Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier: SNi0cyNuBxxSyw1tJmyRca4SfhCNWN4GTdBSuTT3lb0=
Subject key identifier: 9E:59:87:F9:12:BF:1A:0B:BD:20:5B:1E:0F:ED:2E:CC:8F:D4:B2:4C
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 019D2703B27511684D8F4C371BC8C5371C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number: 0700
Signing time: Wed 25 Mar 2026 22:00:46 +0000
Manifest this update: Wed 25 Mar 2026 22:00:46 +0000
Manifest next update: Thu 26 Mar 2026 22:00:46 +0000
Files and hashes: 1: 1DBx2-MUTIkIpYE9hN3GDr3J2vw.roa (hash: 5V1tMvfIn0DwnxGzRgl6Zl8Cs2OvGdVteM4s1j/nkTg=)
2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: qCGZ8OrNmLzztjtNDg5BVeaeUgv7BiG9xlBMW2sV7F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b2:75:11:68:4d:8f:4c:37:1b:c8:c5:37:1c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Mar 25 22:00:46 2026 GMT
Not After : Mar 26 22:00:46 2026 GMT
Subject: CN=9e5987f912bf1a0bbd205b1e0fed2ecc8fd4b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:f5:b9:74:47:97:e1:ba:93:b2:3c:d3:a3:
87:05:0e:2a:e5:a8:2a:e4:92:3f:af:bf:1a:78:74:
6b:f6:00:67:87:77:fb:15:0a:41:73:cc:74:c0:ee:
1d:b8:11:34:c0:54:9a:73:54:57:79:5a:f8:71:3e:
3a:7e:c4:29:6a:6d:71:40:6e:35:97:d5:cc:8d:8d:
4c:70:46:83:c2:76:ca:ec:97:47:30:d3:dc:9c:b6:
eb:96:cc:60:03:81:ec:ed:d0:a7:74:d3:00:90:6d:
55:84:10:0f:77:ab:f3:58:b3:45:25:87:b9:08:47:
76:cd:dc:65:6c:f6:ad:fd:a8:d0:b8:cc:da:4b:a2:
7f:77:70:16:f8:23:45:92:ca:53:4f:7e:20:6b:0c:
eb:eb:b1:fb:29:12:47:20:e2:99:d9:22:8a:ea:3c:
b5:b2:fb:2f:d5:f3:e7:14:e4:e6:e5:f0:2f:a9:12:
3f:40:1e:04:33:f9:5e:f7:2c:b5:4d:e3:1a:a5:8c:
4d:2c:2e:8a:ac:85:ec:78:f6:7f:e1:37:9c:d3:0b:
de:c5:3e:18:8f:bc:25:66:f7:e4:0d:36:3f:99:c8:
bf:19:ec:b1:c9:f2:a5:b8:a3:06:d9:e5:47:38:01:
ac:5f:38:60:fe:7a:fc:8c:51:6e:e7:cc:38:d2:f3:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:59:87:F9:12:BF:1A:0B:BD:20:5B:1E:0F:ED:2E:CC:8F:D4:B2:4C
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:e7:09:b7:7d:34:7b:3d:cb:09:33:6c:da:f0:03:68:1b:
20:c6:61:dd:e3:93:a5:6f:60:7a:8b:1f:32:2e:0f:03:6e:16:
d9:fe:24:91:2a:41:4f:4d:7b:ba:3c:53:d7:2e:75:ba:9f:74:
61:a3:40:00:25:fe:77:ca:5f:ba:5c:a4:75:70:ca:ae:49:05:
89:83:e5:86:f1:92:b7:68:01:60:f0:61:2d:3b:1a:b1:c4:82:
72:d1:67:81:0d:2d:23:c3:8c:d5:c1:43:70:b6:d7:62:9e:86:
aa:d6:e3:f2:3e:9e:a0:ec:f0:e1:fe:20:c3:67:03:61:0f:9d:
54:a2:94:2b:5e:db:25:3e:3e:16:99:80:b5:d1:79:c3:eb:b9:
7b:10:cc:e5:59:38:d5:52:bf:b0:03:a0:6d:50:4e:20:08:17:
43:12:9d:fc:bd:47:e9:aa:f5:08:47:1b:80:de:4b:9e:74:79:
b2:ca:e0:de:b5:41:77:33:e1:29:08:69:b6:d1:29:a6:5c:08:
00:b7:88:79:b8:5f:e9:86:dd:ce:92:81:02:99:5b:bc:3b:e2:
98:84:e4:1f:29:e4:58:1b:d6:9d:bd:4d:f0:3d:20:4c:b0:c4:
42:25:16:c2:3b:91:73:29:55:21:d4:06:0e:e0:29:d8:79:eb:
69:19:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:20:07 2026 by rpki-client