Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: 5DmqlHhzjGD/4FgrU3KIw5E0CgbbsO2LziMvFfc2YYg=
Subject key identifier: 7F:DB:59:F0:24:E1:1C:50:27:F5:12:C4:C7:D1:DE:22:6C:1B:6A:4D
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 019D27DFEA3A7AAE056F736942103ED4C435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 0C4B
Signing time: Thu 26 Mar 2026 02:01:18 +0000
Manifest this update: Thu 26 Mar 2026 02:01:18 +0000
Manifest next update: Fri 27 Mar 2026 02:01:18 +0000
Files and hashes: 1: Uc8-vtLFC1N8lVj4ndp6unkcS6U.roa (hash: UrDkg/Sd+X+UaUrCGrnxftMeAYE4D59TadpDzTu8j1Y=)
2: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: qh+JyDM+VkjvWmXw4m3kkApJMkYu9DF3M+mx44z4s8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ea:3a:7a:ae:05:6f:73:69:42:10:3e:d4:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Mar 26 02:01:18 2026 GMT
Not After : Mar 27 02:01:18 2026 GMT
Subject: CN=7fdb59f024e11c5027f512c4c7d1de226c1b6a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:ff:e2:94:f8:8b:c8:8f:2c:47:02:70:f6:
69:59:a7:15:a4:c4:74:e9:53:4a:4d:c4:3a:0d:38:
be:c9:23:dd:dd:32:d8:c3:c0:bc:41:9a:29:44:02:
f2:22:19:61:30:86:0c:d6:b8:c7:62:98:47:5d:18:
8d:a0:d4:51:2c:7c:d6:ca:c6:79:72:fc:fb:18:56:
78:f5:ac:fe:85:30:b4:66:5e:82:3c:3a:4d:69:7a:
19:41:87:12:8c:23:4c:ac:61:22:69:d1:d1:ca:a4:
c1:80:03:e5:aa:f9:c5:1a:45:b3:ee:e5:e1:0c:f6:
14:15:73:ad:1f:65:3f:f3:39:8f:9e:8d:46:e7:18:
21:f9:72:b0:d4:e1:50:20:52:5d:ed:11:cf:c3:8b:
b7:77:a5:17:0e:8a:df:9f:d1:e0:af:48:c3:92:4f:
45:6d:6b:9b:c3:77:58:a8:ad:74:03:12:59:0d:b2:
7e:82:f2:d2:15:ca:38:a8:8e:69:3a:ae:aa:88:30:
ff:5f:1b:e3:83:6f:a0:0e:a6:e4:94:0e:01:72:a5:
89:92:13:be:bd:49:15:b8:88:00:68:fd:20:81:a6:
df:e9:1e:e1:c5:b2:e3:01:c6:b7:5d:ec:d2:b0:f2:
7c:79:a3:5d:dd:f5:c1:39:49:13:ab:68:60:09:b8:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DB:59:F0:24:E1:1C:50:27:F5:12:C4:C7:D1:DE:22:6C:1B:6A:4D
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a0:00:d7:45:3d:7a:42:c3:12:7e:a3:b6:2b:d4:2e:42:0a:
b3:9a:80:b4:a0:7a:5d:1d:56:d9:01:80:0c:db:f0:84:04:c0:
33:62:6c:03:c6:6d:4a:43:dc:84:8b:3b:9b:08:c8:79:e9:a2:
90:f2:77:96:08:58:d2:0b:76:a5:0d:05:1a:e9:0a:d6:ea:86:
3f:e9:dc:54:05:a5:5e:67:c9:58:05:40:7e:9e:6a:0c:f5:31:
1b:98:bb:cc:c0:39:3c:2c:f3:ea:ba:03:8f:cc:a8:d3:b2:72:
2d:ad:87:ad:bd:24:34:85:8b:cf:a7:22:51:f6:66:99:de:af:
90:d8:56:b0:34:14:28:28:36:f8:e7:db:38:16:a1:60:50:6f:
35:21:08:b1:d2:0a:43:05:f8:c3:bb:17:1b:bd:fc:a3:d1:13:
1e:45:77:27:99:02:e4:1c:e8:e7:e4:d6:ab:08:23:e9:8d:9e:
39:15:ef:cc:5e:fd:b2:e9:44:60:51:bc:60:0a:c6:67:84:30:
d8:b3:cd:9d:a5:23:b6:73:d5:cc:a3:c4:73:28:16:a2:d5:4f:
9e:99:78:b2:93:25:4f:7b:41:cd:1c:e7:53:84:d0:d9:04:2f:
17:52:15:c7:1a:4b:66:31:68:55:fe:f2:f8:83:a3:2b:7c:eb:
d2:06:c4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:33 2026 by rpki-client