Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: YItQUL4LlnZIrp86NVW3d88oP9mM7MLHHPWElVgXRpo=
Subject key identifier: C1:A8:31:5C:1E:C5:58:29:2B:B6:98:42:AE:64:E7:8C:EA:07:52:ED
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 019D2BF323171ECEFF9615EEA6CC93A35504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 02FF
Signing time: Thu 26 Mar 2026 21:00:47 +0000
Manifest this update: Thu 26 Mar 2026 21:00:47 +0000
Manifest next update: Fri 27 Mar 2026 21:00:47 +0000
Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: yCjH8Cw8lSZ3AxtG6rcLZeK/Aa5mnOBH07LwkOunBBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:23:17:1e:ce:ff:96:15:ee:a6:cc:93:a3:55:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Mar 26 21:00:47 2026 GMT
Not After : Mar 27 21:00:47 2026 GMT
Subject: CN=c1a8315c1ec558292bb69842ae64e78cea0752ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:f7:22:8d:87:e0:94:3c:d6:21:c9:92:54:
11:85:d6:a3:0b:42:67:09:11:f9:75:f4:dd:d8:41:
d3:36:28:0c:06:79:2e:a5:19:ad:38:d2:34:63:ff:
a9:4e:a8:c1:3d:c2:0f:1e:84:b6:3e:d5:fa:e4:0e:
cb:ea:87:c5:9d:fa:31:4b:ff:5d:0f:a7:6b:e9:60:
23:52:93:87:c5:4c:14:7d:75:5e:cd:b2:f1:a7:c4:
51:5a:c1:67:f7:a3:57:0a:eb:f7:ba:e3:90:4f:3d:
25:0b:5a:35:00:9e:20:d0:a6:bf:5c:47:e2:4d:95:
2e:1c:44:12:ac:17:63:fe:74:29:e4:5a:89:86:a3:
df:76:62:fa:0b:10:4a:1f:94:ff:39:19:27:88:3e:
43:eb:ff:a5:18:ee:1b:25:74:ef:e5:d4:7d:f0:8c:
3b:7f:62:b6:31:03:2b:ab:ac:f6:d3:d8:67:ac:a7:
58:52:87:11:b4:e9:af:ac:65:1f:d8:cf:da:b5:87:
e6:2e:32:5f:81:a0:d8:c9:ba:2c:2b:8c:e2:45:8d:
26:6f:9c:6f:c7:8e:d6:62:11:7a:84:cf:9b:e3:c8:
5c:35:44:8d:d4:f1:65:d0:b9:47:0a:bd:7d:5b:7b:
20:a1:fd:19:1b:74:f1:f6:24:44:ca:56:c5:1e:87:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A8:31:5C:1E:C5:58:29:2B:B6:98:42:AE:64:E7:8C:EA:07:52:ED
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3d:2b:ff:35:75:51:8c:ed:60:19:06:fc:bd:2a:2a:82:a9:
db:1d:ac:a9:93:1c:d0:3a:e8:77:5e:c8:31:59:83:98:90:39:
ab:36:0e:da:fb:5e:ca:f6:17:17:55:a8:79:80:3b:8d:e0:63:
b3:8e:b5:18:b8:3c:f8:fd:b2:dc:61:1d:4d:13:c6:bf:8c:33:
17:1d:7e:01:a2:f9:77:8e:f5:fe:a0:c5:33:fa:c5:0f:6d:c2:
e6:5e:85:82:56:37:65:5b:83:b7:ed:9d:38:1a:ea:31:bc:70:
58:e2:92:16:dd:9c:10:38:22:35:38:ac:03:73:1e:b4:de:8d:
1e:ee:b7:3d:d7:58:3e:5e:29:76:83:74:8c:55:8d:6a:50:4d:
7d:22:64:4d:6b:df:ca:52:86:db:45:3f:43:4c:86:84:c6:e1:
e6:fb:43:b3:73:be:a1:eb:61:be:b0:62:05:d5:b1:c7:48:81:
8f:bb:eb:32:63:87:10:22:3a:69:65:d9:78:c3:0b:42:f4:73:
e9:b4:05:8d:77:ec:49:b5:af:71:07:65:99:76:10:be:7f:22:
44:6f:cf:03:95:9f:fc:10:64:e4:ca:da:6b:fc:cb:e2:3c:fb:
3e:94:b6:ea:7d:28:51:ef:53:60:06:fb:92:41:ec:ef:7f:5b:
e0:a4:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:30:10 2026 by rpki-client