Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: udYrlEbHBsPijd0CAQ+8BlCLsZlrpscIwWZibB5XRCI=
Subject key identifier: 39:6B:2E:12:FB:74:35:06:7D:61:D4:E0:3A:97:B6:13:CA:FB:17:8B
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 019D28F2C2894A8E7B7F0E70AA6FA3B5389C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 0A1F
Signing time: Thu 26 Mar 2026 07:01:31 +0000
Manifest this update: Thu 26 Mar 2026 07:01:31 +0000
Manifest next update: Fri 27 Mar 2026 07:01:31 +0000
Files and hashes: 1: 1-oXRSWUITDd07eDSgyzihLvCs0o.roa (hash: 8mm9o8vBcdV71+SfAkdhQvQO3lbM5m+bwU9TRuRs5IM=)
2: 1wP7tKrHU793i9lAANAvF98w4jY.roa (hash: tk+jnzJLSmGPklGJJhOITYrmNwlbyXIF9jo1MJSghJ8=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: ZhvjljfpAdH3KDyN68w1h38L+Ha1Yww4czJPZrCWmpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c2:89:4a:8e:7b:7f:0e:70:aa:6f:a3:b5:38:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Mar 26 07:01:31 2026 GMT
Not After : Mar 27 07:01:31 2026 GMT
Subject: CN=396b2e12fb7435067d61d4e03a97b613cafb178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:df:89:e6:96:f3:11:93:68:3b:2a:58:8a:
39:e3:a4:81:be:1f:35:96:90:51:c5:fc:16:af:7f:
7c:79:34:64:e6:a5:4f:0a:12:32:ef:9f:be:c9:07:
f0:da:73:aa:73:ef:00:bb:ad:b3:5c:09:19:3e:39:
65:62:d6:b2:bc:76:70:cc:75:73:3d:6a:16:c2:bc:
a2:07:70:f0:d5:2c:c1:de:98:f2:57:a4:45:2e:b9:
25:7b:9e:5e:90:f8:25:b4:81:aa:73:75:42:00:ac:
ca:3b:69:1e:d8:c0:bf:ec:9b:13:1f:2e:e2:03:25:
1a:49:a9:6e:4d:ed:c7:53:dc:df:fb:17:75:00:1a:
59:be:d6:45:d8:ae:72:76:ef:82:15:33:91:9c:61:
f2:ae:29:10:25:1c:b5:30:f0:1f:b9:f6:53:f0:3a:
ad:02:50:23:fe:7e:c1:67:c7:ce:0a:e7:88:50:7c:
7f:50:c7:b2:a9:2f:2e:99:90:7c:0a:f4:4d:ea:fd:
03:0e:b6:42:a9:2f:c3:a1:4b:31:bb:a2:d0:eb:8c:
c0:8a:f9:ce:ac:d3:2c:cf:6e:ef:21:d8:1f:f8:6a:
b3:69:63:3e:64:a6:63:6d:f7:de:2f:c9:97:0e:d0:
cc:ec:3f:9e:40:68:a0:ed:de:49:7b:33:08:41:99:
fc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6B:2E:12:FB:74:35:06:7D:61:D4:E0:3A:97:B6:13:CA:FB:17:8B
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fa:3a:a3:77:cb:63:88:95:17:63:8b:d5:f3:f5:67:05:e5:
29:47:4a:da:fc:30:ee:67:7c:13:3e:28:07:be:d4:4d:61:11:
6b:67:e2:50:7b:62:0e:12:25:e1:b0:ab:af:7e:80:75:43:fd:
fb:f3:dd:65:54:93:77:d3:d2:f8:5a:e1:57:02:74:ea:31:63:
1a:e7:95:50:69:98:34:da:23:c9:c6:14:b7:dd:1a:ff:59:98:
05:f0:37:54:32:7e:09:64:48:ca:4f:79:dc:d9:35:fb:8f:e9:
d2:c9:15:f3:6d:78:66:b3:30:df:81:c1:92:bc:87:f3:8a:55:
9c:00:d3:83:50:2b:aa:ee:c8:d6:95:9b:2b:af:53:8a:95:40:
83:ac:a8:d0:45:9f:9a:5a:04:c8:1b:5f:3b:1d:ae:d7:bc:8e:
2d:c1:c4:ee:ca:f3:bc:68:8e:52:af:be:08:9d:e8:3e:b2:01:
f4:c5:ac:40:ca:f6:27:e3:ac:a8:66:2c:2f:0f:8d:3e:2b:b7:
b2:74:a4:ed:e0:8f:28:e0:17:0d:81:e4:4d:57:64:82:25:a1:
2c:23:ba:36:92:64:13:84:c9:b6:58:f5:9b:fe:e7:f0:b3:16:
38:87:76:f6:9c:f3:52:23:92:31:db:d3:69:5c:cf:08:8f:68:
1a:23:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:07 2026 by rpki-client