Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: YEHscLZ6g5vjfh/gzSZcnZxJ831I5ov444Yxrzlst58=
Subject key identifier: 25:D9:4E:C0:60:DA:A0:A4:F2:DB:B4:B9:DE:9E:54:55:D5:A6:F0:9E
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019D2816438D08407C7FE4453F37763806D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1580
Signing time: Thu 26 Mar 2026 03:00:40 +0000
Manifest this update: Thu 26 Mar 2026 03:00:40 +0000
Manifest next update: Fri 27 Mar 2026 03:00:40 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: lZuyjkrPhTpEYPURn6vzYbzxntGexmCvoF9QuzLXjog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:43:8d:08:40:7c:7f:e4:45:3f:37:76:38:06:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Mar 26 03:00:40 2026 GMT
Not After : Mar 27 03:00:40 2026 GMT
Subject: CN=25d94ec060daa0a4f2dbb4b9de9e5455d5a6f09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:98:39:ae:d3:6a:5a:28:6e:84:ef:f6:8d:
b9:81:48:21:6a:04:15:b2:85:2b:1a:45:b4:c9:f8:
bb:f8:3a:7d:3d:e1:24:53:3b:35:c5:41:10:17:85:
31:11:bb:0b:4d:a1:2c:a7:12:1d:2a:ea:37:7e:ec:
63:3e:fd:f6:ba:db:e6:82:67:37:1d:59:37:fe:9e:
e2:43:3e:8a:2d:0d:81:ec:e2:24:26:e1:0d:bb:1e:
56:33:bf:23:2b:78:1f:ea:fc:42:bf:8d:c0:fb:e5:
a1:49:ee:84:b7:56:fb:09:dd:3f:71:0c:01:21:ab:
dc:37:bc:63:b8:a4:ac:37:05:ec:a6:07:8b:b5:52:
dd:c0:f9:5f:ee:21:49:84:9f:bc:da:dd:21:c9:66:
fa:3c:3f:6a:2a:3e:31:21:93:43:29:5f:56:e0:83:
07:58:3e:c5:e3:38:48:8a:4c:c7:c3:5b:22:f5:8c:
51:57:7b:bb:ea:bc:7a:cc:53:62:52:2f:96:ad:ff:
be:31:40:72:c7:c1:87:63:23:9f:f1:9d:c5:26:79:
16:81:22:55:25:30:a1:29:e7:eb:aa:d7:73:09:5a:
35:24:3e:08:c2:de:3f:d4:72:70:0f:08:e9:fc:15:
60:05:e6:d6:25:d7:72:83:d3:3c:6f:1b:a1:11:40:
e7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:4E:C0:60:DA:A0:A4:F2:DB:B4:B9:DE:9E:54:55:D5:A6:F0:9E
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:bd:3d:46:e2:ae:fa:ed:7f:8c:6a:44:4e:dd:0b:4d:f2:8e:
ba:a6:ea:28:48:c0:f9:91:d0:1e:c3:f5:f3:cc:84:b2:78:1e:
f2:e4:44:03:97:6a:4c:ea:81:aa:09:de:ab:21:fb:f8:49:eb:
2b:66:bf:b7:ca:6f:9e:e0:cb:5d:cc:ef:8b:22:81:0f:93:b7:
d5:a6:3e:65:16:5a:d3:24:1c:bc:fe:df:10:88:85:9e:b7:f5:
14:f8:ab:64:70:ad:52:e9:34:27:33:4e:0f:77:b6:37:59:46:
8a:d0:d5:db:06:16:60:37:c9:8f:d2:2c:72:93:3d:dd:91:9f:
09:bd:ee:3a:3a:e3:0c:e2:3f:43:74:71:17:62:91:08:66:34:
ad:f1:ed:ef:40:9b:aa:e8:6f:2c:f4:1c:8f:a2:c9:dd:9e:14:
e9:a8:1f:e2:a4:e7:ff:10:b9:e6:c1:5e:13:04:d5:a3:e9:0d:
11:62:2e:3c:47:c7:fe:65:e0:e6:09:b1:8f:d2:2c:41:35:97:
25:64:1b:fc:11:37:32:6a:45:35:7a:73:c9:ce:ed:d1:3b:e3:
d4:34:9b:22:8a:c4:02:7b:ea:5d:2c:1e:29:11:6b:3c:98:bb:
b5:8c:5a:46:4b:2f:ed:a6:3d:af:67:6a:da:21:00:ad:b2:dd:
20:54:df:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFkONCEB8f+RFPzd2OAbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmY1OGU2MzZkOGJiMWRkMTAzOTZjODI0NGRjMTE5MjE1
ZTc5MTQwHhcNMjYwMzI2MDMwMDQwWhcNMjYwMzI3MDMwMDQwWjAzMTEwLwYDVQQD
EygyNWQ5NGVjMDYwZGFhMGE0ZjJkYmI0YjlkZTllNTQ1NWQ1YTZmMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhqYOa7TalooboTv9o25gUghagQV
soUrGkW0yfi7+Dp9PeEkUzs1xUEQF4UxEbsLTaEspxIdKuo3fuxjPv32utvmgmc3
HVk3/p7iQz6KLQ2B7OIkJuENux5WM78jK3gf6vxCv43A++WhSe6Et1b7Cd0/cQwB
IavcN7xjuKSsNwXspgeLtVLdwPlf7iFJhJ+82t0hyWb6PD9qKj4xIZNDKV9W4IMH
WD7F4zhIikzHw1si9YxRV3u76rx6zFNiUi+Wrf++MUByx8GHYyOf8Z3FJnkWgSJV
JTChKefrqtdzCVo1JD4Iwt4/1HJwDwjp/BVgBebWJddyg9M8bxuhEUDnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXZTsBg2qCk8tu0ud6eVFXVpvCeMB8GA1UdIwQY
MBaAFG0vWOY22Lsd0QOWyCRNwRkhXnkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTct
Y2U2YjdjOWQ1NTliLzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTctY2U2YjdjOWQ1NTli
LzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB709RuKu
+u1/jGpETt0LTfKOuqbqKEjA+ZHQHsP188yEsnge8uREA5dqTOqBqgneqyH7+Enr
K2a/t8pvnuDLXczviyKBD5O31aY+ZRZa0yQcvP7fEIiFnrf1FPirZHCtUuk0JzNO
D3e2N1lGitDV2wYWYDfJj9IscpM93ZGfCb3uOjrjDOI/Q3RxF2KRCGY0rfHt70Cb
quhvLPQcj6LJ3Z4U6agf4qTn/xC55sFeEwTVo+kNEWIuPEfH/mXg5gmxj9IsQTWX
JWQb/BE3MmpFNXpzyc7t0Tvj1DSbIorEAnvqXSweKRFrPJi7tYxaRksv7aY9r2dq
2iEArbLdIFTfcQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:54 2026 by rpki-client