68:e7:3f:f1:c6:0c:de:
e7:77:41:2a:37:e3:0f:61:2e:69:2d:cb:cd:33:3d:
b2:e5:68:72:af:35:37:9f:2c:24:58:46:88:1d:26:
43:f0:6c:9b:b6:07:b5:86:3c:aa:2d:a0:63:be:2e:
1f:57:f6:3a:26:ce:55:7a:87:11:99:58:83:87:94:
aa:70:c5:db:6b:8b:77:36:60:96:5f:9b:56:6d:ee:
2a:f4:82:49:9b:1d:9a:06:c8:76:83:48:e3:cc:44:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:62:69:D9:A2:22:C1:A4:80:FA:AE:6D:28:D6:37:59:91:4F:56
X509v3 Authority Key Identifier:
keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cb:81:77:27:fd:ca:45:fc:a8:ae:b3:e4:a0:ea:d8:4d:cb:
d7:47:23:cc:00:9b:de:1a:cc:ce:84:82:76:8a:e8:b1:7f:7d:
94:f3:1f:66:5e:f5:58:ba:0f:6c:e6:6a:bd:ff:83:be:21:71:
1c:fb:3f:84:1c:93:56:01:7c:30:b0:f2:26:b8:0d:6f:29:97:
be:63:27:95:78:05:8e:47:cd:d6:50:e8:1b:6d:fc:a4:7e:09:
c2:06:32:24:bf:9f:a5:f2:57:0c:14:20:9d:f0:44:13:69:2d:
a8:1d:e5:61:1b:af:69:f6:d6:d5:2a:f3:ef:b0:68:fb:02:3d:
ed:96:3d:23:43:e2:a9:d6:27:f0:e2:65:12:c1:fd:26:40:0a:
1f:a5:03:7b:2a:b6:13:f4:f0:9f:8f:de:db:c4:1e:1d:14:45:
39:49:e1:56:ef:c6:9a:ab:20:a0:f0:a5:c2:79:05:24:f6:9c:
4f:43:7a:4d:b8:63:29:cc:a7:66:b7:18:2a:7b:60:73:2a:2d:
8b:ec:34:5a:06:11:66:64:78:08:9e:08:68:97:3a:8a:a9:f8:
29:a9:17:99:a8:ab:f3:00:1a:62:f3:6e:dd:be:fb:d2:66:f8:
38:84:67:cd:e8:38:f0:71:18:2a:d7:04:5f:80:42:17:c4:6c:
1b:5f:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:32 2026 by rpki-client