Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: e+fhG6kENVKgoq2c1i4lg8/gvhAkSJNZ5yimYY0mfng=
Subject key identifier: B2:12:94:9F:95:0A:4D:31:F2:E5:87:2F:FB:79:98:51:58:BE:E1:8E
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019D284E52910866618126E25D11076E752E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 108A
Signing time: Thu 26 Mar 2026 04:01:54 +0000
Manifest this update: Thu 26 Mar 2026 04:01:54 +0000
Manifest next update: Fri 27 Mar 2026 04:01:54 +0000
Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=)
3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
4: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: MSFiqHoZV20a07ybzxFDbc0dn2AaY2C6TrZKt1SBNvo=)
6: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:52:91:08:66:61:81:26:e2:5d:11:07:6e:75:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Mar 26 04:01:54 2026 GMT
Not After : Mar 27 04:01:54 2026 GMT
Subject: CN=b212949f950a4d31f2e5872ffb79985158bee18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:cd:e8:94:bf:af:8d:fd:d9:98:06:ab:63:
2d:75:e4:9e:f5:d5:4e:7f:68:a0:fe:39:6f:16:99:
3a:0b:93:63:43:f1:04:f6:5a:d7:b9:c8:03:a6:f2:
f4:79:03:61:ba:52:de:2f:84:dc:e4:7c:43:2a:58:
33:39:4c:97:05:fd:6d:b4:cf:78:75:3c:07:d7:f7:
76:5e:d2:f8:a5:44:0d:f4:5f:73:9f:68:d6:30:e0:
db:b4:e7:ce:98:4a:c8:4b:be:cc:dc:b0:58:e8:8c:
d8:cd:81:69:4f:85:b1:f5:f2:c8:1d:ba:42:fb:19:
47:4c:71:9d:b7:9d:a2:5f:6f:a7:76:1d:49:6b:21:
aa:6a:6a:57:e6:5e:60:94:30:96:1e:30:c0:af:49:
28:d6:1c:94:d3:b0:db:47:7a:44:3b:38:eb:f8:a0:
53:19:5d:8e:d6:a6:b8:96:42:c2:9a:8b:4a:16:f4:
9f:59:10:10:4e:9b:ec:8d:7a:56:3d:31:67:d8:85:
72:ff:92:7a:f0:88:9b:f6:b3:28:c8:e7:0d:65:d4:
95:f6:62:1b:e4:bf:a2:7d:04:e7:f6:e3:14:e0:f6:
08:e4:0d:23:3d:ff:70:ee:9c:3c:fd:34:ba:41:60:
7d:2f:f1:09:e9:21:9f:12:9c:25:52:d7:35:91:37:
89:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:12:94:9F:95:0A:4D:31:F2:E5:87:2F:FB:79:98:51:58:BE:E1:8E
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6f:51:d8:b5:9c:64:5f:d0:e5:b1:59:7e:9f:b3:cf:6c:5b:
1a:43:c5:e6:b0:f6:c0:0b:44:11:09:04:a1:32:7a:b1:0b:a6:
a7:c6:00:d1:95:9d:55:b6:3f:93:a8:9d:9a:48:2f:95:cf:fb:
54:36:38:c1:3c:0a:d5:33:bd:2e:02:b6:88:1f:ba:e2:20:2e:
3d:22:98:7a:15:f8:ff:23:a9:e4:d6:bd:17:53:a2:1c:50:6d:
5c:d9:8b:a0:ed:b7:c6:3c:2a:b1:e7:3e:9d:d5:73:8a:21:50:
ba:a0:ac:4d:2b:3e:cc:1c:6e:a6:1e:2f:36:2c:15:ee:e5:04:
ec:5e:6f:c6:2b:8f:5b:9a:20:16:ec:02:6c:12:a1:ee:4b:61:
ea:a0:5e:b7:3f:b9:3b:f5:82:7a:5a:c9:d9:07:eb:cb:22:42:
0b:84:47:8c:4f:2b:68:47:ce:62:86:84:ec:89:01:25:95:8c:
59:16:12:cf:c9:8a:3b:6e:b5:e7:28:28:39:8b:dd:06:f7:5c:
2a:2a:34:fb:d1:e1:77:ca:8e:2b:66:b6:72:7b:a4:e5:06:3a:
d8:52:f2:21:80:6a:d6:3c:4d:f5:7a:84:ab:75:c8:78:61:8c:
f7:cd:b9:7f:36:17:65:b5:3d:e0:71:2f:f1:aa:dd:a1:90:14:
ff:4e:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:17 2026 by rpki-client