Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: XwN4CVjlGz6tlYPB+xHoVrQsAje3t7ywS9EIqaV4mmA=
Subject key identifier: 06:DA:96:F1:F9:AF:6E:AF:5F:AD:79:E6:D3:9D:F7:1E:ED:BF:15:7F
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 019D27E03E4896AA62E95BA767367CEBD964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0CC0
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: MAO8I-LZ9iHTC6WiehAybTQU_B4.roa (hash: 04HbiqGE+p2D11Yo0yq+6HVjeybJAO92Br5TbkWk9sA=)
2: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: Ml09KR0Cs8o+aDI+D48CDLY96BlUyFdEvPss8G+5VAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3e:48:96:aa:62:e9:5b:a7:67:36:7c:eb:d9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=06da96f1f9af6eaf5fad79e6d39df71eedbf157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:1d:50:86:bd:63:9b:ba:74:0f:c7:d7:d1:
ee:7c:ea:b1:c9:0b:8f:14:e7:29:d5:75:72:1f:9a:
96:c0:88:50:16:6f:2a:d3:56:ab:9c:d3:e7:92:9f:
5f:21:34:a2:f0:46:07:73:4e:d4:79:a5:a0:a4:4a:
b6:78:36:a4:bb:9c:3f:f2:8b:4e:22:0d:6d:f5:5c:
ec:78:b6:f4:45:b0:2e:f8:ae:94:eb:f2:63:cd:e0:
32:f9:37:99:76:58:c1:06:03:47:f8:f4:01:41:6f:
64:52:10:7e:ba:6f:f5:9a:6d:ed:5c:a0:42:9d:47:
21:27:1a:5c:a3:3e:de:6f:91:68:a7:49:6d:5c:9e:
1e:e2:74:5b:25:e5:cb:2e:44:4a:08:da:73:02:33:
4a:dd:1f:ee:2b:08:00:27:28:2c:e9:dd:74:4c:51:
2e:b1:35:cd:40:f2:7c:f1:17:05:84:b5:bb:30:71:
b2:f6:0a:d0:40:fd:0e:c1:de:7d:ed:70:ed:9f:9f:
83:f4:c0:ca:b5:b9:ac:18:d3:0b:e6:f2:81:08:8a:
2f:fe:6e:dd:d4:a4:b9:02:77:b5:20:dc:12:96:d2:
bb:8c:21:e8:3b:ff:47:99:2f:28:6b:0c:99:ac:9f:
d8:3a:8d:07:f8:ee:35:cd:a8:e8:e0:48:2c:f8:08:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DA:96:F1:F9:AF:6E:AF:5F:AD:79:E6:D3:9D:F7:1E:ED:BF:15:7F
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d2:b6:3a:a0:46:0e:d1:6e:09:ef:ad:88:ae:83:35:5f:11:
c2:7a:c5:b7:6f:ed:5e:aa:cd:2d:26:66:74:06:b6:30:99:66:
51:32:dd:53:33:7c:a0:97:c5:42:27:77:c8:0b:55:1f:c7:d2:
ae:f1:22:68:4c:c7:61:49:90:e6:dd:68:b4:0d:5c:a5:17:e8:
45:e3:77:a5:64:29:18:b7:bd:d2:f3:02:78:e8:39:56:88:e7:
eb:de:c2:04:20:97:c4:9e:45:8a:b7:ed:31:9d:71:f9:2a:6a:
a5:99:64:f0:59:18:52:10:11:e4:d5:d1:d6:33:7c:2c:a7:74:
2c:e3:80:37:80:78:b6:7e:41:02:7e:f8:05:97:04:eb:62:46:
5d:a6:95:c4:63:72:e0:e2:ae:2d:de:5f:9b:18:8a:fe:ef:47:
bb:ec:df:12:31:4e:7f:0a:95:06:fb:1d:18:89:69:0a:1a:15:
a4:80:92:31:85:1b:6e:06:e0:29:52:0e:22:b9:53:65:6f:f0:
1d:b4:93:3f:ab:c8:a7:a1:d0:60:c1:3a:80:7b:0c:80:2c:12:
1f:6e:4a:ec:7f:07:c8:ea:9f:a0:29:c4:28:de:c2:35:81:b6:
09:22:ec:0d:32:45:ab:7a:89:5f:ba:72:c3:51:e9:c7:b0:32:
3f:02:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:53 2026 by rpki-client