Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
File: bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json)
Hash identifier: hDm3VmMCaV9xVSKTxo4LHMD3gEeyUW7oa+e8EVwOkk8=
Subject key identifier: 43:9C:E1:D9:24:D7:24:93:44:6C:7D:10:4D:8A:B6:D9:9A:5A:F9:5A
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 019D2703C1FBD10D02CAB5054FD5B2ABCA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
Manifest number: 1897
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: +W1eZPetcK7iQ9FdwP7QfdZZoni5LTOnEGthbmr7YUM=)
2: dAtJXk54QeNvdrIj2y9sPVigo4Y.roa (hash: VR9GSCDMRB0j9JdvpO5E9iyI6YnfCrylbELLiWuyElY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c1:fb:d1:0d:02:ca:b5:05:4f:d5:b2:ab:ca:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=439ce1d924d72493446c7d104d8ab6d99a5af95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:98:5a:48:6d:fc:e8:87:44:16:64:49:a1:1d:
21:ac:8f:a8:0e:1a:92:c1:de:a2:95:3d:6d:ca:08:
de:1a:cc:ac:12:99:7a:8b:42:87:db:9f:b8:89:bd:
38:87:f8:aa:c3:8a:aa:b8:66:67:91:4f:cc:42:89:
ea:b5:f1:53:4b:ad:d9:a0:1d:3b:17:ae:82:3c:09:
94:0e:5f:13:c6:bf:bf:24:57:e1:8c:f6:e4:e4:f5:
69:17:71:9f:46:d4:53:48:99:48:a6:ad:24:15:07:
74:4f:0b:e1:f1:99:55:91:b0:12:c8:9d:c5:64:e2:
83:28:33:61:57:3e:82:e1:ef:4d:19:a7:60:f8:ba:
8b:11:1c:45:2b:0b:7b:21:b4:0a:a5:3a:03:df:d2:
70:2a:c0:04:0e:a3:19:54:69:3b:61:b5:5a:3e:0d:
66:11:93:1e:d8:f9:3e:91:dc:aa:3a:4c:05:c2:6b:
fc:55:de:88:db:bd:61:ef:92:f5:ea:f3:da:cb:62:
0e:cb:ac:8d:d9:f8:45:6c:ed:a8:33:ca:18:7f:c6:
31:2f:8d:9e:1c:77:6f:c2:c0:09:8c:63:c9:e2:a1:
0b:02:73:41:41:ad:28:fa:01:66:72:81:af:e4:8f:
e7:48:78:8d:03:52:22:84:c5:91:55:32:b6:47:72:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:E1:D9:24:D7:24:93:44:6C:7D:10:4D:8A:B6:D9:9A:5A:F9:5A
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:43:b1:23:eb:f8:99:50:86:6f:a5:d5:8e:6a:58:c1:bc:
93:c3:c7:b8:46:e5:3b:64:d5:db:37:18:10:86:fd:e2:4c:bd:
e1:70:59:a2:6f:b1:84:30:fa:7c:6b:b0:29:d2:8e:37:45:7e:
e2:05:bd:28:a4:9e:3c:67:07:02:ee:a0:56:ad:e4:73:41:1d:
05:b9:36:2a:94:a7:86:6d:f9:b7:b4:a6:d3:7a:4a:96:00:63:
0f:b6:8a:68:3b:ac:c2:1a:df:01:44:20:0d:36:c7:dd:2a:d4:
ca:1c:94:4b:d7:66:86:a1:a5:49:45:6a:8b:a7:8c:b5:3e:91:
a1:42:ed:de:95:c2:88:a4:e6:41:67:5b:08:ff:15:f4:76:85:
5b:c1:fa:c3:0e:b8:1d:84:42:94:f4:36:ae:23:d0:d4:94:2d:
08:c1:d5:e1:ff:ad:59:4a:56:66:53:39:f7:49:a6:52:3f:15:
7b:f8:69:17:0c:81:3a:b6:54:fe:95:94:dd:3a:eb:cf:2b:53:
e9:40:f3:70:30:ac:82:3c:18:49:01:12:fb:14:e8:18:44:0d:
8b:a0:c5:51:84:f2:d4:b8:35:9b:2f:50:a1:23:52:93:7d:2b:
ef:8a:59:ce:98:5b:db:ad:45:d9:cd:0d:79:d5:ef:3f:02:2d:
89:65:9f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:03 2026 by rpki-client