Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: elgIgDaq5wKLSUup6f0GoUT3oeyT6/5j5Bm7TVsNz4s=
Subject key identifier: 64:B3:C7:8F:B3:55:3C:EF:1B:5C:CF:97:33:2E:A4:1C:72:20:AC:AA
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019D25BA041AAE6680EA48EC8DC40B026108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 13E1
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: yTmq9a/aLfZDOD2G0O0/ypDIz3Vi0YuCvSWk/zi0gKA=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:04:1a:ae:66:80:ea:48:ec:8d:c4:0b:02:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=64b3c78fb3553cef1b5ccf97332ea41c7220acaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:88:f1:1c:1f:cb:20:f2:fa:f5:e4:b1:03:
ad:49:19:fa:68:05:12:18:2c:67:04:82:bd:75:4e:
28:3c:66:a0:1b:8e:e4:35:40:8f:1b:5e:da:39:82:
b9:50:6c:77:11:29:46:ca:fd:7e:8c:b6:90:6a:d3:
ca:9b:e6:81:94:28:ce:a3:07:18:24:b9:7e:a8:30:
bc:95:1a:b0:48:43:e3:81:69:82:39:19:07:80:63:
9b:4e:ca:15:73:1f:da:9d:02:b4:fc:be:21:a8:e3:
a5:d0:21:9a:06:15:08:10:80:86:8e:47:7e:08:42:
8b:27:b9:2b:b9:e4:c2:2c:32:61:37:e8:71:0e:6d:
b9:a7:03:12:d2:fd:a1:fd:09:2e:0d:92:d1:00:f9:
d1:72:d5:75:4a:42:d7:22:fe:bd:ac:33:48:c1:4c:
94:60:15:cb:30:2c:9d:7f:fd:3b:8e:90:d9:8d:4c:
6a:b4:7d:a5:94:dd:bf:f9:25:86:6e:48:fc:55:00:
a9:4d:9f:69:1e:b1:de:e5:c5:02:ac:f3:26:57:b6:
2d:bd:9e:df:63:55:f6:23:ec:f5:5b:fe:98:68:1d:
bf:26:a4:b7:0b:7d:51:05:0c:c7:04:a9:82:97:b6:
23:e7:95:94:f8:b4:ed:de:22:67:38:66:5b:b8:69:
2b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:C7:8F:B3:55:3C:EF:1B:5C:CF:97:33:2E:A4:1C:72:20:AC:AA
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b1:ca:b8:27:fe:36:f9:6b:46:73:ec:0c:44:d8:20:da:7c:
9f:b3:95:f3:ff:a0:5b:10:9f:70:88:92:97:96:50:77:b0:1f:
71:47:64:ce:9c:98:f8:86:8e:3c:90:fb:cc:e5:8a:f9:db:3c:
e8:d9:21:8e:fd:bd:f0:f7:1a:de:97:4f:0e:e9:b7:f1:9c:5a:
22:7a:ec:4a:f9:2b:5b:e5:b9:4c:f9:a9:ec:ef:29:e8:fe:40:
40:d8:43:ce:ba:81:66:5d:62:ff:2e:3e:f8:d8:7b:64:c5:d8:
93:ff:90:7e:83:12:ce:cc:97:db:fa:c5:ca:38:dd:f8:72:50:
db:36:ea:0d:9e:43:d4:c4:0f:de:6a:9e:9a:12:ec:a8:fe:20:
2d:1b:70:ab:f5:a6:81:48:d2:c9:6d:9e:f6:d0:f9:36:60:b8:
92:40:7a:c1:e8:0e:e2:c6:0d:72:29:df:ca:14:b7:a0:54:10:
11:3f:1e:9b:6b:8e:54:44:eb:9b:6d:30:5f:91:1e:91:b1:f3:
69:ec:87:dc:39:e5:02:af:e1:33:ce:06:69:b0:75:64:b5:6e:
a9:dc:cf:08:d9:58:df:2f:30:bc:cb:a6:37:c5:84:01:a6:b0:
9a:e5:f6:1b:9e:92:f1:c7:11:91:80:f1:3d:db:58:22:c8:1c:
69:8e:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:20 2026 by rpki-client