Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: Qeqj+VYB/rdUsbOLhrEOZJ6+H6TPo/TGtkvGnjnyVa8=
Subject key identifier: 4D:4D:89:6F:AE:F7:E2:14:0E:3D:3B:83:8F:1E:63:C0:5C:94:95:C7
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 019D26CD7D4EE43AD5A5A67B74BFEE878503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 15D2
Signing time: Wed 25 Mar 2026 21:01:34 +0000
Manifest this update: Wed 25 Mar 2026 21:01:34 +0000
Manifest next update: Thu 26 Mar 2026 21:01:34 +0000
Files and hashes: 1: 13x6q0kK4jWtFgTsaQE2IuvYeC0.roa (hash: jOVJU7qUmDkbddDyA5OyhBcSOp8ncmsAOoZ16mvRU1k=)
2: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (hash: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck=)
3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: jh6GXr1IzbklYlp9gDqNrtlXKj+iFIx3+uxV9NJRHj0=)
4: ekrqCKLizVAMKQXSGPD3DpBP_OY.roa (hash: s5CParuuwC3JvXqHExuQ7yQFo1a7fTuNWPzfjB6dlrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7d:4e:e4:3a:d5:a5:a6:7b:74:bf:ee:87:85:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Mar 25 21:01:34 2026 GMT
Not After : Mar 26 21:01:34 2026 GMT
Subject: CN=4d4d896faef7e2140e3d3b838f1e63c05c9495c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:48:9d:bf:38:29:3d:d3:c1:25:70:82:1a:
43:a2:56:fd:65:93:29:bf:f8:45:bd:99:98:d5:47:
6c:f7:ee:83:5c:fb:59:f7:a7:d5:45:f3:5b:8f:1c:
8b:a1:9a:bb:da:24:4e:de:f6:b9:7d:81:f5:a3:c0:
9e:bc:a7:d7:0f:84:57:85:53:04:dd:f9:38:88:f3:
ec:10:e5:df:26:3b:f0:76:75:52:20:ec:2b:6b:3c:
4e:99:c6:97:0a:a2:18:db:32:9a:cf:e5:cd:0a:e8:
4b:4b:5b:aa:78:e1:e3:9e:a0:20:97:98:87:67:42:
63:47:3e:72:08:3e:c9:e9:ee:cf:77:6a:0d:23:ad:
9b:ad:c8:fb:eb:48:9f:ab:06:3c:f7:3e:fb:39:0a:
2a:48:7e:e8:67:8d:6e:22:57:38:9d:e1:ae:ab:47:
4e:7e:0f:a9:8b:da:76:f5:d7:b4:30:97:45:63:16:
d1:c1:30:20:01:4d:9b:50:3e:94:0e:17:33:85:84:
89:15:9c:7c:a1:37:ba:77:e3:6e:f9:f6:74:8d:fd:
d9:6f:51:f4:3e:13:b2:fe:24:29:c3:7a:18:07:10:
82:60:03:05:32:e7:bc:a8:94:ee:6b:6c:99:6b:8a:
59:9f:e5:46:cf:32:b9:5f:42:a6:35:40:81:42:e6:
17:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4D:89:6F:AE:F7:E2:14:0E:3D:3B:83:8F:1E:63:C0:5C:94:95:C7
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:62:fb:f2:2b:a8:d1:b5:e5:73:71:d1:b2:6e:24:28:7d:fe:
78:fa:63:67:f1:5e:d7:e9:3f:33:3d:8a:1c:50:78:ac:b7:2d:
6c:54:d3:f3:02:24:d6:63:15:94:3d:b9:5f:5f:03:bd:b1:6c:
05:2b:e8:f6:43:76:9a:35:54:ca:01:5c:84:77:4b:20:23:0e:
47:35:bb:df:d6:2d:7a:d4:e8:15:3b:fc:7b:ee:af:ed:29:13:
4e:a1:21:49:2e:d9:da:1a:94:e7:37:5b:ca:a6:d5:bb:2c:41:
a1:bf:dd:8f:05:5a:ee:88:14:39:a6:6c:20:97:d1:27:6c:55:
61:98:0f:fe:df:5d:6a:b2:36:85:5b:77:e2:a0:61:72:46:be:
1f:6d:4f:b5:a7:cd:2a:e4:d1:97:d2:e1:40:ac:11:21:d9:97:
bf:f5:df:63:5a:7d:40:ce:13:bd:c4:09:44:d6:2c:ab:ea:ab:
b3:e9:73:2f:fb:14:6f:93:88:10:c0:c9:c5:c1:14:cc:1b:9d:
16:58:34:fb:eb:75:ff:ed:bb:a1:32:b1:7e:54:f6:71:e0:9c:
12:71:cf:72:d5:26:62:1d:29:18:f3:48:31:a5:f6:8f:20:cf:
ed:33:81:4b:19:28:70:75:9c:8c:c3:9a:a4:33:8b:3b:fb:8a:
8d:d8:9a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:05 2026 by rpki-client