Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: WXnodrINPgDmIhWlMIfczmJxFmLLdSgPZWBw2PJ0IAw=
Subject key identifier: A3:55:9D:0F:01:A6:8C:5A:7A:9A:86:5B:4D:F0:29:6C:15:90:8C:6C
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 019CABD97B3B0E31AF31F3AC0CCCEDA957B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:22 +0000
Manifest this update: Mon 02 Mar 2026 00:01:22 +0000
Manifest next update: Tue 03 Mar 2026 00:01:22 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: 36pFh8PddL9hsSp4Vzw1ybPHlLJ/yUZ2QUTmkOhvsnQ=)
2: e8E7CZUAUckXh4bcKKwuRzIom-U.roa (hash: lALjysVYHSzqDpZrz4VJufsPGn7d6TgnW+zEsP4UHHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7b:3b:0e:31:af:31:f3:ac:0c:cc:ed:a9:57:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Mar 2 00:01:22 2026 GMT
Not After : Mar 3 00:01:22 2026 GMT
Subject: CN=a3559d0f01a68c5a7a9a865b4df0296c15908c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:58:a2:c9:dd:5f:19:7e:16:39:9d:a1:61:
85:f4:b9:20:5d:cd:77:9c:0f:3a:fd:b0:74:d0:b0:
a4:df:94:24:96:81:22:fd:70:e1:48:bb:65:db:3d:
76:fb:ee:41:8f:32:b9:f3:02:ab:44:f8:fa:5d:99:
b8:8b:60:77:2c:19:ba:63:fa:23:08:a5:fd:ac:10:
f7:df:48:0b:74:69:ea:8e:a3:21:a2:7a:34:f8:c8:
cd:0b:fd:28:67:fb:73:33:e5:f2:92:3c:52:27:99:
ad:5b:29:75:ab:c1:e3:da:bb:40:15:78:12:2a:e6:
7c:eb:7a:7b:f4:ff:c3:f4:65:70:28:86:22:f3:94:
4f:2f:3b:1b:2b:72:9d:21:4a:96:74:e7:07:66:f0:
bc:5e:71:e5:94:32:d6:fe:59:32:af:58:f7:ae:51:
3e:7d:57:91:2a:ed:fc:fb:bb:0a:ce:8c:cc:b3:05:
53:c0:64:58:48:cc:b9:1f:5e:9c:1f:07:93:6a:19:
c6:d9:d5:0d:ae:c7:77:e3:f2:78:5d:ac:d7:47:ef:
9c:ed:0b:26:ef:7f:94:d5:e7:c3:07:90:85:9a:90:
69:f6:4d:69:09:2b:d7:3b:fe:45:22:38:c5:e1:00:
15:5a:24:93:b5:ad:05:8c:0c:81:11:63:c2:e1:1c:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:9D:0F:01:A6:8C:5A:7A:9A:86:5B:4D:F0:29:6C:15:90:8C:6C
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6e:f8:02:1b:00:82:86:7d:37:9b:ab:6e:f6:ca:e4:59:53:
6b:3b:96:6e:e7:bb:56:8a:9e:e5:c2:d9:dc:ab:9a:2d:57:90:
32:40:5d:6c:c4:06:60:28:af:fc:36:4b:6a:c4:0f:54:c3:14:
d2:5a:9e:88:fd:b2:c8:e9:9e:c0:28:93:48:15:9a:4b:24:56:
f2:17:3b:82:50:3e:75:4a:95:f4:be:17:bc:2f:65:1c:39:35:
e3:79:29:92:ab:4e:d6:08:82:20:43:66:4b:f0:be:38:6d:b4:
ba:7b:ca:22:a4:39:b3:e3:73:77:cc:1c:a3:32:a7:cb:3e:8d:
c6:46:d5:40:c4:f9:78:fb:aa:5e:6d:cd:aa:7b:31:f3:aa:eb:
a9:4f:56:ff:d3:62:80:62:ab:23:79:31:9c:2e:79:bb:74:93:
26:0c:7f:6e:83:71:72:b1:97:aa:bd:1a:9c:15:69:9b:58:1f:
24:6d:94:f3:74:33:ea:c4:4d:40:4f:5c:f5:ac:d4:3d:ba:fb:
01:84:d3:49:ec:a6:e8:09:68:5f:c1:c0:60:cc:0b:0d:f4:22:
a6:a1:37:c4:7a:3d:b9:ef:42:8d:7c:ce:5b:37:57:ad:d0:2f:
99:56:1c:66:cb:e8:91:c0:1b:6b:ae:8c:03:dc:d4:c1:f7:ff:
f8:95:c1:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Xs7DjGvMfOsDMztqVe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm
YjVkNGQwHhcNMjYwMzAyMDAwMTIyWhcNMjYwMzAzMDAwMTIyWjAzMTEwLwYDVQQD
EyhhMzU1OWQwZjAxYTY4YzVhN2E5YTg2NWI0ZGYwMjk2YzE1OTA4YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAtYosndXxl+FjmdoWGF9LkgXc13
nA86/bB00LCk35QkloEi/XDhSLtl2z12++5BjzK58wKrRPj6XZm4i2B3LBm6Y/oj
CKX9rBD330gLdGnqjqMhono0+MjNC/0oZ/tzM+XykjxSJ5mtWyl1q8Hj2rtAFXgS
KuZ863p79P/D9GVwKIYi85RPLzsbK3KdIUqWdOcHZvC8XnHllDLW/lkyr1j3rlE+
fVeRKu38+7sKzozMswVTwGRYSMy5H16cHweTahnG2dUNrsd34/J4XazXR++c7Qsm
73+U1efDB5CFmpBp9k1pCSvXO/5FIjjF4QAVWiSTta0FjAyBEWPC4RzHpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNVnQ8BpoxaepqGW03wKWwVkIxsMB8GA1UdIwQY
MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt
NGRkNGQwZjUzODQ5LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5
LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVm74AhsA
goZ9N5urbvbK5FlTazuWbue7Voqe5cLZ3KuaLVeQMkBdbMQGYCiv/DZLasQPVMMU
0lqeiP2yyOmewCiTSBWaSyRW8hc7glA+dUqV9L4XvC9lHDk143kpkqtO1giCIENm
S/C+OG20unvKIqQ5s+Nzd8wcozKnyz6NxkbVQMT5ePuqXm3Nqnsx86rrqU9W/9Ni
gGKrI3kxnC55u3STJgx/boNxcrGXqr0anBVpm1gfJG2U83Qz6sRNQE9c9azUPbr7
AYTTSeym6AloX8HAYMwLDfQipqE3xHo9ue9CjXzOWzdXrdAvmVYcZsvokcAba66M
A9zUwff/+JXBGg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:58 2026 by rpki-client