Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: Aoz4NOIhC1oiqAqhvMbqZ4zwMaHOZspoSsOhQ1Ul9EE=
Subject key identifier: 49:0F:0A:58:76:8F:C4:16:B8:C1:E5:C7:B4:26:AB:97:BE:93:72:04
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019E1F7F87608C104A44A3104FA255428D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 110A
Signing time: Wed 13 May 2026 04:01:51 +0000
Manifest this update: Wed 13 May 2026 04:01:51 +0000
Manifest next update: Thu 14 May 2026 04:01:51 +0000
Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=)
3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
4: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: frOxX3xRBFWBFSzupPi4xFfju7JF5690hLQXs020snY=)
6: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:87:60:8c:10:4a:44:a3:10:4f:a2:55:42:8d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: May 13 04:01:51 2026 GMT
Not After : May 14 04:01:51 2026 GMT
Subject: CN=490f0a58768fc416b8c1e5c7b426ab97be937204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:4e:5a:b5:fe:cf:ad:d3:39:6b:a9:ee:d0:
ae:2e:3c:05:bb:a2:d2:76:a8:27:2b:27:28:b8:db:
c2:97:4d:2b:5e:3c:56:b1:d6:33:a2:1b:87:af:ff:
80:5f:bb:71:e7:d6:78:07:07:49:76:41:2e:a0:7c:
e7:2d:5a:70:03:9a:90:70:7a:aa:d0:1f:b1:1e:b7:
9f:5e:3f:c5:9f:85:b1:6a:3e:2d:18:7f:9b:1b:05:
2c:d2:f3:4a:f0:72:c9:cf:c3:11:41:58:95:66:0a:
13:9a:35:40:c8:1b:07:2e:7f:14:b8:ed:ca:63:f4:
ff:88:f3:d5:f0:7d:f9:6d:ee:ae:1f:9e:69:5b:ca:
63:c3:93:d3:ba:3b:e2:95:5d:b5:e6:6b:4f:e4:c4:
9e:d3:ca:46:74:ca:c8:bc:5a:61:bd:96:fa:bb:74:
9a:84:9b:d4:b1:ba:b6:f1:e7:ec:75:5d:62:8b:41:
bb:f7:5e:5c:df:ac:9b:2e:84:5a:78:51:40:6e:37:
fc:be:64:db:f7:93:f8:d9:1c:f6:2a:eb:cb:02:3a:
03:9d:54:4d:85:cd:42:23:e4:c2:4c:eb:ec:ff:e6:
71:b5:b5:74:20:18:d8:83:96:0a:67:dd:52:2f:fe:
8f:1f:6e:b4:96:b3:5a:be:7f:1b:86:4a:2a:3f:40:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0F:0A:58:76:8F:C4:16:B8:C1:E5:C7:B4:26:AB:97:BE:93:72:04
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f9:b8:5c:14:96:b3:09:22:8f:7e:65:97:79:15:e6:5c:6e:
74:fd:8d:18:33:2c:29:d3:40:92:0b:b8:9d:87:be:f0:1a:5b:
17:af:a9:05:6b:08:00:58:fb:a5:77:9c:69:c5:f5:ad:ae:e2:
99:7b:d0:33:20:b7:a5:44:fa:35:03:e6:c3:ce:40:a9:5f:a8:
7f:ea:b2:a1:9c:63:91:0a:98:03:07:70:71:c9:1b:a8:37:41:
8b:9d:68:d9:e3:48:6e:46:28:bf:3e:c1:6b:82:44:ce:a1:d8:
b4:fd:db:bb:5f:1a:62:b8:b6:67:16:79:3f:92:f9:24:24:c9:
2b:55:02:c1:b2:9c:20:7b:c4:39:d3:98:60:88:15:87:a1:f9:
64:33:cf:2d:7e:62:15:8e:9d:e0:f9:43:b9:dc:4a:79:72:81:
d2:82:03:0c:92:09:cb:f5:e9:a1:5f:53:a0:28:bb:47:d7:e7:
21:91:b2:62:fa:2a:57:ab:f5:fd:8e:a7:ef:d3:5d:da:4b:48:
c6:04:6e:80:74:69:df:7c:b4:bc:6e:a4:16:f2:ec:3d:47:33:
f7:c0:67:d9:ea:01:8f:83:c9:49:05:7f:53:85:b8:60:f9:95:
08:9b:da:54:2e:41:dc:33:08:61:74:d4:32:83:47:37:1d:d2:
06:8d:03:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:23:27 2026 by rpki-client