Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier: EnVhiHnELuhrsny2/Hn44Si0JBa5o377hlmgpEv50Wk=
Subject key identifier: DD:D2:17:0C:A7:93:51:AB:58:60:03:75:EC:80:B0:1B:51:74:CB:C0
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial: 019D270498A862949521A46912479959B257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number: 042C
Signing time: Wed 25 Mar 2026 22:01:45 +0000
Manifest this update: Wed 25 Mar 2026 22:01:45 +0000
Manifest next update: Thu 26 Mar 2026 22:01:45 +0000
Files and hashes: 1: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: tQnHZl3jBgqAyzQGajBNDOlVWm8WqBHPLZYF4GA8sVA=)
2: m4kYecQvosDEbgzFUfKOmbMpQHc.roa (hash: Qzj75bvQYH3AqSh7xgbB5Q2jMsStMjrkOv+BsYSia7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:98:a8:62:94:95:21:a4:69:12:47:99:59:b2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Validity
Not Before: Mar 25 22:01:45 2026 GMT
Not After : Mar 26 22:01:45 2026 GMT
Subject: CN=ddd2170ca79351ab58600375ec80b01b5174cbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:5a:19:33:4e:8c:0b:9e:2c:07:ab:c1:a6:
a1:58:99:91:95:ef:44:30:dc:2e:d1:cf:00:c2:c6:
ba:bb:23:87:45:4e:bc:98:fc:49:9c:d3:e9:6b:93:
14:12:88:62:71:b4:fc:33:f6:d3:0b:0b:1e:aa:4f:
ec:5a:a1:bb:9c:0e:05:5d:6f:5f:94:bf:28:3c:80:
8b:83:93:41:93:6f:62:34:76:eb:f2:b7:06:61:08:
76:26:bf:71:86:02:b6:f5:90:2f:56:fa:0a:2e:b7:
f8:00:18:34:1a:79:2f:6f:ff:38:74:2a:92:2b:a2:
f2:c6:60:20:fe:60:ab:ce:ef:ae:4a:81:67:6a:36:
f1:67:ed:cb:e8:38:39:8e:71:b8:71:35:d3:5e:d8:
3e:67:74:d2:29:30:36:26:b1:27:5b:ad:e7:c5:81:
2e:38:1b:8c:d2:af:dc:5c:a3:51:97:d5:b5:09:96:
00:ce:61:f3:6c:c0:08:7e:26:01:1b:c0:1d:7c:b0:
e2:3d:da:23:02:a2:28:4e:5d:63:d5:e7:5c:cb:e3:
36:d6:62:3d:62:68:f4:8a:0a:43:d3:d9:c8:67:eb:
4f:6d:b3:1f:38:dd:69:72:41:c1:05:7a:cc:e1:db:
41:0e:8c:c3:9c:d4:30:8b:a7:da:5a:dd:43:37:ae:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:17:0C:A7:93:51:AB:58:60:03:75:EC:80:B0:1B:51:74:CB:C0
X509v3 Authority Key Identifier:
keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7c:96:05:19:5e:e1:ee:2c:c6:c8:91:ab:7b:00:d3:91:ab:
c2:b4:82:5f:37:d4:68:a2:37:3c:e8:05:02:a4:05:fd:49:3f:
46:c8:86:a2:78:2e:0e:4e:b0:17:9e:6d:86:5a:5d:0f:aa:61:
0b:2d:65:e1:76:10:c0:91:a6:b6:83:af:a6:05:fe:fb:92:67:
1f:cf:82:93:6a:82:1a:22:88:15:cb:c4:bd:cf:9e:55:77:a2:
5e:07:f5:ba:e6:b9:5e:5e:64:19:d4:6b:e3:07:f0:76:b2:94:
c2:68:c6:81:c7:dc:5f:d1:e7:23:41:19:f7:4a:89:ee:e7:20:
e9:27:d0:9e:2c:27:b4:81:a6:71:55:93:67:a4:af:55:63:75:
9a:22:0e:12:20:65:76:2f:d3:48:ff:fe:10:4a:5d:f6:dd:64:
8b:bc:5a:b2:dc:77:0c:3b:24:90:c6:51:c3:07:35:61:d4:ae:
80:67:6e:3b:45:cb:e7:11:45:2f:a8:a4:13:2e:bf:49:ab:11:
ce:51:39:bc:54:3f:14:ad:55:e8:84:89:3d:39:82:99:54:f4:
ec:7d:ef:37:6a:50:16:a7:5d:fe:b5:a2:06:2b:49:33:3a:6b:
71:f8:d5:94:fd:cf:b1:25:10:cf:bd:c8:ef:6f:33:d3:0a:76:
c7:de:16:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJioYpSVIaRpEkeZWbJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMWQ4ZGQzMWFlOWUwM2FmNGQyNmU5ZGE2ZTJkZDg2YTAz
MDM5YTQwHhcNMjYwMzI1MjIwMTQ1WhcNMjYwMzI2MjIwMTQ1WjAzMTEwLwYDVQQD
EyhkZGQyMTcwY2E3OTM1MWFiNTg2MDAzNzVlYzgwYjAxYjUxNzRjYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9ZaGTNOjAueLAerwaahWJmRle9E
MNwu0c8Awsa6uyOHRU68mPxJnNPpa5MUEohicbT8M/bTCwseqk/sWqG7nA4FXW9f
lL8oPICLg5NBk29iNHbr8rcGYQh2Jr9xhgK29ZAvVvoKLrf4ABg0Gnkvb/84dCqS
K6LyxmAg/mCrzu+uSoFnajbxZ+3L6Dg5jnG4cTXTXtg+Z3TSKTA2JrEnW63nxYEu
OBuM0q/cXKNRl9W1CZYAzmHzbMAIfiYBG8AdfLDiPdojAqIoTl1j1edcy+M21mI9
Ymj0igpD09nIZ+tPbbMfON1pckHBBXrM4dtBDozDnNQwi6faWt1DN64ZSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3SFwynk1GrWGADdeyAsBtRdMvAMB8GA1UdIwQY
MBaAFG4djdMa6eA69NJunabi3YagMDmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMt
ZWQ4NWNlMDk0YTg3LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMtZWQ4NWNlMDk0YTg3
LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3yWBRle
4e4sxsiRq3sA05GrwrSCXzfUaKI3POgFAqQF/Uk/RsiGonguDk6wF55thlpdD6ph
Cy1l4XYQwJGmtoOvpgX++5JnH8+Ck2qCGiKIFcvEvc+eVXeiXgf1uua5Xl5kGdRr
4wfwdrKUwmjGgcfcX9HnI0EZ90qJ7ucg6SfQniwntIGmcVWTZ6SvVWN1miIOEiBl
di/TSP/+EEpd9t1ki7xastx3DDskkMZRwwc1YdSugGduO0XL5xFFL6ikEy6/SasR
zlE5vFQ/FK1V6ISJPTmCmVT07H3vN2pQFqdd/rWiBitJMzprcfjVlP3PsSUQz73I
728z0wp2x94WQw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:14:25 2026 by rpki-client