Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: R/TUUpKKTe/eA4CgCvwiX4EDBJ0eZLzeCq6JbtnyoF8=
Subject key identifier: B6:82:DB:F5:91:E9:0B:24:11:CF:15:BF:19:EE:0D:92:DA:57:F5:EE
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019E1C467859A29CFEDA3A0937B02F02F806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0EE0
Signing time: Tue 12 May 2026 13:00:40 +0000
Manifest this update: Tue 12 May 2026 13:00:40 +0000
Manifest next update: Wed 13 May 2026 13:00:40 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: wiNyX8ibd3wh0BFcjvJf0C4aVu271CibBK6LHzLCFWc=)
2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:78:59:a2:9c:fe:da:3a:09:37:b0:2f:02:f8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: May 12 13:00:40 2026 GMT
Not After : May 13 13:00:40 2026 GMT
Subject: CN=b682dbf591e90b2411cf15bf19ee0d92da57f5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:f9:4b:a9:fa:67:25:c3:e9:e4:36:cc:c7:
3f:32:ed:94:02:bc:de:d4:e8:67:ec:eb:bf:8f:f3:
05:07:69:ad:a8:11:06:ab:46:d6:1f:ca:e6:80:d8:
41:d9:f5:69:6b:17:85:ee:76:66:c5:8e:2b:1c:21:
8b:f9:06:c6:3b:fd:f6:12:c6:ff:78:e2:aa:79:2d:
72:85:16:f0:91:dd:26:20:bb:ed:67:c1:b7:41:f4:
85:eb:9c:0b:fc:63:56:1e:f7:b0:1d:b8:6e:cf:df:
c7:88:c2:cf:8c:25:43:26:bb:28:fd:ca:5d:12:f3:
aa:94:5e:7f:66:23:e8:0b:5f:c9:0e:3a:25:25:fc:
18:ae:47:47:93:49:ae:59:09:7e:79:45:76:29:c9:
3a:b1:83:31:fd:e7:34:5e:16:8a:f6:17:39:85:d1:
b3:8b:7c:16:ea:a1:a7:13:15:d8:e0:01:b2:17:96:
5e:ea:5d:1a:13:95:62:55:f8:a6:9b:c0:54:84:6a:
6b:98:87:75:23:71:15:36:93:3a:d1:96:3a:19:ad:
71:c4:13:c2:c9:6f:46:d7:fd:0e:c5:de:fc:f3:ab:
4a:6b:ed:db:0a:dd:cd:4c:63:9a:80:ff:5c:ef:59:
ac:2d:dc:9b:73:a2:f9:06:28:cf:d4:f2:9b:2f:8e:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:DB:F5:91:E9:0B:24:11:CF:15:BF:19:EE:0D:92:DA:57:F5:EE
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c2:ea:d4:c1:37:dc:8e:d4:16:bd:29:88:03:86:b1:01:86:
7e:67:b5:1a:f5:87:a0:d5:e2:cc:f6:00:46:dc:1c:5b:97:05:
14:b4:50:ab:33:65:a8:6e:68:a4:b0:0d:de:bb:5d:93:81:80:
25:87:a6:00:68:59:5a:f8:2e:c3:5b:8c:9e:3e:05:98:c4:91:
92:2c:07:c7:1a:f4:c8:94:0d:7e:17:d2:7e:ed:8e:c3:b1:e5:
33:10:e4:8d:63:4c:f0:98:71:d1:36:ce:b5:01:e9:94:57:cc:
75:17:16:79:27:9a:9f:bd:da:cb:80:b9:bf:92:fa:69:a2:a5:
8f:ea:7a:61:f5:2b:b7:a7:85:74:dd:fb:f7:03:0b:ed:e9:44:
5a:a5:6a:71:4a:b7:0b:69:d6:a2:f0:c3:28:5b:5b:54:24:05:
a3:a9:b9:2d:a4:1a:1d:d7:1f:d0:bc:6e:9b:d4:01:7e:39:e8:
ce:1f:58:7a:57:5a:f4:36:eb:12:f9:bd:35:bf:ff:a9:20:29:
b9:bc:b9:a8:04:93:99:da:08:dd:0c:ac:94:eb:3f:21:6e:45:
97:e0:b5:60:49:45:65:37:25:fe:32:e6:bf:7b:45:9c:88:e8:
54:57:da:2d:84:5f:28:91:c3:a1:3e:c3:5d:00:fa:b6:2e:96:
c5:9d:0b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:26 2026 by rpki-client