Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: 9y6MUMwyTteA53Z6ncssIRjUX5n1vMBfKo+0bMfzI/w=
Subject key identifier: 49:9B:44:AF:97:C4:DB:DF:BE:46:72:79:81:21:A7:02:25:7E:39:F7
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019D28F24EF7F9CFEFB2E6853ED527DB25BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0E62
Signing time: Thu 26 Mar 2026 07:01:01 +0000
Manifest this update: Thu 26 Mar 2026 07:01:01 +0000
Manifest next update: Fri 27 Mar 2026 07:01:01 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: PI5oIX3cr7yqEMQHuFnVpPmZazfACVzBR4KYALpHoBE=)
2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4e:f7:f9:cf:ef:b2:e6:85:3e:d5:27:db:25:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Mar 26 07:01:01 2026 GMT
Not After : Mar 27 07:01:01 2026 GMT
Subject: CN=499b44af97c4dbdfbe4672798121a702257e39f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:08:a5:d4:4c:5f:e1:66:a0:41:7e:5d:43:
db:23:43:18:e4:86:dd:a7:c3:a0:7c:e1:cb:84:12:
16:c8:f4:c5:66:5b:10:aa:73:c2:50:12:d6:7d:5f:
95:75:a0:e2:4a:84:bc:dc:71:77:a7:65:79:f5:b4:
8e:98:25:d9:bf:bd:9d:ef:73:96:fa:f0:fa:a5:c9:
bb:98:4a:31:30:7f:f3:e6:6a:b7:11:5b:81:70:1f:
88:37:22:69:a6:e9:68:3e:3d:60:47:4c:aa:82:6c:
61:13:54:10:65:14:d5:78:1a:17:b7:2a:41:2f:99:
24:ff:71:20:88:2c:6c:df:f3:08:12:64:df:1e:43:
49:47:ea:09:8c:04:a7:87:c3:06:92:ec:20:2d:28:
5e:b6:66:b8:d4:b6:c7:ee:77:0f:16:fe:f5:ca:cf:
37:66:a6:b0:eb:20:e9:61:39:8b:4d:6c:6c:91:9d:
09:f0:7d:c5:4b:6e:b8:36:70:58:eb:10:96:ff:db:
20:a2:7b:3b:93:36:22:cc:7f:cc:f1:1b:22:18:c8:
34:97:09:bd:0b:79:7c:bd:2e:c2:63:ff:f4:1c:f9:
d4:23:e6:79:ef:61:82:f3:94:bb:9d:fa:9b:b2:ef:
bf:d2:13:00:b9:3b:35:b5:3e:14:18:2d:23:de:98:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9B:44:AF:97:C4:DB:DF:BE:46:72:79:81:21:A7:02:25:7E:39:F7
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:28:5f:2b:2b:30:9a:bc:d4:49:c4:93:34:e2:58:bd:f6:74:
e5:7e:7f:0e:d2:d3:b5:13:97:5c:03:62:6a:cb:d5:d0:16:36:
26:00:54:81:2f:4d:8b:71:32:b4:d2:3d:1f:7f:8e:dc:bc:0c:
dc:8f:e3:5b:20:9e:2d:c1:ac:f7:43:27:56:a8:2c:2b:b8:32:
b8:e3:02:5a:50:af:ad:57:90:28:55:e0:f2:11:4c:af:8f:2e:
46:e1:ca:f9:67:fe:5e:85:36:fb:6e:0e:e4:2f:fa:77:fc:08:
9c:1f:6b:5f:a6:68:f6:0a:cd:77:a3:0c:10:c6:d7:8b:d6:a8:
d6:f8:dd:ac:36:ee:48:a9:f9:a0:bb:68:24:d2:14:1d:b7:24:
1c:bc:1d:f1:13:31:b0:43:ed:17:45:9c:5e:9e:08:2e:f7:28:
33:dc:25:fe:b2:c8:8e:b3:01:20:c9:e3:f0:ab:1c:0e:0e:3c:
c2:d2:9b:46:b8:e1:5c:fd:7d:98:f6:1d:c0:7f:84:43:ba:21:
53:53:ea:af:c6:9c:c1:d7:d8:94:84:44:0d:13:0e:9f:c6:5a:
de:33:a8:87:75:16:35:f9:bb:20:45:2c:a4:1e:18:8e:5c:ca:
d1:57:67:f2:0d:a7:f1:5f:8b:36:99:f0:39:a1:11:57:36:1e:
e5:0c:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:08 2026 by rpki-client