Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: kKlfn6VcFG6W2z2XfEAt3S8WyRjkAlFSoMO6vSJwKUs=
Subject key identifier: 33:B6:9F:9A:E2:E7:32:FC:E4:6A:50:3C:63:CD:97:EB:0E:DD:45:EF
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 019D2695E37A271993EF7E2B77B5AEE6025C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 08AD
Signing time: Wed 25 Mar 2026 20:00:50 +0000
Manifest this update: Wed 25 Mar 2026 20:00:50 +0000
Manifest next update: Thu 26 Mar 2026 20:00:50 +0000
Files and hashes: 1: 2txQ-0RSqs2uJRwQDVdC5Ar0Q1U.roa (hash: dgukSS0gWF7oah9dhXPhy2J6/nwd2z1Om6wRww4A75c=)
2: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: zxc2r69BnmRK/Q9ckX1Trj8v7ifib+zSVMQD3tg8wNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:e3:7a:27:19:93:ef:7e:2b:77:b5:ae:e6:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Mar 25 20:00:50 2026 GMT
Not After : Mar 26 20:00:50 2026 GMT
Subject: CN=33b69f9ae2e732fce46a503c63cd97eb0edd45ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:c4:31:0e:68:3e:9b:f1:d1:ba:8a:c7:30:
42:ab:39:17:77:88:bb:a6:37:19:0a:1e:64:33:05:
3b:2f:cc:62:15:d9:76:e1:18:0c:51:f9:d2:2b:d2:
a0:b1:76:ac:ca:9e:8b:11:bb:bf:41:8a:21:0a:76:
dc:2b:4a:97:73:f3:b4:36:cd:2f:33:a0:eb:e4:e7:
db:17:43:ea:99:c1:68:47:54:b6:c6:0d:e8:0e:a6:
84:98:14:9a:03:e4:3e:55:5d:4b:67:ca:93:52:e5:
29:9b:d1:7d:d2:97:d8:4c:b0:67:7f:76:54:40:1c:
14:a3:19:81:54:57:72:dd:14:33:c0:48:b3:49:95:
ec:ff:37:c0:b9:5f:a1:81:5f:b8:fe:3f:80:d9:a9:
92:42:fa:cd:ac:f2:0e:da:2a:a4:af:44:f6:84:9d:
2b:27:99:79:ca:a2:a6:d5:d9:b2:1f:1f:0f:a3:e6:
66:e2:ea:4c:7e:04:fb:98:c6:2a:ee:f1:8f:24:9f:
c0:9c:58:b4:ec:c2:ad:bd:c8:c3:3b:42:80:e9:95:
b8:14:6b:44:ea:7c:23:45:59:be:9f:5f:dd:a1:26:
5d:2b:5b:4a:fb:3f:5f:88:5d:d2:91:32:6f:b8:d6:
93:7f:c9:cf:55:59:cb:a9:45:99:91:55:a6:8f:54:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:9F:9A:E2:E7:32:FC:E4:6A:50:3C:63:CD:97:EB:0E:DD:45:EF
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:2e:60:63:6c:3a:d5:d9:d2:13:13:b2:e5:69:30:12:64:
23:2f:db:72:53:98:0a:a4:50:29:ca:75:14:1e:f9:76:65:ad:
6a:51:47:16:e2:51:85:df:66:75:1b:f1:ad:0a:8e:61:6a:c2:
85:89:84:dd:02:13:34:9c:42:70:57:9f:20:6f:84:e0:a9:cf:
fb:54:81:15:a1:ba:e6:e4:e1:37:ed:a8:80:a3:9c:6e:66:8f:
3b:15:07:d9:d5:65:87:2c:7e:bd:a2:23:13:c3:70:15:25:f1:
80:64:42:ec:9d:72:8b:9c:db:17:80:49:ab:6a:bd:21:4f:44:
8a:e0:48:23:23:a2:20:87:d7:97:54:a0:d0:6d:a1:24:2f:75:
25:de:6d:1d:ce:4d:6a:90:38:86:ca:3c:1f:10:da:b8:53:4e:
b2:fb:96:a0:b5:21:b9:4d:ba:b7:df:98:54:46:ab:e6:b2:b4:
fe:b5:fe:dc:86:d2:40:1e:93:02:7f:f1:a0:35:55:cd:df:99:
3c:b8:16:98:9e:ea:24:2c:a8:17:ef:47:8e:6c:e7:0d:5c:1c:
25:4f:99:85:56:fa:fc:02:8b:a8:c2:20:f0:b3:9f:3c:54:07:
fb:aa:b7:0a:d6:46:14:87:4b:42:70:83:1f:65:89:33:c1:91:
63:2e:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:50 2026 by rpki-client