Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier: fkL+OcV090wMAWOypEmTiKBqBqt882pCUbnfJnqpz+U=
Subject key identifier: 7D:D4:5D:03:A0:B3:C3:FA:82:91:6D:17:20:F2:0F:D2:F2:06:E7:AC
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 019D330836CEFED97EB18D5B1C177F138B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number: 0C10
Signing time: Sat 28 Mar 2026 06:01:09 +0000
Manifest this update: Sat 28 Mar 2026 06:01:09 +0000
Manifest next update: Sun 29 Mar 2026 06:01:09 +0000
Files and hashes: 1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: Ezm+Vg24bXRFodDb9xgo3v/YHPnJVYrxV2FyxZZ3fMw=)
3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:36:ce:fe:d9:7e:b1:8d:5b:1c:17:7f:13:8b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Mar 28 06:01:09 2026 GMT
Not After : Mar 29 06:01:09 2026 GMT
Subject: CN=7dd45d03a0b3c3fa82916d1720f20fd2f206e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:c6:a6:3a:4f:8e:64:5e:ee:2c:5b:48:08:
86:4e:cf:5a:e5:d9:0e:9c:8f:67:a6:fa:3b:e9:a5:
39:02:0e:0a:41:3d:3e:54:af:a0:e8:8f:26:b9:f8:
02:62:e9:44:06:3e:4e:98:76:ba:58:57:bc:41:bc:
85:b2:49:a8:fb:da:c6:67:a4:a3:71:8c:94:35:13:
43:ce:09:85:f4:19:34:d0:d4:5b:61:ef:88:a6:a1:
03:41:43:30:fb:bb:8c:1a:5f:71:a9:bd:c7:e5:69:
f3:93:6d:44:bf:e1:6a:a5:59:4c:99:e1:66:10:4e:
28:74:b5:91:9e:6f:6c:e2:e2:7b:be:93:08:4e:7b:
38:95:a5:e9:6b:e7:3d:eb:e8:b6:23:5f:ff:f3:75:
bd:8e:dc:09:ad:b3:33:c2:e1:ca:b2:1f:31:81:f0:
75:5c:e6:59:35:15:87:bb:2c:35:cf:74:9b:44:98:
8a:4e:54:ce:d1:e3:c8:d7:d3:bf:1a:18:d1:df:73:
20:03:96:23:9b:03:32:b6:a4:29:1d:fa:da:0b:96:
23:08:33:b5:78:ac:68:a2:aa:23:21:c4:de:ac:f5:
24:1b:76:89:09:15:b0:0d:95:94:b2:82:3c:42:fc:
72:c9:5a:ea:20:ed:57:58:ab:4c:13:a0:89:0a:b0:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:5D:03:A0:B3:C3:FA:82:91:6D:17:20:F2:0F:D2:F2:06:E7:AC
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:27:96:cc:a0:52:e5:fa:2b:05:7c:8c:8b:48:ae:c3:4c:17:
7d:5a:2f:f9:93:82:be:48:72:7e:b4:91:d2:29:b3:5d:05:64:
cf:9a:67:ef:a5:12:ab:48:e8:19:05:32:f9:aa:ea:39:0d:5a:
60:70:60:51:98:8d:49:7a:70:24:3e:8c:cb:15:f3:f1:3e:ba:
de:36:59:98:64:44:23:63:e1:c2:27:32:c4:69:ad:94:86:c9:
01:2a:a1:b5:04:85:cb:f2:12:27:e3:25:7c:0f:76:e0:d2:9f:
16:a0:6f:da:11:72:81:3a:04:71:89:21:30:98:a1:87:3b:6e:
5f:e4:11:92:f8:89:e7:87:22:83:92:f9:9c:5c:ec:17:e6:b5:
49:cf:a9:a2:99:b7:c0:91:fe:4a:e0:d6:f8:a3:ca:1f:73:92:
50:2c:a6:db:b6:ab:9d:5d:51:c5:bc:d0:01:f8:b9:be:08:7e:
38:77:3c:7d:bb:2b:14:9b:85:9a:1c:d9:bf:08:23:2f:3c:47:
bf:e5:4c:20:61:b9:73:eb:df:18:c1:65:96:99:ba:6c:9e:b1:
5f:24:8c:da:7a:42:7c:0f:99:d7:64:34:29:a9:a6:80:ce:1e:
f1:4c:2d:50:e7:dc:a5:79:3b:4b:01:b2:52:19:21:97:a3:43:
93:56:f8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:11 2026 by rpki-client