Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File: bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier: TlnR/wD2/3r3wOSuoKKHy1nCAaO1LKAHyVGy7HOpMYI=
Subject key identifier: 22:99:4C:99:5F:4E:4B:4F:16:06:D8:2F:5B:CF:5B:3D:7B:CE:C6:E0
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 019D2884A2AC1BC7CE0E317872D1B5DC9BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number: 0CF3
Signing time: Thu 26 Mar 2026 05:01:14 +0000
Manifest this update: Thu 26 Mar 2026 05:01:14 +0000
Manifest next update: Fri 27 Mar 2026 05:01:14 +0000
Files and hashes: 1: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: eqoVm0FW7dc8Ax2tQpL8PIKzxNNhLpYnnVH7y/F9qHg=)
2: vnH2NBbn3Q3LtUPrFoU9by3eF_0.roa (hash: UPdVY5abeB5lX+0Aslp3HBLsCZjZtVMWKp5zyq6x038=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a2:ac:1b:c7:ce:0e:31:78:72:d1:b5:dc:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: Mar 26 05:01:14 2026 GMT
Not After : Mar 27 05:01:14 2026 GMT
Subject: CN=22994c995f4e4b4f1606d82f5bcf5b3d7bcec6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:a6:bb:fd:29:30:c9:13:7e:5f:97:42:6d:
17:f8:a3:74:f4:a8:b0:38:17:67:05:92:01:a4:86:
0a:92:4e:fe:73:ac:3c:e5:50:f3:6c:77:12:46:3f:
e9:9e:9b:fb:7b:42:10:99:8b:d0:d0:10:d1:c9:f7:
97:b7:e9:0d:7f:be:e1:33:56:dc:61:65:1b:00:a0:
15:85:ad:99:94:bd:95:64:e6:33:7b:6d:3b:fb:37:
c1:d2:84:de:3e:af:42:d9:cc:06:fb:55:54:3a:1e:
fe:f1:69:20:fc:50:a2:ea:ee:eb:22:3c:09:69:45:
8c:5c:a4:71:41:28:f7:29:6a:1f:9a:5c:5a:27:90:
e2:8a:2d:07:bf:75:28:7f:48:55:a0:b3:a2:b7:2a:
3c:12:78:22:ca:34:49:94:4a:47:fe:d6:4e:16:4e:
ca:67:af:f2:0a:c3:90:5b:e8:03:cb:d4:02:d5:26:
f9:d1:fb:65:65:58:9d:3e:f5:e7:92:f0:57:e7:8c:
4a:d7:f8:0a:87:07:41:00:36:53:99:ac:52:00:c2:
8f:aa:54:b7:82:6f:8e:96:ca:4b:2d:6e:26:f8:85:
2f:b5:9c:e8:98:1c:6a:e8:e8:19:5c:03:7e:cc:d0:
b8:cd:d3:84:4b:9a:90:de:5c:ab:86:2f:ef:87:ce:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:4C:99:5F:4E:4B:4F:16:06:D8:2F:5B:CF:5B:3D:7B:CE:C6:E0
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4e:64:8b:1b:3d:10:fd:7f:ff:12:97:00:41:05:2b:8b:ed:
4b:ee:b2:c3:40:82:ce:02:38:83:63:6f:ad:f9:d4:c1:ff:74:
d3:f3:1b:59:cf:06:35:92:0b:eb:d3:18:15:c9:ae:6d:c0:df:
49:7b:a2:0a:13:f7:2d:c8:6f:9a:52:47:bd:43:79:e1:94:de:
7f:23:03:59:61:0b:fb:b0:e3:e0:20:86:60:6d:ce:69:6c:12:
da:ea:cf:02:2a:8d:70:4f:f8:1d:0c:27:0b:0b:6c:ca:82:eb:
9f:fb:1f:57:6a:85:a3:a6:ec:e8:b0:96:7e:50:68:c7:50:b8:
4e:58:cf:f4:a9:d6:36:03:1e:19:5e:f2:bd:b0:45:ed:11:66:
bb:73:c3:52:1c:b1:17:56:84:89:d1:45:ac:bf:ea:cf:79:4c:
23:54:c5:82:7c:64:28:0e:33:e6:d8:2b:53:3b:05:78:2d:53:
a6:6e:bc:e5:58:40:c8:a9:eb:35:5a:24:4d:1e:55:c0:cc:22:
43:8c:ef:6f:94:5f:02:1a:06:53:33:4c:b3:c3:c2:fe:69:af:
aa:61:2e:48:e7:18:ef:59:04:ef:62:41:97:66:ac:75:1b:77:
21:c1:87:0d:06:16:0c:5f:47:09:18:b5:7c:bb:a9:f4:fa:c9:
53:de:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:34 2026 by rpki-client