Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: 7x9M1ZpfnMgYBe5mEFXwc2OKQ114xttfoRn7TovwIsM=
Subject key identifier: B6:42:F3:F5:FF:C4:43:B7:85:A2:F9:82:46:FB:19:AA:58:F8:9B:AC
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 019D31BEFE3BE5874916EAE4E770C5786672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 1040
Signing time: Sat 28 Mar 2026 00:01:33 +0000
Manifest this update: Sat 28 Mar 2026 00:01:33 +0000
Manifest next update: Sun 29 Mar 2026 00:01:33 +0000
Files and hashes: 1: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: vT8a/8zuqDch4IFvHJmbfKhNfNcgJJreVlQDAXKtHQA=)
2: uW6MqNVytVrssfUBxC2o5Ci36m0.roa (hash: 0xEUcG7sHwDRILOo98qDKEy+k04HnajY0Lu0XSxmDN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:fe:3b:e5:87:49:16:ea:e4:e7:70:c5:78:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Mar 28 00:01:33 2026 GMT
Not After : Mar 29 00:01:33 2026 GMT
Subject: CN=b642f3f5ffc443b785a2f98246fb19aa58f89bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:5c:3d:71:29:df:2f:27:08:33:8d:b5:cb:
1d:98:f3:99:a9:b9:06:a9:5a:02:ef:fc:d8:70:e6:
9d:a4:3a:62:73:bb:99:b5:23:d7:b5:af:27:be:bb:
24:81:80:11:a5:15:d6:d7:75:17:b4:24:26:ab:c7:
40:cf:58:06:94:ae:c7:48:41:76:5d:6b:ba:f4:da:
54:04:54:90:ce:f4:12:a0:02:58:41:95:e2:77:20:
db:f0:ae:70:a7:09:68:90:e4:76:45:6a:c1:38:d6:
a0:da:ab:51:81:76:0c:30:fe:c3:3e:78:7f:31:9f:
1f:42:c0:4b:ff:cb:12:7c:1a:14:17:51:7b:66:8a:
fe:49:6e:76:13:02:a8:78:60:5f:0c:29:c6:20:30:
92:83:d4:72:ac:44:b3:47:b4:7c:28:40:02:a8:b0:
c7:b3:44:6f:cb:1f:b3:df:96:2a:e6:37:ac:7c:ea:
a5:08:f0:90:01:10:91:de:2e:d2:12:6c:cc:63:a2:
da:d7:76:30:e8:df:b7:b5:97:79:84:3b:3b:be:df:
6d:04:b5:13:b7:74:33:e9:ac:e7:04:4d:76:54:c9:
fe:f4:95:fc:71:2e:af:ed:2b:5a:67:6b:24:5a:3b:
08:cd:92:d0:09:49:b4:a5:eb:be:7e:49:bc:9a:25:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:F3:F5:FF:C4:43:B7:85:A2:F9:82:46:FB:19:AA:58:F8:9B:AC
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3f:cc:78:cb:82:f2:ec:68:b8:67:cd:26:13:45:82:cb:8b:
06:ff:1d:4e:1e:97:59:7c:e3:cf:1d:03:b9:f2:98:99:90:1d:
eb:a8:b7:a0:15:07:ab:32:83:62:59:66:c5:d1:29:6e:0d:72:
03:63:0d:bc:74:65:3c:48:db:e1:c1:66:dc:72:59:b6:b9:ad:
d9:bc:bc:f5:56:fd:b1:5b:87:c1:77:ce:a1:ad:b2:5d:b4:7b:
f8:f9:d7:a6:5b:75:81:74:86:a6:0c:73:ac:93:c5:bb:8a:24:
93:eb:e7:36:96:07:1a:25:31:4b:24:d6:fc:b8:12:80:da:51:
9a:44:d2:80:a0:7d:ef:95:78:c8:23:44:38:a9:99:76:f3:9b:
20:e7:67:76:9d:b4:02:37:ac:6c:11:8d:fa:2c:75:8d:2e:a9:
dc:7a:a3:b5:60:46:a2:01:e7:5d:65:98:24:46:63:a1:93:29:
7d:17:bd:09:c1:57:9e:3b:81:de:ab:a8:b2:1c:fe:53:fe:43:
01:33:8e:cf:7b:36:b3:7a:4e:ab:92:51:0d:57:0c:8d:6c:46:
da:74:87:23:f1:2a:60:62:39:d2:93:45:66:03:3d:61:d4:25:
8d:e3:d9:3e:6c:31:5c:02:15:86:05:e2:0e:e9:98:f7:78:f2:
16:6e:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:22 2026 by rpki-client