Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: NrcsRNKt57xd4iWzoheNFmLpM4Kfy4SdlMXTA1DExdY=
Subject key identifier: 5C:F5:23:F9:F4:69:C1:F1:36:6F:CE:CF:93:04:65:86:71:57:D4:F6
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 019D25BA6C7593CA4CBC295EA67B8E7DDC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 1707
Signing time: Wed 25 Mar 2026 16:01:07 +0000
Manifest this update: Wed 25 Mar 2026 16:01:07 +0000
Manifest next update: Thu 26 Mar 2026 16:01:07 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: QIsv+V7qlLZrfNVzDwyQr2O/iSeNwuxW1P409rg2INA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6c:75:93:ca:4c:bc:29:5e:a6:7b:8e:7d:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Mar 25 16:01:07 2026 GMT
Not After : Mar 26 16:01:07 2026 GMT
Subject: CN=5cf523f9f469c1f1366fcecf930465867157d4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:18:83:e3:55:9a:36:b0:06:f5:d6:da:9c:
10:5b:3a:da:27:db:6b:e7:d2:8f:b0:cc:1e:cf:7d:
16:99:5b:0a:fc:87:e0:57:1b:7a:88:5c:c7:c7:9f:
22:9c:da:a3:58:eb:02:8c:30:3f:95:43:df:10:ab:
68:ce:80:b1:12:96:c1:16:b5:02:6a:87:df:67:4f:
d4:48:90:7b:8b:fa:96:77:a0:b1:a4:f6:d4:1f:dd:
ad:dc:02:88:10:d4:99:8d:9a:3d:21:65:9e:88:e2:
ef:e2:49:df:f3:03:b6:b4:ab:74:74:ae:c4:5c:d7:
b4:10:1c:57:3b:86:fc:26:8d:21:71:2b:dc:80:8c:
0b:2b:dd:7d:32:59:8a:f3:b3:8c:a2:54:f8:13:4d:
8d:7e:e3:c0:e3:d9:8d:78:d8:1b:9c:db:e7:e9:6a:
1b:81:2d:97:07:61:ca:5d:a0:0d:bc:c6:1b:17:1d:
12:2c:1b:b4:79:1a:83:82:a4:71:bf:91:72:43:d6:
3f:19:a3:94:1c:d0:c6:db:7b:c8:5b:39:e3:0d:f0:
62:f8:2b:dd:06:0e:27:e0:0d:20:2d:f2:09:aa:6e:
00:32:53:af:35:e6:2c:43:67:f7:65:b2:db:9b:e0:
38:94:43:28:2b:96:3d:4b:a6:e6:83:15:b0:9c:7b:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F5:23:F9:F4:69:C1:F1:36:6F:CE:CF:93:04:65:86:71:57:D4:F6
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:96:5e:5c:7b:5b:d2:9f:ca:f3:92:d0:ae:0b:91:25:79:aa:
03:27:fc:21:58:9e:c5:b6:ec:11:63:82:64:0e:23:20:44:8b:
ae:09:ce:ba:98:bd:ad:4f:85:0a:8c:a9:3d:d9:05:cf:57:ce:
61:a9:8b:57:29:db:ad:28:45:72:11:5a:c7:14:29:48:d4:c7:
65:a5:22:1b:a2:92:e9:00:85:88:99:50:af:ee:ee:06:9d:4b:
56:d4:23:69:93:3d:3e:d7:c7:25:83:74:a6:5b:df:3e:49:b2:
f4:6d:8b:21:8c:82:3c:ab:44:2a:fe:1c:75:2d:3a:4a:4f:49:
82:17:4e:bd:3c:32:5d:9a:04:2c:13:d7:66:13:87:c5:6b:4e:
50:83:0d:dc:0d:a9:c9:71:95:18:a5:40:4e:b4:e7:28:69:3e:
f8:89:27:53:15:c4:1a:d1:a8:e4:f9:0e:b5:9e:50:c7:a6:43:
9a:7a:72:8a:43:71:58:6d:d1:ce:98:34:af:94:bd:da:2e:b1:
16:c8:1f:03:2b:8f:fa:4b:bc:76:85:7d:35:37:25:c4:af:49:
c3:35:80:e6:1f:5a:bf:63:f0:3c:a3:41:fe:11:c1:5f:b0:9a:
c9:c5:2d:1b:02:84:9e:46:6e:38:72:0b:8a:c8:50:1c:aa:9e:
fa:74:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:05 2026 by rpki-client