Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: v6khxnWF7+jxVHmUVl774hYaIXRZlezhkeKOh3ziM1A=
Subject key identifier: FA:99:29:E0:49:E4:64:BE:1C:4C:2F:E8:87:E4:D1:03:E5:BE:8D:2D
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019D2A04C33AD11FF0C4BE41E69C755A9B9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 02FE
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: 8/spgIJXRkJB5k2ROxxtI+liq/D/tk2g1Lpn1U0GrsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c3:3a:d1:1f:f0:c4:be:41:e6:9c:75:5a:9b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=fa9929e049e464be1c4c2fe887e4d103e5be8d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:1c:de:89:90:c2:db:4f:c6:47:94:36:6d:
70:bd:9f:d8:03:6f:27:42:39:00:78:0c:a3:27:6c:
42:ab:05:75:5d:ba:59:0d:b0:e1:8d:98:81:0a:56:
a2:6d:44:cc:18:e5:d2:56:8d:4d:51:9f:fd:a7:c1:
7f:45:b2:00:4c:cc:69:1c:2a:9f:de:80:52:de:6d:
6e:d9:b1:8d:2d:bd:87:62:1c:4c:1b:f7:88:92:f0:
88:c9:d6:19:df:ec:99:57:d8:8f:4b:78:dd:2e:02:
24:7c:91:93:3f:b7:6b:d6:ff:32:2e:fe:11:24:0b:
01:0d:a9:ec:ea:1e:53:3f:54:46:1c:54:6f:64:c3:
b7:4b:66:3c:a3:5a:64:7a:65:0d:2d:b8:40:ca:f1:
fb:f7:83:fd:4a:77:6b:c2:8c:f7:a6:0c:d6:38:73:
91:9b:15:2d:e2:2e:74:a7:68:ad:b5:9d:70:6f:4d:
a3:66:0e:f4:0a:8e:d9:6f:98:6e:c5:b8:54:d2:25:
30:61:a0:a2:c1:7b:0e:68:8d:90:2c:71:e5:23:b6:
8b:95:91:cc:c3:59:11:11:01:fc:6a:73:c2:9a:c4:
43:19:c4:47:d6:4a:33:bb:6b:ff:35:42:4b:7f:ac:
13:71:17:c1:f4:22:54:06:a2:07:24:09:5d:2d:46:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:29:E0:49:E4:64:BE:1C:4C:2F:E8:87:E4:D1:03:E5:BE:8D:2D
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:85:18:6c:7e:61:90:72:4a:94:21:90:5f:2c:10:9c:f8:c1:
d3:e5:dc:87:29:1b:11:9f:82:9a:f2:42:99:29:b9:85:e2:79:
ed:00:13:ed:df:b4:09:d8:ed:22:41:c4:2b:a6:f8:6d:8f:5b:
d4:c0:29:48:a4:1d:a8:57:ee:bb:3c:98:64:a6:ff:94:e6:63:
50:71:49:22:2c:26:34:68:87:f3:6f:3b:4b:fc:1a:0c:5a:bc:
7d:e9:b4:d6:b8:d2:60:f3:c1:fa:1a:c8:f4:89:be:b8:34:4b:
89:b6:77:8e:5f:f2:53:76:54:76:00:01:c1:2d:4c:86:b9:23:
45:79:1e:b0:4a:a3:8c:c7:4d:e7:d4:97:14:8a:5a:2f:b2:eb:
ac:f9:d0:10:b3:32:b4:5e:93:d7:cc:c3:b5:b6:33:50:bb:ee:
c3:8d:fa:cb:c9:32:ff:c8:64:8d:3e:6b:01:78:73:37:b2:1c:
a4:47:04:63:f1:0a:18:48:49:a9:3c:9e:00:95:90:75:52:87:
3c:f4:4e:69:2f:34:d1:21:68:d0:55:6b:77:e7:45:b9:4e:79:
76:c1:8c:0e:62:2c:e7:04:6e:c5:41:ae:0f:74:56:b2:ea:60:
0d:98:86:de:5f:e3:51:54:6e:eb:35:e6:7b:7c:16:9f:c2:7c:
1c:1f:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:50:04 2026 by rpki-client