Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
File: bzipg89Dc6pJdJhasi1RTA9IHS4.mft (raw, json)
Hash identifier: aGl+W2aHcATLcCcQOIqJ5iWu9G5H2NrgifE+zZwfB/s=
Subject key identifier: 42:84:1F:99:D6:E2:12:F5:AD:02:A5:EC:05:48:45:86:CE:42:9E:7C
Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
Certificate issuer: /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Certificate serial: 019D27DF9EEA3F93F69560EEC45DD27BFB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
Manifest number: 04D4
Signing time: Thu 26 Mar 2026 02:00:59 +0000
Manifest this update: Thu 26 Mar 2026 02:00:59 +0000
Manifest next update: Fri 27 Mar 2026 02:00:59 +0000
Files and hashes: 1: CFG1heBbtoZ3C34wQ-l9LF7gRkA.roa (hash: Oxb1oer/Ad9vuz1FfC3NXR6Dfq/xfhHJ1WN4SPW38Qo=)
2: bzipg89Dc6pJdJhasi1RTA9IHS4.crl (hash: 7uvwrIGsw+nZMYA6yBui3zGaUZF/aDbN6ZWeyynZZMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:9e:ea:3f:93:f6:95:60:ee:c4:5d:d2:7b:fb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Validity
Not Before: Mar 26 02:00:59 2026 GMT
Not After : Mar 27 02:00:59 2026 GMT
Subject: CN=42841f99d6e212f5ad02a5ec05484586ce429e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:b3:9d:65:98:fa:79:8b:99:15:2c:8f:82:
07:cb:d3:2f:d0:52:fb:85:06:11:3c:e7:9f:b4:4c:
e6:0a:83:48:a5:a3:f1:b6:75:df:2a:a8:97:7b:56:
ed:f5:71:b2:e8:11:72:f0:87:df:f6:f1:53:93:41:
6d:80:cf:18:97:4d:68:3a:fc:f0:bf:08:ff:3f:36:
69:9f:9f:ea:e2:0d:c4:1f:02:d3:a9:3b:c1:1e:30:
a9:02:59:e1:e2:1e:c8:da:74:27:03:44:cc:55:2c:
fb:2b:87:08:26:79:0a:99:49:7a:5b:4b:bf:d9:8a:
91:8b:2b:dc:0c:64:fe:6d:38:3e:9e:94:6e:af:32:
ab:6a:7d:29:a3:8c:5e:92:d6:6a:05:8f:33:73:3a:
f7:28:01:67:7c:76:31:8e:55:a0:74:0f:a2:ac:32:
35:d0:73:94:82:a8:ba:ef:40:18:8f:b6:d8:b8:09:
d7:b1:af:a2:d8:f5:ae:a5:6c:c8:73:06:53:96:b2:
4d:67:8e:01:14:e2:a4:e4:e0:b5:18:46:4b:53:90:
49:8e:fe:de:9a:d1:74:f8:12:a6:6d:8d:80:f7:44:
22:c8:da:b3:dc:f6:2e:45:f1:a9:fa:b3:41:48:cb:
a8:bd:96:6f:cd:7e:f5:a3:70:06:41:96:3c:e2:67:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:1F:99:D6:E2:12:F5:AD:02:A5:EC:05:48:45:86:CE:42:9E:7C
X509v3 Authority Key Identifier:
keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0e:62:76:15:d7:0e:a1:10:f7:02:8d:bd:28:12:08:dd:28:
f2:55:0e:ec:cb:11:8d:33:03:21:92:d4:2b:86:cb:79:5e:71:
20:95:16:87:26:25:16:5d:59:32:b0:b0:94:3e:54:d2:ea:ee:
d4:ad:f0:11:94:96:e5:7f:06:07:6b:80:27:6f:65:31:a6:a8:
e8:ab:f5:cd:f9:79:d9:fd:e6:fe:2b:2e:af:91:e0:1a:5e:0b:
08:f7:27:6d:7c:17:e6:83:25:8c:fb:e3:11:35:32:78:02:78:
ae:23:77:79:70:2f:01:b7:54:a7:d1:de:18:ea:c9:a4:9e:48:
b4:3e:cd:c5:65:df:ae:c4:c7:e0:eb:5c:9a:23:46:17:ab:92:
64:90:36:3f:6f:63:c5:c2:c3:12:a4:65:c9:01:48:39:f8:fe:
a6:ea:79:ae:38:56:71:7e:c9:6c:82:96:7d:de:cb:7f:06:2c:
dc:5e:c9:14:38:3a:4b:0f:4d:98:0d:c5:1b:1e:a9:76:55:32:
58:55:9d:c4:25:a2:44:d3:9a:0a:5c:a0:09:d4:0d:ff:fb:32:
25:e3:15:fd:74:17:0d:7b:a7:e6:1b:61:51:e1:e1:62:fe:bf:
f1:81:39:c3:28:36:19:c6:c3:34:de:ed:2f:ac:27:e6:b1:50:
f5:87:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:21 2026 by rpki-client