Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: EZnQAr6THvajba9nDBwbO2DzYK3E8s6SXA11wIqHeNY=
Subject key identifier: D9:67:53:CC:CA:23:AC:D4:13:60:39:D6:85:E3:F1:46:AF:12:43:78
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019D2816D7EFAE6641C898D27E60C8EEEF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0DA5
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: IVxozb3aky8T2vxQz78ZpJ9En0g.roa (hash: qnnxuMzzgk+NwHcYP1qJgAC3Y4zOPpFa8GphL9ABcCI=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: Hnw6HRHNun2Y2uCX1j7/rrovTZmxc8iUlr9Pf93dw64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d7:ef:ae:66:41:c8:98:d2:7e:60:c8:ee:ef:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=d96753ccca23acd4136039d685e3f146af124378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:10:b3:aa:ef:d7:8a:99:b4:17:3b:9e:e6:
31:03:26:84:a1:62:39:09:f1:97:dc:9d:7a:26:18:
a2:c7:9e:e9:28:b6:45:f2:4b:e3:68:03:f1:51:14:
d3:1d:59:99:03:b6:bc:c9:12:34:39:81:d4:44:11:
c7:6c:cb:2a:a7:02:3c:a8:fa:3a:11:3a:90:4a:b4:
05:84:de:01:c0:13:e3:13:72:cf:2e:80:0f:e0:85:
34:71:c2:bc:8f:af:a2:32:22:32:4b:73:38:a4:3b:
7b:14:e9:2b:b9:fe:83:d5:02:e3:8e:c5:45:74:af:
86:7c:9c:30:52:eb:a4:21:b9:12:03:1f:46:cf:ad:
47:e9:66:72:4f:6e:0c:0f:b6:1c:cc:43:a9:81:a0:
8e:f7:79:f7:0b:fd:38:0e:70:65:20:53:96:bf:9b:
17:3c:1e:5a:66:a9:89:54:e3:20:a9:c9:d1:99:96:
1b:30:c5:d4:99:2b:0b:94:4b:25:a2:9c:92:57:8e:
f6:92:2d:35:1d:19:5f:0c:75:3c:55:19:d5:c0:14:
e3:1c:9b:a5:2b:52:7f:57:42:de:c5:f3:8b:7e:08:
c2:42:b4:90:1d:c9:26:08:f8:62:5a:65:94:9c:bd:
ed:f2:59:c0:1c:6e:08:fa:0e:99:8f:90:89:bf:dd:
31:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:53:CC:CA:23:AC:D4:13:60:39:D6:85:E3:F1:46:AF:12:43:78
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fb:e9:86:01:83:77:e7:5c:5d:cc:2f:41:9d:01:66:e5:3a:
21:40:8d:4e:09:f7:02:2a:84:25:5d:20:59:3b:66:6a:43:24:
e8:7a:cc:01:8b:38:ee:88:ba:77:66:7e:1c:23:2d:ec:8f:64:
05:be:26:eb:0a:6f:79:75:f9:2a:f4:9c:98:0f:d7:b1:d9:b0:
db:1f:2c:87:60:11:99:38:50:b3:52:00:f2:2e:e6:a7:b7:ea:
75:a2:61:14:9b:f7:f9:69:07:3e:6e:33:7e:b3:21:81:92:99:
6e:b3:a4:00:7d:c0:4f:68:93:8e:80:e0:10:a7:f5:89:8c:29:
64:9b:2e:6b:cc:45:4a:fd:e8:82:fe:e2:5c:c6:99:1f:a7:a8:
89:68:14:44:e3:bc:81:dd:63:66:62:d9:fa:1a:6d:59:53:39:
29:07:73:61:90:9f:2d:0f:81:47:10:6e:3c:9f:76:92:77:e5:
81:69:61:10:cb:25:3e:a0:3e:2c:cc:62:d0:b0:c6:48:45:1e:
72:e9:97:07:b5:ed:9f:42:76:6d:cd:6a:2d:2d:94:f7:3b:e4:
ba:8a:c4:b1:fa:5d:34:5f:2f:dd:d9:d1:cc:7b:f7:36:ca:56:
8c:eb:8c:74:ad:e2:f2:a5:7f:4a:0c:b6:9b:f4:74:a6:8e:d5:
f1:d9:6d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:12 2026 by rpki-client