Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
File: bacdwHnJ2MLSAprWQOejv5f03O0.mft (raw, json)
Hash identifier: 6OlfPH2bLNqZ/ynL4yJ47o5pusBPLz9kEIHQ9ttI+IM=
Subject key identifier: 13:17:F9:A6:75:F3:1D:5D:89:0C:70:0C:B8:6D:61:29:8D:13:8C:D0
Authority key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
Certificate issuer: /CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Certificate serial: 019CAC471A68B2C7D37FF6B5CC6DAE542640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
Manifest number: 99
Signing time: Mon 02 Mar 2026 02:01:06 +0000
Manifest this update: Mon 02 Mar 2026 02:01:06 +0000
Manifest next update: Tue 03 Mar 2026 02:01:06 +0000
Files and hashes: 1: bacdwHnJ2MLSAprWQOejv5f03O0.crl (hash: RrVAO2qEMlhKIFfysKLUA/w2QBEGDIEBiiYTRCk+DRI=)
2: w-_1Vw_rVcb5CeO2-vHEHj-tSBA.asa (hash: ie2jMbTNrbOkhoLjnDpYKQWWB1120wNXKcxVuv6IahM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:1a:68:b2:c7:d3:7f:f6:b5:cc:6d:ae:54:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Validity
Not Before: Mar 2 02:01:06 2026 GMT
Not After : Mar 3 02:01:06 2026 GMT
Subject: CN=1317f9a675f31d5d890c700cb86d61298d138cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:40:b4:e9:7f:05:38:18:22:75:8c:35:68:
af:94:b6:ee:34:31:ab:61:88:ee:b1:55:2a:81:b9:
18:68:2d:f7:6f:db:42:8d:7d:53:28:5b:8a:68:5f:
93:5c:58:4a:3f:d3:27:b8:50:22:84:37:1a:53:65:
73:8b:16:66:2c:69:11:19:3b:a9:ee:84:ec:f4:b3:
da:d3:16:8e:fb:17:20:70:ad:f8:39:59:ce:7d:38:
00:14:27:30:1d:ba:e7:88:01:2c:83:a4:03:2b:41:
a7:b9:ff:85:ca:87:a4:ba:28:ab:20:fb:1f:14:31:
40:3e:2e:ce:f6:bc:43:3f:90:8b:a4:c8:0e:a0:c7:
89:c0:37:46:fd:b6:6d:5d:b8:bc:3f:e1:74:e0:b8:
bd:64:e0:60:61:8b:ca:23:f9:5a:75:8e:45:19:45:
41:4a:ac:1d:48:6a:94:b4:2e:61:e5:ca:a5:0d:ae:
36:8a:df:b3:67:33:37:02:da:33:5f:15:39:ae:ee:
3c:ef:9c:84:89:92:d1:19:a4:91:85:fc:48:2e:42:
f4:e8:a9:0b:e3:85:c4:05:56:f5:e4:b0:54:da:2b:
28:5b:4d:92:a1:df:2a:df:4e:a2:a1:6d:c1:d9:3e:
49:88:35:fa:9f:f2:06:21:3f:89:ee:b7:72:f6:2d:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:F9:A6:75:F3:1D:5D:89:0C:70:0C:B8:6D:61:29:8D:13:8C:D0
X509v3 Authority Key Identifier:
keyid:6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7d:ba:7e:67:81:7d:ca:79:b5:e1:d2:6b:70:13:30:34:68:
e0:03:d3:45:1b:59:e7:f9:ab:c8:64:7f:69:87:0a:d8:ae:28:
33:34:2a:fa:76:9f:b3:1a:1c:46:2e:98:e9:da:7e:1e:46:19:
fc:f8:3d:24:31:9b:f1:19:c5:dc:37:46:f6:7a:ba:be:ef:ae:
05:40:2a:f3:1c:11:c2:d7:cb:2c:e9:53:fa:f6:8b:d9:4b:48:
87:7c:bb:8a:a5:33:3b:5c:2b:c7:d3:b7:f5:7b:75:8f:72:8e:
d4:41:82:af:3e:51:5c:3f:ab:b6:6b:aa:dd:ed:b4:00:fc:42:
b9:01:72:c6:0c:27:f1:1a:2e:a9:2b:88:57:1a:af:7c:23:d1:
8c:3b:6e:fe:8b:a6:a9:db:cc:02:60:65:ba:ec:f7:3f:50:23:
eb:e9:83:6b:46:73:ce:18:33:d0:65:72:5a:ae:e7:61:c5:50:
f4:4d:2f:57:c7:1a:e4:10:60:3b:33:55:db:05:f4:e2:9e:3c:
c9:7b:b7:cf:f5:37:10:85:14:25:a4:e3:f7:8d:b8:81:ab:e4:
24:b8:a1:b4:94:bf:e1:e2:f9:f1:cd:ec:73:0c:f8:c3:84:74:
bc:a9:c3:36:81:1f:85:b3:8b:7a:da:88:e8:bf:52:14:05:ff:
67:4b:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:37 2026 by rpki-client