Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
File: bAPSJHjshrhUTfuYrd6sIm-PB-A.mft (raw, json)
Hash identifier: AiMCp+ol03F7a0Loy5g2m3c8ARST0uuWlroBP3BuzCo=
Subject key identifier: E6:5E:4D:5F:47:C7:54:F4:0A:C9:21:46:93:9E:A6:2C:39:A1:73:EF
Authority key identifier: 6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
Certificate issuer: /CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Certificate serial: 019D288495D72FF4D400C774C4F279420042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
Manifest number: 01B1
Signing time: Thu 26 Mar 2026 05:01:10 +0000
Manifest this update: Thu 26 Mar 2026 05:01:10 +0000
Manifest next update: Fri 27 Mar 2026 05:01:10 +0000
Files and hashes: 1: bAPSJHjshrhUTfuYrd6sIm-PB-A.crl (hash: zy7PI5cf5jActdDSLNI0pE7Tdv20GJW4f+3VKOFXBK0=)
2: nL_aguQpzIBZS3kFzk0GEh4Kv14.roa (hash: gVKNRs2PmMSobccBYIWx5t0HLiyk7RnkUIOuOgpaP2A=)
3: rtWwTl9MBmDLdQSKYIL-yECsxyQ.roa (hash: +411KUF7k/iuzsKKk7k0b7Q2qWA88IGJo6IfbnCC2V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:95:d7:2f:f4:d4:00:c7:74:c4:f2:79:42:00:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03d22478ec86b8544dfb98addeac226f8f07e0
Validity
Not Before: Mar 26 05:01:10 2026 GMT
Not After : Mar 27 05:01:10 2026 GMT
Subject: CN=e65e4d5f47c754f40ac92146939ea62c39a173ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:1d:41:41:e5:70:37:ef:8f:50:4e:f6:94:
45:d6:89:0b:d9:f2:fe:9d:d0:3d:ff:47:05:ff:78:
76:3e:54:58:8c:33:cb:ad:20:1a:2e:a9:8b:9c:45:
77:f4:23:2b:09:4a:6e:4c:7e:13:5f:1d:63:07:02:
2f:d0:ee:e4:cb:63:12:e4:73:38:d9:99:20:f4:0f:
bb:98:48:51:1d:a0:96:e0:3c:41:a2:4b:56:41:69:
ec:b1:a1:77:c0:0b:69:d7:5b:c3:63:51:de:d5:16:
5f:69:8e:b5:1f:46:09:12:c8:be:e9:ac:9c:fb:7b:
98:e9:c7:36:57:ac:af:44:5a:2f:91:d1:db:da:e7:
85:f2:28:c8:44:59:19:8f:55:02:a5:94:a6:3a:85:
5d:23:8d:19:60:2f:fb:c5:74:7b:c1:d0:04:03:a0:
77:cb:82:af:c3:41:e4:ef:89:87:d8:68:b3:bc:d9:
35:f3:2b:a1:4a:f0:d5:e3:b2:7a:d4:a0:52:b0:32:
38:3e:02:ec:31:2e:22:61:09:9e:c4:e9:5f:08:ff:
3c:35:17:f5:f9:78:5d:89:6d:25:ce:ca:3d:cd:8f:
59:96:89:c4:53:4b:53:0c:a3:02:03:3d:f9:f7:02:
d7:de:c2:04:85:8d:43:cd:d9:d7:b4:fa:12:8d:05:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5E:4D:5F:47:C7:54:F4:0A:C9:21:46:93:9E:A6:2C:39:A1:73:EF
X509v3 Authority Key Identifier:
keyid:6C:03:D2:24:78:EC:86:B8:54:4D:FB:98:AD:DE:AC:22:6F:8F:07:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAPSJHjshrhUTfuYrd6sIm-PB-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b844f6-9d18-4843-8aa2-eb6ee5356613/1/bAPSJHjshrhUTfuYrd6sIm-PB-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ad:fc:79:a2:38:3f:0c:f7:59:0c:bb:d2:f0:9a:a3:1c:e5:
a1:f3:b7:c9:d2:29:b8:23:b8:80:98:70:2f:2e:34:f1:3c:12:
62:db:3e:e6:2b:d0:7f:35:74:15:f7:63:52:fb:46:92:1a:df:
b6:12:89:4c:29:40:8a:93:8d:e4:82:9d:d9:62:0c:4e:f8:e1:
55:b3:ab:64:1a:8a:35:99:6c:ca:22:bf:24:6e:1c:05:a7:6a:
49:4e:07:26:f9:2c:0a:e5:c1:90:63:40:07:92:e0:c1:f7:f4:
8f:88:9f:af:3a:31:72:2b:7e:35:f5:3e:ff:e6:77:70:c4:5b:
9a:fa:c6:77:fe:18:41:97:03:0d:22:9f:64:33:6e:67:ee:0b:
9f:33:6d:b1:07:7a:31:c6:c0:3a:57:bd:bc:6a:68:fa:1d:0a:
68:03:3c:08:09:56:5f:1a:d0:91:7d:5a:65:ea:83:2d:62:23:
89:ea:e7:37:67:67:08:8f:41:a1:18:a0:14:59:15:76:dd:a0:
7a:da:fb:b0:2c:38:5e:2a:70:5a:76:2e:93:7a:63:e3:d0:e1:
99:29:3b:0e:f9:19:e2:17:ae:6d:b2:b6:c4:09:98:58:7e:de:
bf:92:78:23:a5:10:0d:ae:cb:ff:b5:9f:9e:cb:ba:f9:0a:75:
72:24:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:11 2026 by rpki-client