Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: SuZF+DHnaMr3TQbBevhN37V1aqPg1FXyc/dJ2jzCCug=
Subject key identifier: CA:06:AF:91:02:2E:26:BE:18:89:E2:36:E5:7C:AB:BD:8D:1E:35:7B
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 019D2703C12C28D7400EEFFD1194A993ABFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 1893
Signing time: Wed 25 Mar 2026 22:00:50 +0000
Manifest this update: Wed 25 Mar 2026 22:00:50 +0000
Manifest next update: Thu 26 Mar 2026 22:00:50 +0000
Files and hashes: 1: EcTxX-SiywrzoNwOuII1aWR6zHs.roa (hash: beN8BaOivwm2yhNJxlNC7Uur/3tPi7/Y31IRkJGKn0c=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: FZ6ZYy+LZ4G9k4lQaNiDIaoiTxUMcKZIkGQlfaKaW5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:c1:2c:28:d7:40:0e:ef:fd:11:94:a9:93:ab:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Mar 25 22:00:50 2026 GMT
Not After : Mar 26 22:00:50 2026 GMT
Subject: CN=ca06af91022e26be1889e236e57cabbd8d1e357b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:15:4a:f0:d6:45:57:c9:8d:1d:af:4e:de:d4:
3b:71:42:be:54:49:5a:3a:59:3a:99:d4:67:98:0b:
8e:05:71:86:94:46:85:51:8e:48:45:f3:9c:a2:62:
35:3a:c9:31:ad:e8:a1:c1:4a:3e:e8:73:87:8b:80:
c9:e8:16:96:f4:bb:19:2a:6b:9d:d2:c4:11:68:7e:
44:fd:cb:45:51:70:df:68:18:be:b7:32:32:75:29:
0d:27:f0:c7:cf:69:ee:7f:b1:3c:ac:df:0c:f3:03:
16:22:d5:2a:1a:ad:34:a1:d1:e5:c2:a3:37:64:fc:
6e:be:08:58:10:98:61:cb:c6:9c:4b:75:c5:58:ab:
aa:bb:71:40:e5:68:38:ef:8d:0a:99:45:41:b4:85:
92:18:14:8a:73:39:27:9b:db:fc:c9:e6:f6:c9:ef:
d1:a1:ec:0b:91:a3:5a:a8:84:e6:ef:3f:c1:91:7e:
76:a9:8f:32:93:85:da:fa:32:03:ae:41:4a:a3:0f:
42:df:6a:62:a2:15:ba:a5:71:e0:10:8f:2c:e9:fc:
e1:e1:c3:e2:18:f6:da:49:ce:b5:dc:77:f6:bb:a5:
22:1f:53:5e:33:29:8d:0b:95:0c:db:3f:df:a2:b9:
0f:d1:ca:aa:ae:03:8c:0b:90:dc:f9:7b:38:8a:a7:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:AF:91:02:2E:26:BE:18:89:E2:36:E5:7C:AB:BD:8D:1E:35:7B
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3a:9e:00:df:a3:11:12:75:08:4e:a0:34:0d:cf:e2:b1:dd:
69:c1:a0:e3:1e:37:04:73:bb:20:72:cd:ad:12:4c:6c:a2:f4:
b2:9f:c5:2b:72:47:4f:c8:f2:4c:94:dd:96:39:9b:37:b7:85:
d3:b0:fc:82:84:af:d9:c9:be:ed:ec:1e:83:eb:e8:13:99:a7:
04:e2:a1:7c:4c:31:0b:49:e3:7e:fe:b2:ed:f4:a5:e6:96:d5:
38:87:a9:87:83:ee:a4:62:e3:b1:2f:11:39:0e:cd:84:96:35:
cb:95:fb:51:6f:81:16:6d:96:62:ed:6b:52:26:33:1b:1a:03:
25:bb:16:b3:47:d9:95:5c:9e:7d:65:2e:68:d7:21:a5:9c:fa:
40:81:01:10:a0:6e:71:b1:64:b6:8c:33:8c:63:48:f8:7b:31:
2d:a3:2f:37:24:a4:02:50:08:ba:e0:ad:11:7b:d0:ee:65:97:
99:42:af:4f:56:b2:04:24:4b:4a:69:f4:92:6c:99:d0:2c:87:
d7:28:4f:86:0c:70:2d:fb:15:a8:53:23:9f:07:74:80:b6:f2:
c0:cf:b1:fc:72:97:d7:4f:a0:83:10:72:f9:91:00:2c:bc:b9:
ec:2d:de:e3:56:31:4a:1b:9b:dc:ac:b8:1a:ba:1a:21:8a:39:
b0:34:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:12 2026 by rpki-client