Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
File: bXt5YErx85CPSBeVZiY1Pub_wfQ.mft (raw, json)
Hash identifier: o4jf/pUYCpcPdYftv4FZJXxEc2zK6DtXSKkc37IueAE=
Subject key identifier: 78:32:3A:8C:A9:92:DE:DC:7B:C1:25:F7:57:AB:2E:ED:C6:C2:3F:82
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 019D2A048A0DB2FA1383CE131177AEAD3F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: MJtCVVy7xxJhXUWGWWZ2lNCGj1k.roa (hash: HdvJHKbNcNPfl/JOSdnPb5pLI2El/VPr+80cW88sPD4=)
2: bXt5YErx85CPSBeVZiY1Pub_wfQ.crl (hash: tiz1/UGFaQYgm9krNc0LInOd8aEZ7uMBUI8pEnSsQQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:8a:0d:b2:fa:13:83:ce:13:11:77:ae:ad:3f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=78323a8ca992dedc7bc125f757ab2eedc6c23f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:0e:b9:6b:a9:28:c4:42:cd:00:7a:ed:b1:
00:78:03:5c:9b:23:aa:3e:97:ae:8a:fb:bb:f3:09:
65:63:a9:5c:f7:d8:23:2a:9b:48:93:45:7a:4e:8e:
87:90:33:af:00:ad:63:8d:c3:84:52:7f:9c:b6:29:
06:62:00:90:65:1c:b6:88:30:3b:fc:85:5f:09:77:
e5:d1:12:3f:77:09:4e:bf:ba:f2:5d:1f:b9:af:78:
59:01:05:d7:3c:9a:9e:4f:42:9d:b8:6d:e8:e8:a5:
97:b7:5c:57:05:4a:1b:a6:d6:7b:20:18:62:7d:7a:
8b:bc:0f:c9:14:29:11:4e:84:e4:2d:6a:a5:2f:01:
de:f0:5a:7d:62:27:ed:d8:a1:ec:6d:a3:b3:34:43:
41:ab:d6:fe:a1:23:94:91:5b:21:3a:1f:f8:1e:c1:
5f:69:0f:59:7a:07:b8:b4:53:d1:26:62:96:36:47:
c1:89:cb:a8:47:97:23:ea:b4:d9:21:14:23:dd:8b:
dd:12:f3:fe:2a:46:a2:4a:4e:72:1e:1f:cb:ed:a5:
da:63:94:1b:a3:16:93:9a:f2:d7:71:38:a8:19:c4:
8e:04:a6:45:5f:5f:35:74:47:cd:eb:76:6b:a5:cc:
94:07:4a:c9:00:ae:bb:93:14:d5:0f:1e:ae:63:ae:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:3A:8C:A9:92:DE:DC:7B:C1:25:F7:57:AB:2E:ED:C6:C2:3F:82
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:bd:bc:5a:47:3b:8c:ac:8f:7c:28:8c:08:33:a5:eb:c4:
22:a6:72:ee:ca:f5:89:28:c1:4f:93:3d:1b:9c:43:c3:df:d7:
ae:43:0e:44:ed:70:87:52:66:27:a5:c3:08:fd:1f:ce:18:9a:
ea:97:49:59:46:c7:44:b9:b5:8b:f2:82:09:3a:02:f0:3d:2c:
63:3a:60:78:e5:fa:bb:83:33:ce:f5:9b:42:e5:77:4a:72:10:
ac:56:6d:ba:4f:22:ba:9f:56:b7:16:a5:7b:ee:b7:b4:80:8a:
9c:e1:b3:dd:8d:c4:46:f9:10:d6:e4:18:7c:01:2e:dc:f5:44:
9d:26:9a:b6:1a:6d:84:2d:a5:60:53:04:79:93:30:55:0f:80:
23:6f:8e:b4:d8:1b:6e:5a:2a:71:24:32:2a:ff:86:0c:d1:f4:
29:57:27:0e:8c:d0:2a:3a:7f:fe:f9:a0:af:d5:ee:9e:6c:79:
46:b9:95:73:0c:f7:cd:37:27:be:15:f4:51:2a:76:9b:6f:f0:
8d:7d:a2:fb:23:c9:ea:d0:3e:e5:db:f3:46:a0:92:88:be:3a:
bb:1e:21:73:a9:29:76:44:55:8a:bf:8d:5f:0a:83:bf:9a:bb:
11:d7:a4:20:87:33:aa:91:d8:fd:03:90:27:be:a9:4f:35:f3:
81:47:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:15 2026 by rpki-client