Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier: tT16PD9eqMwQj+WSD/nWz98B1qeUjcpVhJ/uVeDKTRg=
Subject key identifier: 78:FC:66:23:17:59:63:99:C4:CA:DE:42:FA:26:46:7A:24:E4:DC:14
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 019D2627F6518445B4DC3B814C35F5BF62B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:00:46 +0000
Manifest this update: Wed 25 Mar 2026 18:00:46 +0000
Manifest next update: Thu 26 Mar 2026 18:00:46 +0000
Files and hashes: 1: C5jsnVKUNd-QjxAfcYEN208S_pw.roa (hash: hPHsfdIlUzljJe1+AZwmO8/boBM8APNo8d6nTn8lWf0=)
2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: N3RlWOwWOnmJ53BJiQ0xXsFXls6dMnM8G5+ibZXaqBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f6:51:84:45:b4:dc:3b:81:4c:35:f5:bf:62:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Mar 25 18:00:46 2026 GMT
Not After : Mar 26 18:00:46 2026 GMT
Subject: CN=78fc662317596399c4cade42fa26467a24e4dc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:1d:8d:0f:76:df:e5:36:ec:66:5a:4d:33:
e4:53:cf:17:f3:23:05:77:f3:1e:80:f4:80:a7:27:
0d:6d:6e:12:93:e4:eb:5e:94:ee:d9:ed:9c:e8:90:
90:3d:11:63:77:1f:72:5c:06:7e:6b:be:52:d6:61:
cd:e1:fb:9b:9a:46:6a:ef:a1:97:7a:e8:70:e0:ec:
bd:1a:56:65:bf:49:e6:b7:bb:f7:9a:2d:5a:13:f5:
c8:1b:24:8b:7b:b7:f6:c8:f4:5a:55:5f:eb:b0:e2:
d4:c0:ae:d7:52:c2:c7:37:a8:b6:50:04:da:8f:fa:
48:65:1e:71:43:76:20:65:c6:20:4d:b4:a3:a7:c2:
d7:0c:2c:55:32:5f:23:d8:f5:d3:fa:ef:4a:a4:53:
34:c1:94:51:57:d9:fa:f7:38:65:d8:91:c5:f7:c9:
27:fc:ca:a2:26:e5:f3:b4:5a:48:34:e5:23:40:81:
d4:6b:85:76:46:de:ee:5f:44:f6:c0:25:9b:a6:5d:
7b:29:0f:8e:72:88:ce:aa:dc:74:d4:12:bf:6b:b9:
14:51:c3:1c:2a:4b:3d:6c:1d:61:9d:26:4d:14:43:
a2:1c:53:2b:32:4f:bb:08:b6:f3:a6:e5:fe:e6:8c:
88:c0:31:fa:43:26:64:86:b9:71:f6:56:2b:45:26:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FC:66:23:17:59:63:99:C4:CA:DE:42:FA:26:46:7A:24:E4:DC:14
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:34:40:82:58:62:bf:e0:59:9f:26:16:06:12:41:ec:9a:ad:
04:d7:4b:07:7a:0d:c4:15:ca:b8:a8:11:05:3d:d5:4a:bb:ba:
84:bf:88:41:64:67:1c:dd:35:ca:d5:c8:b0:40:85:c8:c7:ff:
5a:05:17:6a:26:66:98:19:ef:f1:5c:7d:b6:9d:3c:4a:2d:ad:
7f:01:fb:0e:2e:e4:07:19:b3:cf:74:0e:0e:21:11:75:0e:1f:
08:2f:7a:79:c6:ee:aa:fd:b7:41:f1:81:4b:4e:86:04:72:50:
02:30:e1:ec:75:8e:ac:26:90:3a:95:2a:99:9c:d8:a5:d9:5e:
67:77:ca:c8:45:d7:c0:2f:04:c9:22:06:9d:9f:d6:70:fc:ca:
7b:ec:92:9c:13:0d:1e:21:8e:7c:14:f2:40:37:0f:07:52:1d:
64:65:4a:80:37:73:6d:af:83:fb:71:e4:a0:93:e5:63:54:c7:
87:a1:b5:e6:67:ca:d4:4f:f8:a1:ab:cf:9e:22:32:22:fb:0d:
6c:42:56:71:b6:95:ce:66:35:8c:da:6e:db:9d:99:31:0f:ea:
37:cb:bb:e5:2f:ac:0e:5c:da:47:aa:81:58:8c:7e:bf:9c:7e:
d0:2a:fd:be:06:92:b8:12:5f:60:b9:93:bd:76:94:c9:8b:20:
e6:a9:a2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:17:38 2026 by rpki-client