Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: 1Bu63CJ4W3Kesokv8zy3EroS1f86uH8PoxvX/lx/XGg=
Subject key identifier: 70:03:B4:5F:F8:10:5E:BE:B9:13:54:2A:34:EB:FA:A9:5B:DA:AF:40
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 019D26CD90A27162CC1E618548086B92BA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1572
Signing time: Wed 25 Mar 2026 21:01:39 +0000
Manifest this update: Wed 25 Mar 2026 21:01:39 +0000
Manifest next update: Thu 26 Mar 2026 21:01:39 +0000
Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: BrVjFOM1VVobLCISV2rX7HlXnDU15DA7aey3sxYEKSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:90:a2:71:62:cc:1e:61:85:48:08:6b:92:ba:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Mar 25 21:01:39 2026 GMT
Not After : Mar 26 21:01:39 2026 GMT
Subject: CN=7003b45ff8105ebeb913542a34ebfaa95bdaaf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:59:11:f2:73:cc:41:a2:b7:0f:c9:16:e7:
7a:bf:a9:bd:e4:6c:a7:d1:18:67:b7:21:5e:db:61:
c8:d7:73:0c:59:ed:50:72:5a:45:ea:55:08:55:14:
c7:6e:c6:42:25:f4:09:1f:a7:30:4b:92:01:c5:92:
be:f6:e7:9a:41:11:a7:e4:1c:06:da:f2:62:80:b2:
bb:d2:b9:cf:25:91:6f:b9:32:1d:36:25:33:d5:d9:
7d:ca:e1:1f:0d:74:ac:ea:1c:4b:49:3c:df:d1:86:
be:af:97:62:95:44:7d:41:bf:67:24:6a:ca:03:49:
e1:d1:61:8d:c6:b5:63:da:37:d9:6e:b3:f4:e8:26:
c7:88:db:de:2a:39:f5:15:10:16:75:bc:5e:0a:95:
0f:56:9b:b2:f6:0d:ec:e1:43:1a:c7:fb:1a:a5:50:
3d:c4:9f:7e:ce:e7:ec:0d:a0:26:9f:ad:1c:bd:24:
bc:ce:3a:e6:68:76:8b:c9:3b:ab:09:46:fc:29:05:
e2:fe:2b:24:84:f9:cb:8c:04:ab:6c:51:30:e1:1b:
db:a6:a4:e9:d6:1a:6d:ea:df:00:3c:e1:c2:6f:db:
f8:fc:a3:4c:f9:76:d8:14:d4:93:41:04:44:d0:82:
38:33:ac:e2:12:57:ba:63:5b:8d:1d:c0:a0:a4:6e:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:03:B4:5F:F8:10:5E:BE:B9:13:54:2A:34:EB:FA:A9:5B:DA:AF:40
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3c:02:78:c2:b6:f0:d3:34:5b:28:60:0c:53:b1:25:39:a7:
cc:19:c6:e7:06:fe:30:c1:66:39:33:1e:af:c8:97:0e:1d:59:
e9:f2:63:8d:cf:c0:00:21:26:e6:9d:5b:99:8c:c7:d2:32:54:
8b:7b:1c:29:dc:4d:57:83:40:5e:06:b6:9e:50:2f:f2:bc:1f:
c2:98:ee:1d:85:aa:d9:7f:0b:3e:73:f8:ab:5d:0c:e3:6d:4d:
37:3a:3a:02:19:64:58:9c:7c:62:da:fb:c4:5b:00:ad:d4:86:
25:5f:c0:af:70:67:2a:8e:79:32:76:66:dc:69:25:ba:c1:47:
8a:91:9c:6b:97:33:50:c6:3d:9a:1c:e1:e8:d5:c5:c5:0e:7e:
dc:01:d3:51:d3:c3:6c:49:7b:f5:54:8a:f0:2f:28:53:44:ba:
83:2b:12:5e:84:d9:08:a6:3f:63:f9:e4:cb:cb:43:e6:e0:fe:
4e:2d:4c:fa:8e:7b:36:f3:43:73:13:0b:7c:43:2c:6c:53:98:
ae:a8:59:b1:11:77:29:bb:40:97:d1:e1:ad:36:8e:38:92:8c:
8b:c7:de:cd:f4:cc:c5:ef:e8:2a:c8:22:aa:9a:fc:de:60:8e:
a3:65:ce:61:18:eb:03:22:f1:0d:b1:96:0f:27:0e:8f:62:c9:
e3:3f:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:50 2026 by rpki-client