Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier: 3KIRWQMFZ8QBe1aqnP3svnEQ+Vn0yd2VhaemHzO7Ls8=
Subject key identifier: 21:DD:BB:86:C6:67:D8:C0:86:05:7D:69:C3:52:40:3D:2F:89:6D:9E
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial: 019D28BB0A029C05CFCC2BEE468571B3C140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number: 0F69
Signing time: Thu 26 Mar 2026 06:00:39 +0000
Manifest this update: Thu 26 Mar 2026 06:00:39 +0000
Manifest next update: Fri 27 Mar 2026 06:00:39 +0000
Files and hashes: 1: aXJznUL0xUln13cBfkJIhsiborQ.roa (hash: jlyCOLcXpbHCPjdfEeooCCZpqWJT8+78wdU1bfNr7vE=)
2: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: 4cW8rsuGue4Fdu+d6Tbowg5kc7N+G4EUHhSgp0NMsoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0a:02:9c:05:cf:cc:2b:ee:46:85:71:b3:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Validity
Not Before: Mar 26 06:00:39 2026 GMT
Not After : Mar 27 06:00:39 2026 GMT
Subject: CN=21ddbb86c667d8c086057d69c352403d2f896d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:47:69:be:72:bd:c1:f9:3b:08:06:0e:61:
8f:9c:19:57:67:18:c1:0d:11:a5:97:86:71:74:cb:
ee:ed:7a:3f:54:95:f7:be:00:f9:ce:be:d1:b3:de:
bb:25:38:5b:b1:1a:94:c1:e8:d5:d4:ad:54:9c:f4:
6e:24:34:fe:21:9a:e5:10:6e:83:ed:31:5c:b9:c4:
7f:a2:fe:37:af:70:0c:a0:5c:11:e9:b3:dc:dd:36:
79:43:26:84:8e:54:8a:ed:98:cc:f5:05:dc:bf:17:
2a:b3:1a:61:b8:e5:4b:a1:af:33:db:cd:33:4c:7c:
92:0f:91:0e:ca:d7:98:a4:4e:23:d3:b6:ba:13:dd:
02:52:8d:b6:10:b7:75:c3:fc:00:82:36:8b:9d:69:
26:ff:fb:86:80:21:20:3d:8c:7f:49:87:f1:23:43:
48:c5:34:fe:55:34:5b:01:3e:13:0a:e3:26:9a:00:
36:c5:b7:ec:3b:3e:c4:8f:b4:fb:3e:ff:ad:4a:e1:
11:71:dd:ec:a2:05:96:c1:98:a9:09:a1:2b:77:fc:
34:e8:29:37:36:d2:b2:67:eb:4d:b9:72:52:2a:dd:
51:61:70:94:ea:bf:20:51:ae:7c:12:bf:f6:99:dc:
f9:cc:11:f5:c2:59:8b:be:9f:12:37:cd:26:b9:cf:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:BB:86:C6:67:D8:C0:86:05:7D:69:C3:52:40:3D:2F:89:6D:9E
X509v3 Authority Key Identifier:
keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:72:1f:b0:9d:f0:f9:34:95:98:f7:72:c0:1d:05:b4:23:a2:
ce:c1:a9:bf:ff:47:a7:ab:1b:01:8e:40:ab:85:50:4d:6e:76:
b1:f1:be:b3:f6:2e:29:93:3b:01:fc:4d:5f:37:e2:63:69:b2:
e3:d2:42:57:69:18:ba:12:88:e9:78:00:fb:a7:9a:97:ef:c9:
34:26:9e:67:d2:94:da:58:93:eb:98:c8:d0:42:a6:a5:24:b6:
6d:c5:9e:0c:ad:08:f7:d9:58:fb:d3:6b:8f:17:5e:c9:db:0e:
d7:d7:62:d1:31:0f:30:f2:9f:cf:6d:8b:e4:73:ea:09:45:ca:
1c:3c:ad:6a:3c:d5:31:b9:46:5f:9a:bc:cf:5c:03:25:0a:b1:
ea:9c:31:36:e1:aa:77:55:ec:d6:96:db:43:00:9f:41:17:22:
e5:4a:47:17:36:e8:43:ad:f7:57:4b:fb:b1:40:d4:06:f6:72:
a1:fc:a8:8b:18:90:75:53:b0:88:82:5e:eb:e4:36:be:3d:df:
77:48:81:72:0e:ee:16:22:18:e8:aa:76:2d:2e:e4:62:66:54:
46:51:31:d1:ba:4c:63:05:5f:6a:33:81:b3:e6:c3:04:9e:24:
de:f1:54:fb:85:70:ea:20:f7:31:05:9a:17:ed:ec:41:33:50:
a6:c6:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:30:33 2026 by rpki-client