Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: OZVZE8NAxNjZuri/arNXtTrAGwLB1eqJA1sMFdN0itg=
Subject key identifier: 5D:82:0F:C9:AD:02:24:75:53:1E:2A:F2:51:28:49:0C:F9:C2:09:24
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 019D2AA92176676C03D45722361AA8B95EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 15:00:20 +0000
Manifest this update: Thu 26 Mar 2026 15:00:20 +0000
Manifest next update: Fri 27 Mar 2026 15:00:20 +0000
Files and hashes: 1: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: y2Xoq1SK29qzpeEa/X+Ehal0YbnyqEZYi4q9gOvoDWA=)
2: wUMPjyaePLfaPVSKvgwCuAqDAQ0.roa (hash: k0jrrwPLfAKgb8aLxsTq8mOsryCm0vJUYn3NAWB82sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:21:76:67:6c:03:d4:57:22:36:1a:a8:b9:5e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Mar 26 15:00:20 2026 GMT
Not After : Mar 27 15:00:20 2026 GMT
Subject: CN=5d820fc9ad022475531e2af25128490cf9c20924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:58:73:6d:27:1f:cb:56:43:28:aa:18:b3:
54:d9:ae:39:73:e0:28:1b:d2:80:72:05:5c:25:7f:
88:16:12:0b:4f:e1:80:ef:0d:72:a6:c5:99:52:1d:
58:fc:69:b2:54:87:5a:40:7f:a0:50:74:0f:19:7e:
8d:10:5e:db:93:eb:66:1c:b1:27:db:2d:3f:d8:8b:
27:17:53:66:e6:bc:b8:f1:be:87:91:db:ce:34:bb:
58:2f:c9:1c:e3:21:d9:83:86:03:21:dd:4d:f2:72:
59:b7:31:bc:a1:a4:41:e5:12:e7:89:de:7f:08:fd:
84:f5:c7:09:db:46:8d:a0:87:8f:47:d5:58:c4:3c:
36:db:c8:79:97:65:69:29:a4:a8:2c:af:55:c1:d3:
e6:bd:31:50:23:9c:f5:dd:9f:9a:3b:98:f7:87:bd:
3c:97:fc:55:e8:6b:ee:d9:07:19:fd:63:2d:94:db:
1e:bf:d8:89:b7:75:99:ad:5f:af:aa:77:66:f9:65:
f8:d8:be:1a:e8:d0:66:76:44:ae:2e:9f:f5:8d:9a:
03:19:23:d0:ee:85:48:f4:1f:c1:01:2b:be:29:0f:
4e:e8:28:86:ac:66:76:f8:e9:b9:30:d1:94:2f:2b:
b7:f9:1d:eb:5b:b3:fc:6d:23:27:15:65:f1:b6:a6:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:82:0F:C9:AD:02:24:75:53:1E:2A:F2:51:28:49:0C:F9:C2:09:24
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:cf:33:b4:c7:26:e8:35:49:ae:99:9c:de:d6:05:f8:5c:
30:d2:b0:f6:a8:51:16:56:fa:12:26:72:f5:45:e2:22:4a:50:
19:68:d6:59:4b:b4:d8:ed:d3:70:6a:92:f2:84:24:b9:3b:e8:
f6:73:d4:5a:8c:8e:c4:30:c9:f0:7c:cf:d6:48:08:cc:a7:a0:
65:00:0f:e5:f7:34:17:32:11:e9:64:ac:b7:a0:16:ee:04:4d:
e2:23:ca:bc:40:ea:e4:7c:20:93:8b:35:c9:e8:ac:16:08:a1:
71:6c:97:c8:01:cc:47:93:f4:8f:d7:4e:41:b4:89:48:f8:b2:
d5:60:c7:18:5c:7f:2c:31:8d:eb:3f:fc:c5:8e:23:3d:01:bb:
ea:63:4c:90:03:43:06:02:9f:1d:c4:bf:fb:e5:ea:7e:da:34:
3d:b1:10:a9:7c:6e:ba:e0:75:05:25:0c:bd:12:19:a0:bf:e8:
79:cb:17:af:34:81:63:2b:37:53:12:16:f9:63:e8:1a:d4:21:
b6:67:13:64:5b:8e:0f:b2:2d:a3:e8:01:78:31:2a:9a:1c:ae:
6d:a2:e2:9d:42:df:1f:09:c1:77:1a:e2:d0:48:89:9f:be:0b:
81:06:c5:13:fe:41:85:aa:b8:0b:57:a1:fe:d8:90:5a:24:eb:
f0:18:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:43 2026 by rpki-client