Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: 2z3s0G35+HrOKKgk7mlvBRPo8HyVacm/J0NE6NTwhIM=
Subject key identifier: E0:7D:0E:39:F7:74:32:15:30:FD:29:D0:17:C6:CC:A5:27:CF:AA:87
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 019D26CCDFA77945389792FE24565F517651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: 052D
Signing time: Wed 25 Mar 2026 21:00:53 +0000
Manifest this update: Wed 25 Mar 2026 21:00:53 +0000
Manifest next update: Thu 26 Mar 2026 21:00:53 +0000
Files and hashes: 1: 0D_NBjIXI-aivq-ZgY6qzk3IUyY.roa (hash: zpGjUKVXl4Ps76uJriGfeSn41V2BzAeznnUAHW6MZ4U=)
2: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: qp5N2oKdFqD8O1T/UkmGlf41JYhXqeMkpomx76HXle0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:df:a7:79:45:38:97:92:fe:24:56:5f:51:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: Mar 25 21:00:53 2026 GMT
Not After : Mar 26 21:00:53 2026 GMT
Subject: CN=e07d0e39f774321530fd29d017c6cca527cfaa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:2d:db:25:ba:94:a4:05:8f:7c:41:ce:8d:
43:9f:0c:f8:88:fc:f9:8b:88:db:86:fd:e1:1a:a9:
1b:83:da:a5:b4:bd:93:79:30:eb:44:ba:57:06:54:
b8:30:ef:aa:8a:cc:3e:3a:03:16:af:2a:d8:d9:1d:
3f:be:ed:b3:ab:3c:ac:39:1f:f1:03:e7:1f:17:e5:
50:55:e1:81:fe:bf:1d:eb:0b:54:c0:1a:ea:18:8f:
28:b8:2d:80:2e:d0:62:31:bc:f4:7b:08:64:53:ce:
35:f8:57:2d:c0:b1:1a:65:99:bc:cc:bd:10:b0:4d:
35:fe:9b:2f:88:fd:04:e5:49:f0:c1:30:50:a0:df:
f7:d9:75:67:cf:2a:17:d5:e2:36:4c:e9:a4:31:08:
95:56:88:f9:0a:92:77:f0:9a:59:5d:67:ec:03:ca:
2b:31:51:ab:4f:a4:16:58:5a:67:3b:e8:79:49:7d:
54:fa:21:45:5c:5c:cf:32:da:d0:d7:48:ad:af:45:
c5:2e:b7:e1:63:f7:60:b1:0b:fb:0e:d7:90:28:34:
3d:4e:a6:20:3d:3f:5d:03:d5:b1:eb:c8:d3:7b:56:
ed:90:2e:b4:28:c5:6f:41:d3:77:53:e9:f0:dc:29:
24:8c:0d:29:66:29:6e:79:84:85:f0:5d:1a:b6:97:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7D:0E:39:F7:74:32:15:30:FD:29:D0:17:C6:CC:A5:27:CF:AA:87
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b8:cc:e6:bf:49:b5:78:0a:ec:ce:d4:11:d3:75:ae:b8:10:
19:84:79:5e:cb:10:a6:e7:3e:00:ad:1b:eb:d7:78:65:73:75:
fe:b2:45:d0:cc:8d:6b:5f:2f:d6:9c:64:e0:1e:b0:15:e2:2b:
68:6a:29:e4:7b:13:37:50:6d:27:a6:02:f6:17:26:9b:a7:1d:
fd:18:07:74:20:af:5f:65:f8:52:e7:60:fd:eb:7f:0d:c0:00:
5c:15:5d:74:6c:ee:ce:db:0a:4d:2e:5b:28:c6:88:f9:29:13:
24:b6:9f:0c:d2:83:7b:7b:9f:e4:93:52:68:7f:e8:ef:91:39:
3c:31:08:5f:c2:f5:b6:cd:3b:73:41:b6:ba:11:f0:ae:4d:1d:
49:84:13:a4:21:97:25:7f:6f:e6:7c:32:10:44:69:98:b6:aa:
3e:2c:97:1b:a6:bc:8b:85:03:d7:6d:ec:d2:e4:a9:a7:7c:a7:
b9:f8:b4:51:a1:37:32:58:62:d7:93:49:d5:cf:bb:9f:75:30:
8b:d2:8a:41:32:bd:1c:af:2e:f3:62:7e:ec:b7:13:fc:bd:5d:
82:d2:ff:94:bc:90:f1:9e:24:44:49:23:3d:b4:b1:5a:ee:70:
5e:68:b1:50:76:af:5a:f2:e2:7b:12:df:fd:38:c4:43:40:a1:
f4:45:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:54 2026 by rpki-client