Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: LlZ9l+N2dMHVkgTpAUGoy6EXOoFPQjxEZsrt9voDd74=
Subject key identifier: 07:F2:BF:67:75:2C:EB:43:70:50:EB:D3:BA:91:83:10:7D:D0:9E:C7
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019D284E339E2849AAF03567542FAE02AB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0A7E
Signing time: Thu 26 Mar 2026 04:01:46 +0000
Manifest this update: Thu 26 Mar 2026 04:01:46 +0000
Manifest next update: Fri 27 Mar 2026 04:01:46 +0000
Files and hashes: 1: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: f6JaE4SxLra2PTKVNYsLlkqaKgHScjsZoOmTT7zaARY=)
2: niUV0djy4P_JQW5PwXS4h9UDq3c.roa (hash: dUR1gqSul+jZS5ya9pRLXgQp3A3g2Y76zvsEH9Fq7CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:33:9e:28:49:aa:f0:35:67:54:2f:ae:02:ab:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Mar 26 04:01:46 2026 GMT
Not After : Mar 27 04:01:46 2026 GMT
Subject: CN=07f2bf67752ceb437050ebd3ba9183107dd09ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:d6:ba:23:a1:b7:fe:15:4c:99:f7:86:39:
91:40:ae:67:b0:b5:80:d5:b9:f2:bf:b9:f1:ad:1b:
5e:f6:c8:ae:fe:9b:97:06:0f:80:2b:d8:35:1d:05:
8e:04:45:d0:62:f2:29:93:cb:30:55:40:59:43:d9:
29:1b:bc:b8:d6:8f:0c:c5:a0:0c:bd:ca:b1:d0:82:
ed:84:86:19:07:a4:a4:3e:5c:9c:eb:56:00:91:0f:
61:63:84:48:44:3e:00:f5:3f:d9:f2:a2:41:dd:99:
8d:46:f6:e5:1b:ad:0d:07:e1:35:91:5c:cd:01:b0:
01:a8:19:94:9e:38:38:21:47:68:8d:5e:32:33:f6:
9d:71:2c:8e:81:94:38:40:03:68:47:8d:31:6e:e1:
83:c5:94:da:56:1d:33:5c:d2:37:03:a2:f5:d6:6e:
94:8f:fe:a7:61:db:ce:bd:17:58:da:96:4d:1b:52:
c2:e6:05:96:7a:d9:35:12:59:9b:16:f6:96:d1:c7:
55:14:7b:43:65:2c:ea:e1:03:8c:e4:c6:28:11:33:
3c:56:75:43:b5:32:4b:ba:b9:95:fc:8e:d2:d0:f5:
15:ad:ff:f6:d4:69:ea:87:94:18:d6:1b:4f:63:19:
f1:c2:06:49:1f:79:9f:57:2f:59:c9:61:98:98:cb:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:BF:67:75:2C:EB:43:70:50:EB:D3:BA:91:83:10:7D:D0:9E:C7
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6d:e4:0a:ed:ed:91:50:bd:c6:ad:28:07:5a:8b:95:0a:24:
0f:61:ac:e2:c8:9e:3e:3c:cc:30:cd:79:da:d7:83:9a:c8:3c:
25:0b:3c:95:72:05:4b:53:b9:48:77:53:96:2b:44:c3:ed:90:
53:fc:bd:f1:af:3a:39:b6:e0:2f:cd:bd:b7:52:c7:58:45:4e:
7e:81:c7:4d:2a:2c:30:7b:ac:b0:2a:51:55:25:4e:c3:a2:05:
f6:7e:08:6b:da:14:86:0f:34:1a:83:96:6c:b3:bc:28:7d:c3:
65:6c:72:92:7b:d6:22:f3:cf:6c:7d:5f:19:51:ce:92:cd:0f:
2d:51:bb:ef:81:00:c2:5e:08:7c:d1:40:7c:a6:27:70:60:16:
50:31:7f:86:ba:a8:33:91:f2:f1:88:2b:fe:4c:0d:07:ae:34:
f9:16:ec:80:60:e5:d3:d9:1a:63:ea:e1:d7:19:e1:66:2f:47:
30:73:b0:da:21:74:90:c3:5b:3c:44:7b:fc:6e:1f:4b:02:b8:
a2:cd:26:a8:d9:3e:21:88:a8:e0:8d:57:44:76:bb:3a:0e:18:
43:97:63:29:4f:95:c9:08:41:5d:1c:7d:1d:2b:5c:7a:f5:05:
c5:48:4e:90:6e:23:84:94:0b:1d:01:36:47:6e:c5:80:31:28:
a2:d5:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:12 2026 by rpki-client