Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: f8pDSydfV1ZqAwi8R0JnuSgfnJ+mftc70wYLSI20Ofc=
Subject key identifier: 07:D2:94:ED:23:84:A4:AD:21:AD:15:8F:DC:0F:B1:6E:71:A1:EE:4D
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 019D28F24FE05E61270F241B3E3F2FCAA212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:01 +0000
Manifest this update: Thu 26 Mar 2026 07:01:01 +0000
Manifest next update: Fri 27 Mar 2026 07:01:01 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: to8Zoyyr7mb1AIYWVs02hxPRiiXkw1les+N5BlIRdHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:4f:e0:5e:61:27:0f:24:1b:3e:3f:2f:ca:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Mar 26 07:01:01 2026 GMT
Not After : Mar 27 07:01:01 2026 GMT
Subject: CN=07d294ed2384a4ad21ad158fdc0fb16e71a1ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:8b:e1:e9:7b:09:ac:d5:1e:ad:ff:45:1c:
01:48:0e:33:ab:14:6a:47:bc:4b:75:a9:f7:5b:a4:
4b:a1:da:81:46:fd:e9:2a:eb:85:41:dd:01:57:0c:
73:90:fd:1d:5a:77:cd:5e:ea:4e:bf:70:18:66:9a:
d6:c9:9f:57:31:9b:fb:83:3a:76:00:0c:54:56:8a:
71:f6:8b:41:d1:87:ea:c5:28:ec:c3:21:24:7f:2b:
d4:75:73:30:b9:9b:ed:ee:43:5c:05:32:ef:37:7b:
16:9c:b7:69:d9:8f:00:99:d7:20:00:86:82:91:50:
ea:96:33:d3:d8:83:38:99:6c:df:5a:dd:6b:61:eb:
9d:d6:09:5c:7b:b6:13:74:b3:fe:c8:ba:b5:70:11:
7c:6b:e3:28:f6:b5:83:60:c0:e4:fc:3d:02:df:e8:
a0:9f:43:a3:9c:9e:38:59:16:bc:4d:7d:88:7e:6e:
cd:68:ba:f0:47:58:2e:19:d6:81:49:99:17:b2:7c:
19:d3:c3:96:e2:37:9a:44:e2:ee:15:74:94:e4:f9:
b4:67:6a:e9:f1:c6:25:46:f4:8a:35:39:a4:6f:49:
f6:a5:89:1e:68:a8:17:7b:89:79:fa:7a:1c:72:1f:
34:6b:a5:ae:a3:60:16:0c:f5:a6:a6:77:5b:22:0c:
13:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:94:ED:23:84:A4:AD:21:AD:15:8F:DC:0F:B1:6E:71:A1:EE:4D
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fb:b4:9a:16:90:57:b7:ed:e0:1c:a7:a7:83:40:e0:86:6b:
fa:77:88:3e:4e:72:5e:20:d3:9d:74:ab:3c:15:e8:09:8a:5b:
97:de:16:dc:66:45:98:88:d3:5c:bd:3c:2b:26:2f:64:33:ee:
0c:ac:8d:83:81:42:05:17:ec:de:d4:d0:15:24:3a:ef:09:b7:
aa:6a:3c:c2:73:32:9f:23:a4:a8:7e:e7:b5:33:64:b6:60:a3:
c9:d3:32:b8:d4:21:58:f6:a2:e4:ec:be:d5:3f:12:e7:ec:1e:
36:2d:bd:6b:b7:1d:c2:72:2c:91:4b:99:c5:f1:f3:36:ce:ec:
1c:b6:90:40:69:d3:9d:8f:7a:42:80:90:b3:9c:d3:fa:a9:c7:
e5:95:7e:15:ec:39:c4:ea:21:83:e8:11:be:2e:ca:61:99:cd:
29:01:76:d6:bc:e1:cf:d9:80:ff:99:9a:c1:a6:01:5f:fb:a9:
7e:b6:cf:6c:2a:7c:48:96:f4:d7:96:92:34:5d:3b:b1:7b:22:
8c:c7:f1:49:4c:63:3a:e8:c1:5d:76:c6:8e:2b:cb:5c:51:3a:
73:12:af:1d:e4:1e:ef:b5:88:30:e6:d0:f7:ac:fa:ad:b1:81:
76:a5:68:0d:2d:5c:f8:1d:26:52:01:5b:40:13:f6:22:94:60:
33:f1:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:30 2026 by rpki-client