Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: uSs23LMasYoJ3MX1J82A7vxnyB5hUj4gEVuDrrcw2tk=
Subject key identifier: 2A:8D:E9:4C:46:C4:AA:DF:5E:F0:49:6D:7C:C5:52:46:86:5D:D1:F5
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 019D25F1FAF578D54A7EDE91F65760AD4F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0FC2
Signing time: Wed 25 Mar 2026 17:01:48 +0000
Manifest this update: Wed 25 Mar 2026 17:01:48 +0000
Manifest next update: Thu 26 Mar 2026 17:01:48 +0000
Files and hashes: 1: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: di4CAkXGXPaWf+KZXCo7roU2epJ4czxgJYdg7xzbr+U=)
2: rvG6Pqknht3C9PPJsjRV_-EkR94.roa (hash: imN0OYjaMMnMPtfQkitSZR5ocmTWX3N8NSgzVWFNEvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fa:f5:78:d5:4a:7e:de:91:f6:57:60:ad:4f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Mar 25 17:01:48 2026 GMT
Not After : Mar 26 17:01:48 2026 GMT
Subject: CN=2a8de94c46c4aadf5ef0496d7cc55246865dd1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:ff:c2:62:83:17:5c:dc:1b:0d:52:cf:e2:
52:54:39:c4:5c:f7:be:be:e8:dc:b2:87:5a:13:e9:
c4:90:66:72:f9:73:46:2b:fa:03:85:74:fb:29:81:
14:2c:e3:31:f0:8b:8e:d5:6f:9a:c7:e9:77:2b:06:
13:3f:d7:06:e4:84:93:63:87:34:34:44:d8:d8:12:
59:08:48:a8:56:93:de:56:f4:11:36:ac:46:7b:bb:
e9:3d:b4:60:bf:3e:a2:36:43:56:70:ce:ac:f6:cd:
3a:30:9e:5b:bc:e5:fc:a3:34:01:38:83:2e:1b:a6:
4a:42:9a:e0:a9:39:97:8d:36:45:8b:c1:2d:ec:e1:
e8:d8:bb:f7:52:a1:27:8d:67:b9:b8:a9:77:5d:9b:
d5:af:21:7e:01:98:1b:25:22:c3:3d:28:29:22:3d:
a4:97:ae:ba:d0:69:13:56:f4:ce:ea:5e:f7:5a:e7:
af:71:42:13:ab:3b:9a:56:73:22:77:2b:d6:a2:3a:
71:71:9b:06:d5:be:f7:41:20:65:b6:48:63:e1:e1:
a3:c4:34:28:2c:28:9f:7d:5a:e4:4d:b5:20:ca:ee:
8b:e2:93:9f:a9:ed:e9:30:d4:ab:8a:85:65:b5:27:
f6:65:5d:83:2c:ee:62:d6:83:01:1a:d7:b3:b3:be:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8D:E9:4C:46:C4:AA:DF:5E:F0:49:6D:7C:C5:52:46:86:5D:D1:F5
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:96:72:d8:ed:89:6f:47:c9:a0:58:83:a2:bb:b2:87:73:
da:53:f6:4b:91:20:a2:db:8e:d4:b6:78:ba:62:82:5d:9c:bb:
6b:29:1c:23:2f:a3:ae:96:af:3b:30:23:71:62:75:e6:30:e7:
9c:d1:7f:df:86:13:0d:53:bf:53:cb:5d:7b:aa:e2:4a:00:9f:
c3:1d:e1:4a:c5:70:ad:6b:65:58:94:55:a0:5b:2c:7e:2a:07:
01:05:53:e1:02:98:90:fe:d4:4a:2f:85:ca:a3:87:dc:8a:4b:
80:30:c7:5f:0c:58:fc:0f:cf:e3:60:65:f1:74:24:a1:91:fd:
d4:f8:12:36:4d:e7:3c:a7:c5:e6:75:50:33:42:92:55:b7:dc:
66:fd:0e:92:75:8f:9f:22:c8:71:d0:de:7a:83:93:c2:c1:8a:
61:45:49:22:8c:95:ee:a6:19:e4:da:2a:8a:99:4f:e5:94:26:
a9:2a:d0:10:67:1f:f5:04:a9:79:23:c6:15:a1:70:c5:82:9a:
a5:34:a6:99:43:0e:01:a3:df:e2:d7:2c:7b:6b:ce:14:e6:23:
ca:a1:d9:4c:25:29:e9:67:b4:53:da:d6:74:67:5c:fe:11:90:
21:99:ab:b4:4e:60:a0:f5:ea:68:0a:5c:1d:43:a5:5b:5d:9d:
f9:52:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:02 2026 by rpki-client