
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: CX9q05kQrQTtNSkLI+Cbjznkl2TKWOboILIrLAjR5bs=
Subject key identifier: 79:76:CF:10:FB:8C:B1:E5:7A:F6:E4:15:AE:CB:8E:38:92:7E:25:BA
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 019D2A04541D956F768676F97977394B4EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0E5A
Signing time: Thu 26 Mar 2026 12:00:19 +0000
Manifest this update: Thu 26 Mar 2026 12:00:19 +0000
Manifest next update: Fri 27 Mar 2026 12:00:19 +0000
Files and hashes: 1: HsWvQkqyqgqDj3X8qhIGW0Flnwc.roa (hash: jMcB1wDEamsFEqTFzPF8IyJgQTNPejP9vTcaIBOsBpk=)
2: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: G3R0Xz7korARwA+lmt2Q75IaR0xLDEUxWBs0shtdKI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:54:1d:95:6f:76:86:76:f9:79:77:39:4b:4e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Mar 26 12:00:19 2026 GMT
Not After : Mar 27 12:00:19 2026 GMT
Subject: CN=7976cf10fb8cb1e57af6e415aecb8e38927e25ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:d3:fd:08:de:d5:7b:d7:ff:bf:38:36:13:
cc:26:ee:c0:94:cb:a0:88:b9:7f:2c:04:f1:67:ab:
9e:d6:46:14:e6:26:75:92:5e:7b:14:88:a6:b3:89:
c0:ac:23:a7:a8:df:39:08:a9:f9:d2:68:e3:49:c2:
01:96:6c:62:d1:ce:1a:80:9f:ce:60:16:72:f7:2b:
3f:38:a6:27:31:61:39:52:f1:fb:62:2c:7f:87:b0:
de:e1:17:29:50:41:65:fc:45:6f:11:cb:66:65:21:
cc:af:31:66:82:a1:34:d6:52:89:f6:4d:29:bd:83:
fb:2b:3c:02:d2:38:97:15:bc:e5:02:93:ba:2c:a5:
6b:4d:76:f9:94:14:f1:6e:8e:d1:65:ff:aa:bd:80:
3e:93:18:e3:2d:88:09:b7:be:eb:41:2a:b1:d9:7c:
03:0b:9d:d0:39:22:31:74:13:9d:54:e8:57:ab:af:
cb:68:c7:4b:3a:9a:bb:8b:d7:35:30:f2:98:90:d8:
bb:14:5a:76:10:40:16:c8:84:c5:47:01:3f:7b:3b:
6c:5b:6d:a2:46:90:11:f0:18:3f:e9:b3:6e:43:eb:
df:44:29:dd:e7:e3:ca:18:38:88:aa:b6:e1:2c:9c:
fa:85:3a:ad:f2:2a:77:fd:cf:e6:a2:9a:2e:58:f7:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:CF:10:FB:8C:B1:E5:7A:F6:E4:15:AE:CB:8E:38:92:7E:25:BA
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:aa:f5:62:a2:42:23:37:7d:55:50:c0:f7:cc:5a:a7:5d:01:
f2:31:2b:54:fd:f5:93:cb:13:db:d5:b3:47:2b:c8:15:60:0a:
c8:d1:ca:73:f8:92:5d:b1:ce:c6:d1:74:c9:e5:ef:6c:11:86:
53:56:19:8d:d5:46:8b:4d:3d:ac:ee:4e:89:af:a4:ac:2e:82:
d5:83:ad:53:5d:a1:1a:be:7f:2c:41:f2:c5:32:a5:48:1a:94:
40:65:ac:32:a4:28:27:6a:96:f9:77:df:e0:d0:55:72:79:a3:
cb:2b:a0:06:16:37:cd:de:ce:af:19:69:a9:68:da:9b:61:9d:
83:00:b4:ef:fd:12:be:c3:75:98:7f:79:a4:ce:c7:9f:11:8f:
50:ef:3d:7e:0d:43:9f:b4:c4:97:9d:ea:c6:fe:ca:ee:10:64:
04:a0:e1:e0:b7:81:35:5b:50:be:5c:ff:5f:84:92:5e:21:16:
52:23:f4:41:e1:f2:d8:2a:b1:f8:8a:3f:0e:36:c8:6e:f7:cf:
7e:92:2c:3d:1e:e6:dd:8f:fd:6a:53:05:08:75:8e:6e:7f:38:
4e:31:e8:9c:7f:99:4e:27:d6:7e:fa:09:8f:5e:a9:42:32:96:
d7:30:28:87:77:f5:ab:0c:c4:1c:73:dc:1c:60:f1:07:28:c8:
5d:b6:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:07:47 2026 by rpki-client