Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: b2alYqRQMVKT71Aq9++j62b/vKvYuNaHDfE1vdIxjck=
Subject key identifier: 52:A4:08:3E:21:58:2D:6B:B0:36:A8:A2:E7:1A:80:3E:EE:DB:02:D2
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 019CAEA314700F72A88B90F6F5C455DBBF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 13D6
Signing time: Mon 02 Mar 2026 13:00:48 +0000
Manifest this update: Mon 02 Mar 2026 13:00:48 +0000
Manifest next update: Tue 03 Mar 2026 13:00:48 +0000
Files and hashes: 1: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: x9KqEiggBje2jaoGJWhgyJpvyRKvdx4PbZyaw4GORB0=)
2: gVF7AxuIzKTCjMsBQD_13bKv0vk.roa (hash: Xq/PLLG8F1v6vaXhJgc29NbSM77ha3BnJMruHRHuujU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:14:70:0f:72:a8:8b:90:f6:f5:c4:55:db:bf:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Mar 2 13:00:48 2026 GMT
Not After : Mar 3 13:00:48 2026 GMT
Subject: CN=52a4083e21582d6bb036a8a2e71a803eeedb02d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:49:76:73:2d:c1:2f:88:15:ed:a4:d8:23:
f6:82:79:77:63:29:6c:ad:98:0b:8f:89:4c:29:3a:
ce:27:3d:2b:31:1c:76:97:e8:97:16:8c:a7:e8:de:
e6:79:1b:bd:b5:5f:c5:ac:7c:07:65:97:a3:0b:27:
09:0e:2d:66:7c:da:b0:75:a4:9e:0b:d3:9a:db:08:
de:10:a1:1c:46:06:49:a2:f8:b5:e7:65:b0:81:f4:
ec:f8:54:a0:eb:c6:0a:14:a7:c8:c8:54:ee:7a:50:
08:12:44:34:d1:cd:0f:ea:84:ad:1c:13:95:45:d2:
6f:f7:03:cd:48:bb:3a:5e:d1:16:cb:76:7e:8d:a1:
6f:43:d7:b1:41:3b:cf:8d:08:ef:a1:00:6b:a4:39:
77:d3:f7:dc:f2:ef:98:9a:1f:36:4d:a9:ea:ac:7b:
31:e1:5d:62:48:6e:44:d2:5e:52:d3:30:e5:b0:a9:
bd:68:d4:73:7d:9e:ef:83:a2:9f:d7:c5:32:67:b4:
fc:16:e9:72:18:87:e7:8d:7c:f9:e0:12:85:cd:bd:
03:3f:5f:8a:5e:24:61:f8:4a:97:c3:c1:7f:2f:56:
37:71:5e:74:43:0e:f5:6b:3a:da:78:49:e5:9f:fd:
09:d6:a9:62:f6:4a:bd:cf:e8:6e:c7:96:a5:71:f9:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A4:08:3E:21:58:2D:6B:B0:36:A8:A2:E7:1A:80:3E:EE:DB:02:D2
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fa:f4:4b:23:5f:3f:9f:dd:9d:36:db:43:a2:b8:f3:52:3c:
b1:68:da:97:8d:f1:f5:52:14:0f:7f:25:ca:09:79:3b:c7:e9:
69:ee:65:9a:6f:4d:89:8e:8f:7a:a9:71:e0:5d:19:e2:d7:a2:
29:f1:0c:b3:54:7c:93:17:32:41:fc:94:5e:61:fe:db:38:5c:
18:10:c4:32:bd:e0:04:50:3d:9d:60:b9:a1:cb:0d:1c:d2:20:
f1:fa:1c:1e:b4:bd:a1:74:65:ea:dd:4c:1a:b2:3a:f3:8c:58:
89:7a:21:1d:05:38:3b:4a:3c:78:92:94:a6:75:cb:cb:ec:fa:
19:ad:e8:98:2a:9a:c4:13:45:70:6b:26:4f:1e:db:ba:b4:ed:
59:a2:83:66:25:37:11:ee:13:ea:63:58:f1:69:f2:ad:18:c2:
19:40:0a:65:60:e9:77:9a:36:d7:8a:64:c1:4b:85:02:83:ac:
5b:ef:91:09:9c:cb:fa:7b:7e:cc:73:65:63:ca:76:fc:c6:8a:
ef:1d:80:45:57:c4:9f:cc:93:81:41:40:91:54:2d:51:8d:cf:
f1:89:9f:08:03:8e:da:b5:2e:ea:32:20:44:f9:71:ee:4d:d9:
7d:dc:8a:29:03:b7:e8:0f:22:d1:63:93:fb:dd:e9:a6:50:44:
4e:bd:82:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:47 2026 by rpki-client