Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: oKdLU6QmG3fnhLMz+oBRxYjD12zDPwM9DPvrRvKW76o=
Subject key identifier: E4:5E:02:05:F3:CA:A4:F3:A6:1A:9E:6D:82:C0:17:8C:F3:18:44:AF
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 019D29292D5C95C86D6BE5A916B4B655F276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 1666
Signing time: Thu 26 Mar 2026 08:00:57 +0000
Manifest this update: Thu 26 Mar 2026 08:00:57 +0000
Manifest next update: Fri 27 Mar 2026 08:00:57 +0000
Files and hashes: 1: Uqn6iMFS0A-L6D9kMDDjbMCbWuM.roa (hash: TeSeZwoDHMz9koxsVTB//jq8uP6vjAXuwnX8VHNH6GY=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: jXKPCr+b61NIJcS8HVLPnimIjQSz/YCqoItSuJnYC/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:2d:5c:95:c8:6d:6b:e5:a9:16:b4:b6:55:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Mar 26 08:00:57 2026 GMT
Not After : Mar 27 08:00:57 2026 GMT
Subject: CN=e45e0205f3caa4f3a61a9e6d82c0178cf31844af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:74:96:ae:ba:11:1b:02:b0:47:41:c6:f0:
eb:23:62:91:4a:7d:a8:e4:97:c7:1e:53:d5:66:85:
3f:15:95:fe:79:49:b7:25:3c:70:d3:28:71:07:1e:
b3:ed:7b:88:6a:84:92:1d:e2:f8:53:21:f3:5b:a2:
b5:55:dc:b0:8d:76:55:10:ea:c0:40:e9:a9:c0:2e:
91:d4:c2:49:16:cc:84:f2:88:9a:a9:a8:17:be:57:
a6:f6:98:9a:f3:bd:17:a7:23:55:fc:91:37:36:69:
db:2e:88:07:a9:7a:0b:62:36:cd:94:ac:52:55:b0:
5b:93:76:83:ef:69:e2:4c:e1:82:7b:90:eb:b6:57:
fa:a2:ec:61:ee:12:b4:93:0a:3a:2d:51:14:18:da:
45:1d:4d:fc:34:13:9c:da:17:a8:37:35:de:4f:d9:
5a:a4:84:99:20:66:e7:8e:d3:55:81:8b:c8:a1:fc:
24:0b:3d:e5:cc:2b:93:3f:c1:f8:71:6e:34:e0:fc:
13:07:62:d4:54:21:25:c2:1d:03:d1:76:cb:f3:7b:
56:dd:74:47:18:d5:42:da:00:96:86:b9:5c:7f:16:
eb:be:be:b4:ac:2e:fa:b8:47:aa:6d:44:45:49:b4:
1a:fb:6c:28:ba:bc:12:fc:11:f3:3e:3a:d6:db:e2:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5E:02:05:F3:CA:A4:F3:A6:1A:9E:6D:82:C0:17:8C:F3:18:44:AF
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ee:df:4f:12:72:c1:e0:91:78:11:95:6d:bb:1a:08:91:6d:
66:2d:38:a0:db:90:92:75:ae:e6:a8:d6:d1:33:c0:b0:d7:31:
4c:21:cb:c7:ac:13:cb:14:c0:c3:73:79:2b:11:50:66:69:d0:
6e:d2:04:d1:0c:4f:e2:23:88:08:b4:c0:3d:b9:9c:38:21:78:
ac:5f:67:07:87:e2:46:a5:87:4b:a6:71:bf:aa:17:e3:6c:eb:
1b:4e:ad:42:52:76:27:99:10:c4:5f:ed:04:14:06:c1:6e:b9:
48:9a:0e:64:c2:08:bf:f3:a7:93:6c:b7:33:9b:84:69:d5:ee:
0d:59:91:45:5d:82:57:1c:20:e3:46:8f:27:a4:8b:36:85:62:
ff:ef:b5:c4:08:b3:32:ed:d0:fa:ef:29:67:d0:c5:3c:e5:82:
b5:a4:71:7f:ea:93:28:b7:cb:e3:7a:48:35:97:25:1b:58:90:
04:80:70:31:ea:a1:d2:92:9d:6b:52:25:56:7c:e9:2c:b7:bc:
75:e2:db:b7:e2:88:98:3d:4b:68:27:5b:59:5d:1c:36:ae:e1:
cc:4c:6f:d8:3a:22:8d:07:89:93:1b:b9:1a:70:81:2f:52:9f:
be:16:df:90:2c:a9:4b:ba:4f:9d:b7:6c:3d:bf:ec:77:bb:fb:
23:79:6c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:46 2026 by rpki-client