Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: QQmtt9yBaDs8g29oKGrjklhGBLANbgXvYaUe1z1sc+I=
Subject key identifier: 12:FD:2B:AA:1E:4B:B3:35:FC:C9:E3:21:44:54:3B:DF:4A:B1:50:E5
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 019D26CCD5209282CE3B632FBC49FA9F1497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0FFB
Signing time: Wed 25 Mar 2026 21:00:51 +0000
Manifest this update: Wed 25 Mar 2026 21:00:51 +0000
Manifest next update: Thu 26 Mar 2026 21:00:51 +0000
Files and hashes: 1: ZVzgmg8PNrXQsVKOx9_CSmQahtg.roa (hash: BHGDW/+IDMtJk2UEAihZYue4lahmvlWX5Zbyw1itKuM=)
2: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: iQIZVSTg0VTc7XIku1mkz/8Q0V5vUYWvWvQ9XeBBMok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d5:20:92:82:ce:3b:63:2f:bc:49:fa:9f:14:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Mar 25 21:00:51 2026 GMT
Not After : Mar 26 21:00:51 2026 GMT
Subject: CN=12fd2baa1e4bb335fcc9e32144543bdf4ab150e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:1a:a5:d7:88:2b:2b:18:8b:2c:3e:42:45:
f6:88:96:ab:9e:f1:bd:ad:96:f6:28:d5:7a:89:83:
54:48:5a:64:4a:9d:45:2a:4b:6b:61:9b:a1:e4:40:
ab:b9:94:6a:b0:d4:38:d6:07:58:b2:d9:e9:30:c5:
f5:d2:94:30:9f:93:33:ce:8b:a8:0c:93:f9:d5:22:
1f:b2:ee:45:d9:c3:b2:1f:05:bd:50:87:ae:71:61:
cb:04:e2:65:60:45:dc:56:7a:47:35:5a:25:d8:fd:
21:cf:68:d8:9e:c3:99:0c:30:48:20:4c:5f:1a:47:
1d:35:2b:ed:2a:59:f5:4f:11:06:4d:56:d6:f7:d8:
e9:b0:49:4a:34:de:0f:6c:e4:bf:b8:0c:90:07:61:
af:e7:37:73:87:92:41:dc:68:e3:41:3d:33:16:94:
aa:09:2f:e1:e5:f6:0c:6f:9e:1f:ee:1d:fa:2f:77:
03:e8:04:1e:9c:dc:7c:40:5d:96:75:6f:ea:55:59:
37:e5:77:72:e9:00:6b:e1:20:33:ed:c6:10:01:4e:
3a:8a:9e:9e:43:92:79:2d:18:00:0f:12:be:1a:95:
40:c9:f4:ff:7d:30:5f:65:27:8e:7a:96:0e:82:d1:
84:6b:da:21:a0:04:03:d4:b1:3f:0e:4b:d4:0f:67:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:2B:AA:1E:4B:B3:35:FC:C9:E3:21:44:54:3B:DF:4A:B1:50:E5
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:96:b1:b3:b0:84:94:0e:4e:8b:37:9b:20:cd:a8:dd:31:8b:
d9:06:5b:fb:81:b4:2a:49:43:e0:89:0a:70:7f:f0:f8:98:38:
35:88:90:7d:70:48:65:59:d2:03:35:02:66:ca:94:a2:46:5c:
2e:b0:0a:7f:a4:54:e7:88:8f:fa:d0:9c:92:06:0b:a0:6f:dd:
4c:ce:68:df:3e:2f:2a:f5:0c:8d:59:68:02:da:7e:fe:71:20:
c1:81:f8:fe:41:96:59:18:07:12:28:d4:b6:f3:ae:4e:41:83:
aa:fb:39:07:0e:84:7d:1c:10:11:d9:8d:a5:5a:81:3d:2e:bc:
db:62:e2:83:28:b6:6f:17:59:23:00:40:df:68:cf:85:16:a4:
83:67:38:54:2f:47:fe:3f:fd:4f:25:8b:c1:00:e2:f1:45:ee:
e4:e4:6c:1c:1a:c0:5f:23:0b:40:d3:c1:ec:44:2e:9f:d5:4c:
40:ca:15:80:20:2c:9e:b6:c3:29:09:51:9b:3b:b3:23:b1:50:
46:99:6f:3d:68:5d:e4:ad:5a:3a:74:2e:34:aa:ce:d0:92:6e:
bb:50:c6:a7:90:65:3d:b7:07:43:1b:8b:25:88:0a:6e:3e:78:
2c:d3:2d:15:78:06:f3:e0:4f:e3:50:78:66:83:04:c8:ed:fd:
9c:e8:14:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:45 2026 by rpki-client