Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: VYHTPTPLEbfLyYDIKnCm3liTtsw/6r2u4jDeBrN4Klk=
Subject key identifier: 71:15:A2:59:67:28:09:64:B6:1A:3B:07:A6:83:13:7D:16:4B:86:FF
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019CAC46D161DEBE5F082F0DB09396CFC6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 09B5
Signing time: Mon 02 Mar 2026 02:00:48 +0000
Manifest this update: Mon 02 Mar 2026 02:00:48 +0000
Manifest next update: Tue 03 Mar 2026 02:00:48 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: npQQGLXAdwLS9dgk88qVHeTdqVtQ/YdP96M6LU8P26w=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d1:61:de:be:5f:08:2f:0d:b0:93:96:cf:c6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Mar 2 02:00:48 2026 GMT
Not After : Mar 3 02:00:48 2026 GMT
Subject: CN=7115a25967280964b61a3b07a683137d164b86ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:68:3a:08:29:0c:49:54:55:6e:5b:ee:bd:
75:87:7e:ed:1a:81:ac:d2:68:1d:76:99:8e:2e:4a:
87:30:19:85:11:ad:eb:62:79:b2:38:7b:e9:01:26:
77:46:66:bc:75:05:bd:16:a4:72:97:94:15:e3:1a:
90:c4:47:51:05:a6:96:9d:ee:d2:e2:fe:44:05:6c:
0f:2d:a2:d6:7f:89:21:94:3d:dd:a2:9a:f3:0c:12:
e4:0d:d7:ec:06:01:1f:ea:13:4a:56:3b:85:be:24:
d4:e0:4f:8f:86:45:bb:64:be:3c:6c:ae:4f:3b:28:
6c:03:1c:f2:f2:27:0c:6c:59:06:51:67:a4:ce:b4:
1d:e1:32:1b:2a:dc:76:1a:24:6e:40:e8:6e:13:fb:
bf:2e:37:31:4e:ad:bf:90:92:c0:51:31:b2:66:41:
fa:8b:93:d6:dd:84:2d:5c:e2:cc:03:d9:bf:77:28:
cf:a9:9d:5f:98:33:96:ab:3e:74:7a:f6:e3:dc:f7:
db:50:0f:1b:c7:44:52:31:e9:90:e5:ea:f3:de:f6:
bb:08:02:18:74:02:dc:31:3c:6d:9e:08:d3:3b:fc:
11:ff:46:08:23:62:dd:ef:fa:1a:09:75:c1:45:94:
3f:c5:11:2f:11:8d:d7:88:56:52:cc:c4:ae:32:f6:
ea:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:A2:59:67:28:09:64:B6:1A:3B:07:A6:83:13:7D:16:4B:86:FF
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:3a:5d:f8:02:f7:49:08:04:99:f9:a7:ca:0e:57:d6:65:41:
68:f9:4e:96:a9:fa:c8:23:58:4a:cf:2d:ef:cb:ef:06:f3:26:
9f:05:50:b8:4e:e5:4c:86:01:38:b4:88:2e:3b:4b:94:56:d9:
b4:c0:1c:d4:2a:24:02:36:4c:40:ba:d3:33:4e:36:87:69:54:
34:f0:03:dd:a4:bd:30:5c:4a:25:6a:9d:2b:7d:bd:b3:1e:14:
11:9d:82:7f:c6:10:e3:df:c5:1b:f9:37:6f:e6:64:9b:f2:52:
2c:ce:34:00:75:d4:da:ae:ba:74:a2:23:b5:7e:6b:3e:f6:59:
77:8e:97:7b:61:dc:a5:f7:d0:13:9d:a6:25:d3:ca:76:d5:4d:
e5:68:a6:c0:5f:b4:7e:d6:bb:07:59:38:7c:11:d8:f6:f7:7a:
fe:6b:7b:32:15:51:fb:d5:96:b5:4f:26:0d:74:87:ae:b4:dc:
9b:30:18:55:74:24:8f:b3:b5:51:49:d8:b2:b3:f5:6b:c1:b6:
98:55:fd:48:11:77:c0:14:fc:77:4f:9c:0d:78:e0:56:da:9f:
bd:82:ea:e8:2e:3b:78:c3:d7:5d:8e:b6:85:d2:72:d7:20:25:
19:d7:0b:c7:bc:57:fd:a1:92:ef:0c:36:3b:5c:24:92:8d:8b:
05:2f:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:14 2026 by rpki-client