Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: iMWf0q/fJg2n1vCMTwWdiJANafjOeFufrpu7lH1Hry4=
Subject key identifier: EA:3A:56:D6:21:62:E8:98:31:B1:16:05:0E:09:15:7D:5A:01:F4:E3
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 019CAEA33CF4AB9C8B14E66A104C655E0801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 13:00:59 +0000
Manifest this update: Mon 02 Mar 2026 13:00:59 +0000
Manifest next update: Tue 03 Mar 2026 13:00:59 +0000
Files and hashes: 1: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: z6TXcJoTD1xbbnguBr+ywZFmjbjgKzRItRNDFj+btbQ=)
2: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (hash: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:3c:f4:ab:9c:8b:14:e6:6a:10:4c:65:5e:08:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Mar 2 13:00:59 2026 GMT
Not After : Mar 3 13:00:59 2026 GMT
Subject: CN=ea3a56d62162e89831b116050e09157d5a01f4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:5c:06:5b:19:9d:b4:3b:4c:be:bc:84:8d:
33:0e:12:9f:52:a0:e4:71:ee:a2:54:33:45:a9:73:
44:da:95:78:15:d4:52:39:26:46:6e:f3:c6:02:0f:
2f:3a:ff:70:a2:a5:4e:d6:84:c2:1c:4e:32:50:8b:
49:c0:d6:3e:15:b5:f4:b8:e0:e4:a6:9f:b8:c1:70:
42:e2:14:57:e4:db:4c:b7:ec:7d:e4:ee:dd:39:97:
38:c9:6b:a5:d1:53:02:f3:33:00:e1:28:f1:0d:12:
42:10:9d:cc:c6:6d:70:d9:0e:1b:d1:e1:61:68:98:
9b:64:56:e4:00:a8:c4:0d:d4:6b:46:a9:80:d7:99:
03:a3:91:76:b4:16:3a:25:73:9b:e2:02:a5:dd:64:
b5:2d:44:c1:ba:54:9f:f1:92:aa:b7:cf:6b:bf:6d:
35:5d:4b:9f:17:47:a7:6d:27:70:ab:16:59:ba:46:
47:6a:10:20:c2:db:e6:c9:f2:c8:ae:a5:a6:3c:bd:
66:37:fd:40:50:92:6b:96:f5:e7:73:d3:05:8a:a3:
b2:b5:f5:a7:26:6f:54:2b:51:56:b1:88:ad:5a:82:
aa:e7:07:96:d0:15:2a:c1:ff:46:3e:16:13:e6:2e:
e2:c4:c4:35:03:b5:c4:4a:c4:31:9d:5d:97:cb:b7:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:56:D6:21:62:E8:98:31:B1:16:05:0E:09:15:7D:5A:01:F4:E3
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:1e:36:79:67:90:d6:dc:46:ef:9a:df:48:d9:4b:8c:6a:
60:4b:b3:cb:66:2d:ca:07:4c:ab:af:8b:35:7a:d1:05:e4:73:
7c:03:c7:dd:95:42:4e:a8:c0:11:18:3f:c2:53:00:0a:aa:87:
ec:56:c4:ec:83:7e:1b:cb:93:2f:e4:62:c5:1c:da:5f:e0:bc:
5c:d1:c7:98:42:e4:34:9d:16:62:d1:5f:36:b9:3b:25:6c:fe:
02:ab:bc:84:ca:1a:67:b2:d5:dc:de:93:eb:db:6b:00:a9:47:
b7:c7:93:dc:c5:3b:ab:6a:a1:a4:13:59:a6:88:b9:5a:89:43:
ca:57:ef:e4:fd:0d:c2:e2:fe:c6:e1:6c:e3:f1:72:df:87:f7:
55:4f:54:35:38:61:91:b7:45:96:a1:c5:ea:6b:36:ac:69:70:
25:6f:f3:c2:45:57:f3:f3:2e:c0:f3:34:5b:78:d1:55:73:9d:
66:5b:c8:de:33:8a:31:34:6b:5c:d0:fe:4e:14:be:dd:ef:ba:
be:f0:28:11:45:78:c0:67:a7:97:00:f3:d0:e8:49:7b:4e:d3:
92:a4:3e:4d:11:20:d2:e3:fc:f2:57:75:f9:9b:ba:7d:41:5b:
f6:e1:35:bf:a8:fb:b4:0d:6e:3d:92:ac:4e:7e:09:f5:27:b8:
6c:80:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:48 2026 by rpki-client