Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: NGgw7q6+bPcAoybGLdOH6QyeSjCgx+9Y03xn3RB+ke8=
Subject key identifier: 33:5C:D4:51:1F:45:3D:A3:AD:AF:A2:43:F3:37:E5:3B:29:D3:E3:42
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 019D273B24E64BBD45ED0390776C488FC509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: GbafPr-nz6jETA4H3wKy_jppcV4.roa (hash: GL7nF8v33Tb4evsXGeNMyUBxyv4eJPoUXT5+dY5suko=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: aG9Kq09uojZejPnw0j1PC+jvKKmTEQq8Tl+WrN51eCw=)
3: cFG914qlPQB4YDvh08j7jEMTfx4.roa (hash: 1oFDI2LGaWGL7rDxIaArFNWC7E0yI6jeFwwPeHOnfC4=)
4: esWqFZA6YGUlmlFQv207YFzQliM.roa (hash: SiLfsGKvYKpDqpwOejtKUBiKs266PQZB0yILqSdDMeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:24:e6:4b:bd:45:ed:03:90:77:6c:48:8f:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=335cd4511f453da3adafa243f337e53b29d3e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:1e:85:25:e6:7f:03:e4:5d:61:fb:63:55:
c4:f5:b1:7c:60:c0:7e:ce:5a:b1:cb:e3:e4:9e:67:
6e:ea:11:38:a3:ed:0f:f1:10:3d:b8:bb:ca:77:82:
b6:5d:9f:51:45:b7:db:53:0a:f8:81:90:a7:86:4d:
5c:dc:1d:ff:37:62:57:17:9b:b6:61:1f:a4:84:24:
6c:2e:32:05:83:37:32:e7:f9:51:b7:6f:df:13:2c:
be:06:77:5c:13:5c:0f:1f:e3:c9:37:8c:68:e9:0e:
29:5e:cc:98:e8:50:0b:96:d6:cf:b2:98:32:a0:04:
8e:1b:d0:88:47:a4:00:43:bb:e0:3e:e3:2d:06:32:
59:ea:3b:e4:1a:40:d7:0d:bf:b4:8c:36:cb:5e:94:
4a:c1:be:9e:be:5b:97:d1:7f:32:7a:46:f4:a0:06:
02:0f:0a:d9:06:07:03:a4:99:a2:9f:3b:50:f4:7e:
37:f0:ff:f7:a6:0d:13:4c:b3:f6:d3:ff:36:f8:1d:
1f:dd:c6:f2:d6:bb:89:45:a9:2f:ac:84:cf:b7:13:
71:cd:bb:a8:36:2a:75:2b:76:f0:c5:cf:d5:10:f4:
88:66:db:3b:69:ab:b0:3e:f6:24:16:f4:a7:32:ab:
0e:75:71:3b:be:70:e1:60:43:9b:04:ab:09:b1:76:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:D4:51:1F:45:3D:A3:AD:AF:A2:43:F3:37:E5:3B:29:D3:E3:42
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e7:6b:c5:63:46:9a:97:c3:75:d7:f9:31:83:a7:0a:f2:d9:
60:14:15:fd:a8:4c:08:67:54:1d:d4:16:65:8e:8b:1e:36:db:
12:da:b7:7f:f2:24:e4:a5:3d:7c:09:b8:a0:46:94:66:1d:67:
50:84:ab:77:a5:e6:b6:a3:2f:45:3a:a5:34:9a:40:43:67:b3:
da:4f:ea:d6:61:7e:60:93:0a:36:f7:99:75:da:17:ac:ed:78:
7e:dc:85:be:19:f3:b4:5c:71:e0:16:ac:d8:24:44:c4:38:4a:
d1:e5:98:79:97:d2:ac:67:89:7a:18:cb:3e:09:7b:60:a5:01:
d8:3d:6c:69:67:51:7d:f6:1d:7c:3f:1c:2a:5e:8d:1c:24:cc:
ca:e8:ae:0f:4d:b6:9f:a7:3f:51:1a:bb:3c:c1:6f:bf:ca:7c:
fc:21:65:ad:f2:17:0e:ad:28:df:e9:d6:7c:92:4d:58:5c:8f:
04:42:2a:f9:28:df:99:db:88:dd:fe:3c:8d:cd:1a:5f:4b:5a:
d1:e0:be:c2:1a:da:1f:8f:56:4d:d7:0b:ae:d5:19:92:cb:06:
d5:29:8a:a3:2f:43:01:f2:f2:cb:29:6e:92:83:2b:15:34:74:
67:48:33:75:87:ec:39:8d:88:9e:91:59:0b:c1:99:c4:ea:9d:
06:75:42:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:28 2026 by rpki-client