Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: 9T+IKWO1Z4udUAw3Fjum8TWZ5iCRaL/kZy/3+f1v76Q=
Subject key identifier: 9F:1A:67:B1:CA:0E:CD:43:2E:C5:A6:6D:CF:A1:B4:DE:08:79:52:1A
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019CAA588C38B8A393F45396448B1F166CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 09B4
Signing time: Sun 01 Mar 2026 17:00:55 +0000
Manifest this update: Sun 01 Mar 2026 17:00:55 +0000
Manifest next update: Mon 02 Mar 2026 17:00:55 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: oUseJ/0umT3KDgPnU7/Vg24Wim4f5dgjfuCtKvgbGDQ=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8c:38:b8:a3:93:f4:53:96:44:8b:1f:16:6c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Mar 1 17:00:55 2026 GMT
Not After : Mar 2 17:00:55 2026 GMT
Subject: CN=9f1a67b1ca0ecd432ec5a66dcfa1b4de0879521a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:1b:75:73:23:4e:ac:41:20:ae:d8:a6:46:
0b:57:e9:66:6e:3f:42:a4:4e:e9:85:f3:95:17:b4:
8d:1e:42:31:2a:a5:df:66:98:2f:2c:ec:e2:3c:1a:
23:d4:2a:e3:aa:f9:77:5d:73:d5:08:11:33:5c:40:
be:2c:ab:99:1a:80:81:1c:26:f6:32:43:d6:89:22:
c3:92:93:da:34:36:b0:86:a5:bb:0c:94:54:65:c6:
10:48:48:55:51:c6:c6:1f:34:3c:2c:95:66:ba:8e:
d7:d6:c3:98:d1:37:8b:3c:54:32:e1:aa:ff:07:60:
f8:9a:cc:f3:b0:c1:d0:2c:dd:b8:ec:9b:1a:12:cc:
a0:fc:4d:91:aa:4a:97:81:c8:ec:e8:b8:79:68:9a:
f2:e6:ac:61:c0:3a:04:93:05:db:3b:f0:25:7c:85:
3d:b4:09:ae:89:7b:e7:80:1e:33:26:46:e4:ce:43:
fc:09:9b:e2:d7:be:c6:18:ac:c7:77:fd:20:40:36:
a1:20:b5:22:c0:5a:45:f5:8a:f4:fa:a1:d5:0b:47:
d8:a1:b7:9a:82:c6:8c:aa:87:64:28:3b:68:e4:bb:
ce:5f:0d:57:b3:a7:c2:1c:22:6c:47:8d:29:58:f6:
32:e0:1d:ad:4d:cb:45:b6:c5:de:05:6e:5c:18:89:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:67:B1:CA:0E:CD:43:2E:C5:A6:6D:CF:A1:B4:DE:08:79:52:1A
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:3f:0c:96:c6:e3:95:c5:f1:83:77:e3:bc:40:8f:a4:2c:
29:ff:b4:29:a6:64:12:89:35:c4:03:39:41:ff:ac:ce:21:cb:
e1:f1:a2:1f:f6:78:bd:35:b5:81:ef:99:f5:bc:3f:83:47:89:
30:75:17:62:8f:83:ce:b8:1a:e6:da:1a:fc:e4:d8:2e:24:1e:
d0:99:15:70:05:48:36:8d:5a:cc:00:e9:48:6a:76:ec:d5:87:
ea:dd:45:d0:79:62:da:81:c9:99:ef:a6:17:9c:5e:c7:6b:09:
f8:cf:13:d8:6d:77:da:57:e2:30:90:fd:65:f2:4f:70:3c:ed:
b6:3c:bf:83:d4:d1:10:27:a1:10:2b:12:db:33:fd:3e:51:33:
83:34:be:58:b5:b2:6c:ff:fb:83:6d:e3:bd:cf:34:39:37:59:
cb:ad:d5:5e:fe:8e:cd:14:f3:e8:d9:6c:47:e7:43:40:ce:d0:
f3:60:fb:f8:93:49:92:ed:fe:45:dc:89:8c:44:b7:24:d7:dd:
df:83:f7:fc:ad:de:18:0b:c7:51:95:27:fc:a7:12:c1:62:f4:
04:d9:c2:29:71:bd:0a:6d:2f:6f:28:91:8b:e3:fd:0a:d0:0c:
b6:b1:af:50:95:02:71:f4:47:e0:54:9a:6e:d0:d7:97:f2:80:
92:2b:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:07 2026 by rpki-client