Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: u/BZvhcOpxWV8WSWwviRdLmnlX4ub7pFNEC6OuurPjE=
Subject key identifier: 7F:D7:B6:19:3D:66:6E:B9:74:9D:4B:72:D7:94:9A:56:30:96:79:D2
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019D28842BD4819014498E8CB9FBB2E12166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 0386
Signing time: Thu 26 Mar 2026 05:00:43 +0000
Manifest this update: Thu 26 Mar 2026 05:00:43 +0000
Manifest next update: Fri 27 Mar 2026 05:00:43 +0000
Files and hashes: 1: 0ZYnGlB1sX-tIT-_McEHbMjcHh8.roa (hash: 2qWVIKYHaVj8bsZAAH+azzAq9wcQ/nQgKKzUX3Hr+1A=)
2: 4F9KCelkBdaW6adR2HbwfE6Qa50.roa (hash: 28y0uJhPlCZ576LDD9F3Bdf7MivZvFfgd38Ys6VSm5M=)
3: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=)
4: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: VK+4NDEKbv3URhtBMw/ylpqia4m1ULlb2xt01SgVE/E=)
5: HgKDk1kuAHkL3yy_TXl0qxP-7Ps.roa (hash: EYBlGLzCjhMCJqevk0Sz3CYuuG7NvC8a6JulLnYLrvQ=)
6: b9tPgBNgYh6iOkrY-UQLj_LcNYI.roa (hash: XWqLKaSvCAdhll8JN//U7vrVfAkkRKjwGPOfF08R7Io=)
7: g2dtR6UU6YbyOvJ87zvLD53mIJA.roa (hash: OjJY/mSN+MIiT4fZ4kWjc3+KYFQldFou7Yv+HnbjSaQ=)
8: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2b:d4:81:90:14:49:8e:8c:b9:fb:b2:e1:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Mar 26 05:00:43 2026 GMT
Not After : Mar 27 05:00:43 2026 GMT
Subject: CN=7fd7b6193d666eb9749d4b72d7949a56309679d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:be:87:30:a6:b8:40:35:92:a2:e6:79:c9:
4c:fc:d0:cd:65:24:fc:60:41:53:30:eb:62:56:44:
8d:8e:79:69:0e:ad:16:49:5c:10:ae:c5:d0:71:8a:
06:04:8d:cf:07:55:e7:4a:2d:ba:cd:3e:af:cf:7a:
55:50:ec:60:ad:53:bc:df:75:ce:a1:26:0f:cd:e9:
93:fb:a1:4e:49:78:54:6a:e5:0a:61:58:8f:25:d5:
2e:f0:e8:21:34:1f:cb:fd:da:ed:9c:d7:50:50:39:
2a:80:48:9f:4c:d9:84:8e:79:15:a0:c7:3f:2b:1c:
4c:0b:f8:9d:6e:62:fe:dc:92:08:0b:71:96:01:07:
04:9e:6d:0f:e8:d4:ac:d7:49:e1:4b:5d:ac:20:51:
06:ff:ac:7f:68:58:22:e9:7c:8d:6e:53:80:5f:90:
65:15:ef:27:3b:4f:76:2c:1f:6e:6d:6e:86:ac:a6:
ee:38:40:a1:56:ea:56:65:6d:54:e5:fc:cb:db:1b:
2f:36:a5:dc:38:96:31:0a:8b:a5:bf:1f:74:c8:e5:
7c:99:cb:08:a2:8f:bb:b6:cc:a1:fc:eb:05:f5:b6:
56:79:51:77:70:d6:ed:07:0b:ab:21:bf:f7:78:85:
df:cc:5c:20:2f:b4:6d:b3:4e:21:b5:60:91:43:23:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:B6:19:3D:66:6E:B9:74:9D:4B:72:D7:94:9A:56:30:96:79:D2
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0f:bc:99:90:fd:2a:d4:44:16:25:9b:74:46:c2:db:d2:a1:
c4:bd:94:cb:51:f6:5a:42:49:f4:31:d4:d2:63:09:28:53:64:
9a:c9:d1:60:aa:15:0c:93:0a:57:15:c1:4c:28:d9:f0:6f:f7:
81:14:7a:97:d5:99:69:a5:3c:b6:c1:6c:21:4a:a1:e3:65:d2:
8e:e2:a5:1f:a0:2c:01:64:81:e7:f4:2f:e8:42:c3:9a:df:1c:
0e:e7:15:aa:64:9e:fa:b3:e6:9d:5a:2b:c5:27:0b:1a:a3:14:
17:0a:70:fd:b5:e3:0b:f4:08:2f:4b:4d:9b:3c:59:72:7f:2c:
2d:e9:4e:38:36:eb:fc:3b:f5:84:3c:92:0c:56:34:eb:a8:7a:
f5:36:18:15:2b:15:cf:33:ba:01:2a:1c:06:79:f3:7d:bb:93:
70:a6:7d:02:82:ba:83:62:3c:87:d4:90:2d:70:48:5f:e3:4b:
05:5f:8e:b1:9c:81:14:cc:e8:80:21:80:83:0e:33:01:b6:ce:
86:01:62:b5:6d:cc:81:2a:e3:b2:eb:44:26:a5:25:76:0c:a3:
28:04:46:8a:d3:35:7a:82:a8:d0:3f:6b:89:51:d3:22:c1:8a:
f4:4c:41:86:4b:f9:09:49:e5:87:63:d9:d5:49:bb:8c:38:10:
6f:6a:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:34 2026 by rpki-client