Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: /mi8EQ2QcVwrkRQiPR+yDRxaBzqoLmrMKcuzRRv7Bcc=
Subject key identifier: 74:5A:4C:30:0B:29:76:C9:40:46:44:FF:B3:05:AF:BC:56:A0:59:4C
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 019D2628109AD7F1F03C35B542FC02849312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 15C9
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: gsPTp5qI9xplbARoPzjWpaAbhHwUT4F/g3kxZ/XIw5g=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:10:9a:d7:f1:f0:3c:35:b5:42:fc:02:84:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=745a4c300b2976c9404644ffb305afbc56a0594c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:99:ff:9a:1c:58:7d:22:7f:ab:8f:d0:c9:
1f:87:6c:17:8a:bf:28:6c:f5:76:7b:64:43:b8:c9:
21:1f:54:bc:ce:40:1d:c9:08:d1:26:ae:c2:2e:60:
ee:23:96:22:92:f9:d0:b3:e3:9a:4d:03:87:d0:ec:
d0:c7:1b:30:bc:d6:62:bb:57:c6:fe:6f:57:59:f4:
57:53:2b:12:d6:3b:86:74:1f:4f:37:b6:f9:23:c9:
e6:ce:98:3c:2b:57:9e:c8:c5:8a:cd:25:3c:12:a8:
c3:40:f0:bd:5f:ce:87:2e:4a:bf:ac:aa:8b:54:34:
9d:9d:2d:7b:f3:a3:c2:e5:ea:8e:dd:d4:fb:f9:a2:
f8:b6:53:a6:40:32:47:5b:f5:59:a0:78:20:4d:61:
c8:90:8f:01:8d:5f:dd:cd:c8:00:8f:a0:76:bd:eb:
31:ac:06:a7:6d:05:c2:90:a7:c6:29:db:f5:30:e7:
0f:f2:2f:0f:ba:90:bc:59:f3:98:c6:68:f4:95:03:
93:4d:ec:5b:30:f2:88:d2:47:62:4c:a3:a2:e5:12:
29:d8:c3:cd:15:23:7d:67:cf:09:9e:e9:4b:92:ba:
62:c2:58:29:ed:f0:d4:ea:ec:2d:51:f5:d0:00:7b:
fb:19:a6:a4:66:62:2f:16:ce:a0:ab:2f:17:ac:a5:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:4C:30:0B:29:76:C9:40:46:44:FF:B3:05:AF:BC:56:A0:59:4C
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3f:fc:c2:9c:f2:e1:1e:45:48:cd:4c:c2:90:79:8f:4d:b8:
69:24:d4:00:b7:83:4b:8c:41:80:e7:55:b9:a1:73:9a:40:7b:
54:2b:87:96:f4:ae:17:5a:0d:bb:a3:91:0c:7a:8d:0e:56:ad:
4f:1b:95:ba:97:33:fb:a4:7d:4b:4d:f0:4c:d1:c0:72:18:81:
00:e9:66:68:cf:13:46:3a:b8:11:91:fa:3f:e8:d2:69:6f:4d:
d3:6f:26:81:3b:fa:2c:1a:1d:6d:34:aa:1a:0b:7d:5a:04:84:
4b:0b:c4:b3:1c:03:8a:84:11:81:cc:02:c3:f1:22:8f:36:01:
34:e9:bb:b6:5a:06:05:3b:03:3b:bb:c0:62:72:b0:e1:be:ca:
72:00:20:7c:41:1b:dc:76:50:8b:19:07:7c:9c:21:56:aa:21:
fc:b6:a8:ae:e6:40:0d:dd:fb:67:cb:f1:e1:e1:9f:f6:a4:b0:
a2:56:ca:51:6e:8f:46:da:11:ac:46:38:77:1f:c4:af:cc:7e:
2f:af:ed:20:6c:86:56:20:b5:de:cb:b9:c4:d9:0d:37:13:e3:
15:cd:de:0f:d6:f0:8b:6e:b2:45:4e:43:6a:8a:09:90:08:50:
7c:35:37:84:79:20:f9:3b:a0:f1:aa:60:1b:82:c7:1d:4f:fa:
7e:b1:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:16 2026 by rpki-client