Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: RzyHiMUCi54wrX3y7MQNmp9gOkRGPFfRDbZ7twuzRVI=
Subject key identifier: FB:22:A5:30:E4:02:F8:74:4C:B5:52:E7:3C:8D:7F:02:17:D2:41:54
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 019D258343954B885ECD5CC3676A36C4842A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:00:52 +0000
Manifest this update: Wed 25 Mar 2026 15:00:52 +0000
Manifest next update: Thu 26 Mar 2026 15:00:52 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: KXrQMaHCRgSXZYJ4sNjoJr09/xkL87o502KQBXPZJqQ=)
2: T4qruvGZFs_aXMb97g2-jFZUYXE.asa (hash: mtheudfewBlecebzdDrT6Ithx8eec3qH3GXNnYLbTlg=)
3: iuE68_Zu0uK275nJpb_6tInq2NE.roa (hash: vi8Q6eX9dc3jErUuvQfc1dJyq7p1p41pFgY91fJ0bdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:43:95:4b:88:5e:cd:5c:c3:67:6a:36:c4:84:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Mar 25 15:00:52 2026 GMT
Not After : Mar 26 15:00:52 2026 GMT
Subject: CN=fb22a530e402f8744cb552e73c8d7f0217d24154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3c:30:f5:f3:f8:ef:ee:bb:e1:d0:92:8d:e3:
e3:19:cc:56:75:ad:ea:6b:77:b2:f4:fd:0b:6b:5b:
05:51:65:f2:a8:87:a3:d8:82:8c:f3:12:83:e6:51:
ad:4f:ec:94:5f:dd:4b:35:5c:ab:1c:2b:b0:2b:eb:
eb:7a:33:93:f2:ba:29:ee:8d:cc:1d:c2:07:ba:1a:
08:97:d5:d0:21:14:c7:47:77:a6:02:96:a9:cd:3f:
1f:79:15:ff:b4:39:4b:a8:22:a8:a3:ab:2d:c0:bd:
d2:d9:7c:93:38:0b:00:a4:9c:65:48:56:92:cf:52:
81:f7:2c:26:5e:84:08:8f:d2:1d:1b:dc:4d:a4:83:
92:04:2f:c4:ba:03:88:f7:3b:12:5d:3f:46:05:80:
2a:a3:12:91:22:e3:64:14:1a:62:b3:57:3a:34:cd:
ef:68:72:fd:68:ab:86:6f:09:c2:96:55:9f:0f:a4:
74:e2:c6:69:b7:23:15:63:84:a9:79:e6:d5:b1:6f:
84:35:29:c0:67:b6:23:25:00:52:b8:bd:4b:57:f4:
46:29:6f:8a:c3:62:16:18:43:06:bc:76:f3:41:e7:
86:06:4b:26:7b:0a:9d:b0:c6:07:f7:c7:3b:3d:4b:
bb:f4:59:b2:d3:37:3e:80:e1:c2:67:a8:d7:0a:87:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:22:A5:30:E4:02:F8:74:4C:B5:52:E7:3C:8D:7F:02:17:D2:41:54
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:50:ee:e5:0a:e3:3f:6a:66:b8:55:85:dc:15:6c:4b:fc:15:
e6:5b:45:5c:ce:15:e0:af:4e:83:f3:cd:3a:41:a6:65:d9:6b:
f9:a6:2d:04:d3:60:8e:3e:58:72:c6:b7:16:4a:6f:20:36:72:
ed:8f:36:df:ba:32:95:b3:7a:3b:8f:30:01:a7:e9:c6:b1:2e:
28:4d:ac:28:0a:0b:cf:bb:0f:7f:d5:b0:b1:43:56:a7:f6:0b:
b8:60:d9:53:db:7a:f4:c8:a4:37:52:5f:3b:e5:35:f2:d9:11:
19:0c:4d:3f:c4:32:6d:f6:b8:68:85:cf:79:3d:cd:6a:c4:97:
f5:cb:49:47:d9:cc:da:20:e5:f6:a2:17:d1:1b:61:7b:14:3d:
c2:e4:5e:0e:63:85:79:5a:83:c7:86:db:57:8a:ee:86:fa:d1:
2d:3a:d1:44:2a:94:da:23:64:83:a0:42:ef:2d:de:ff:8b:37:
fe:26:67:1f:58:36:74:82:82:19:9d:6f:8b:e5:bb:2b:2d:c7:
26:17:f3:42:89:e0:74:81:82:6a:2d:37:69:04:e8:4a:11:56:
38:1b:7c:e0:5e:2f:2f:ca:00:40:82:bb:9a:14:dc:6e:42:45:
9d:c9:43:f7:0f:47:aa:42:5c:72:ae:81:3b:06:d3:6c:df:8f:
34:ed:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:19 2026 by rpki-client