Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: hzMpXpKYdxVIFky+xD/tYZWHk+psz47f5mLTqCTXc6A=
Subject key identifier: 09:DF:74:CF:97:9B:58:50:9C:90:08:FC:EA:B8:39:7D:D2:45:D1:D1
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019CAB347F08D3970264FF4F681EB204CA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 185C
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: 1-sLM79fhgln3kKtmAVDWOo1kwmw.roa (hash: EUHr6hsfI8WuHLl/CT9f9Qt7naBdoIdHB1PmYGEqxpI=)
2: 9ujjLqpqBzYoU408bvIxts776s0.roa (hash: MxMzpms6OueiCellPPjeDTz5xKF+c/uGLcMu+geBy1k=)
3: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
4: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
5: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
6: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: 7V7GZ9w789XWnca5jrQivkQANpYSgNRG3jyHFuwvuTc=)
7: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7f:08:d3:97:02:64:ff:4f:68:1e:b2:04:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=09df74cf979b58509c9008fceab8397dd245d1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:11:29:a5:2d:7e:54:54:0a:42:cd:06:b7:
ee:c6:74:b9:c7:27:38:08:2f:19:9e:dd:b9:b1:b2:
13:d6:27:4e:cd:26:7e:b9:17:25:5e:bd:5d:9c:dd:
56:aa:e7:20:bc:ff:27:dc:34:17:e3:09:bc:46:9e:
fa:38:fe:46:8f:79:80:14:fa:7f:15:9e:9c:12:73:
82:74:6e:d6:2d:0c:c0:25:8e:67:ac:48:04:8f:57:
2e:96:15:45:c6:eb:da:85:25:e8:17:0f:b3:80:04:
0c:5b:07:9f:b6:a8:d3:6a:42:9c:e0:67:d1:08:5d:
4b:94:83:1c:61:d6:51:77:27:7f:91:21:db:57:4d:
93:1a:36:b4:f7:c6:e5:8f:9b:90:41:aa:10:e6:c0:
cd:7e:96:07:2f:62:f4:e3:c8:6e:95:08:54:9c:44:
5e:30:77:e4:77:1d:ff:ab:cd:e3:a5:ee:5b:a4:d2:
0f:a5:17:18:d8:4d:07:c6:1e:5a:d4:f0:95:44:6f:
15:04:c1:81:76:56:5a:a6:34:02:e4:f7:8e:1c:9a:
cb:0b:5f:5d:46:62:59:55:06:93:59:48:da:10:7f:
f4:29:b7:a1:b6:28:60:42:ef:7a:ba:4b:6c:f7:c6:
b0:18:bd:a4:c2:c9:77:f0:88:f1:68:48:58:8f:18:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DF:74:CF:97:9B:58:50:9C:90:08:FC:EA:B8:39:7D:D2:45:D1:D1
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:29:38:4e:b1:27:3d:ea:64:58:35:45:5f:6c:ec:38:3f:ef:
5a:05:c2:8f:2b:20:17:4f:c7:a7:22:3d:02:39:2e:b0:77:bb:
6c:37:d1:a9:6e:cd:25:89:66:be:6a:73:a9:5c:6e:dc:ca:82:
cb:ab:6e:fe:4c:7f:10:f6:40:13:b8:4e:9a:15:8e:01:24:90:
20:d6:33:80:0e:51:58:c4:60:36:46:f1:2f:98:12:b3:94:88:
de:78:2a:37:ed:cd:9d:be:83:0d:59:41:fb:6d:a8:c4:b7:50:
f3:d2:d7:98:54:5c:6f:e1:d3:8f:c5:39:bb:a9:3e:73:76:a1:
70:68:b1:35:6d:b9:47:95:af:eb:27:cc:31:b3:54:24:49:90:
e3:61:56:12:65:06:88:f3:11:93:a5:25:c5:3b:23:cf:1e:86:
84:88:ec:68:26:de:51:ac:d8:29:28:21:7e:b6:47:2d:61:8c:
d2:e6:32:d3:5c:7d:8c:da:9a:70:8a:2c:ad:0c:44:05:ef:b9:
c9:47:2d:2c:33:97:63:68:ad:ff:2b:fc:45:fa:93:ed:29:43:
90:52:75:bf:a3:f0:80:d8:b4:50:4c:ac:67:ac:08:85:c8:bf:
d0:44:d3:6a:c0:59:bb:ed:82:de:80:a7:bc:a9:2e:e3:eb:f1:
83:41:37:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:24 2026 by rpki-client