Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft
File: bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft (raw, json)
Hash identifier: fkH/awy5EcEhmmCr9VPToz/htrDBc7IyZMVc9U5mlZk=
Subject key identifier: 43:61:7E:A3:94:6E:0A:80:25:9E:84:D9:DC:1F:6E:05:FA:09:F3:C8
Authority key identifier: 6C:0A:FE:B6:F2:4A:D1:27:4A:C2:25:5D:1F:9C:5A:2F:41:35:B7:70
Certificate issuer: /CN=6c0afeb6f24ad1274ac2255d1f9c5a2f4135b770
Certificate serial: 019D28F2848F72D82C150887B576C619ED5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAr-tvJK0SdKwiVdH5xaL0E1t3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft
Manifest number: ED
Signing time: Thu 26 Mar 2026 07:01:15 +0000
Manifest this update: Thu 26 Mar 2026 07:01:15 +0000
Manifest next update: Fri 27 Mar 2026 07:01:15 +0000
Files and hashes: 1: P0WHBH0gpRTm6vJYqBGWGauKjFs.roa (hash: /o5NA6BgivGFlv+dRNyYsszJeWtK7hLgc9YXTsQygw0=)
2: bAr-tvJK0SdKwiVdH5xaL0E1t3A.crl (hash: UHO+dLL6rN/8JpWd99BEb6xYPn1PqgHrWDJSBWBVZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAr-tvJK0SdKwiVdH5xaL0E1t3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:84:8f:72:d8:2c:15:08:87:b5:76:c6:19:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0afeb6f24ad1274ac2255d1f9c5a2f4135b770
Validity
Not Before: Mar 26 07:01:15 2026 GMT
Not After : Mar 27 07:01:15 2026 GMT
Subject: CN=43617ea3946e0a80259e84d9dc1f6e05fa09f3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:34:21:5c:9d:a1:b5:01:7e:2d:94:2a:52:
a3:95:7e:48:03:cd:9c:a4:91:fc:d9:f8:08:01:69:
43:3f:5f:5a:43:40:98:b5:18:7c:f4:63:e5:d7:10:
68:76:c4:1f:c3:2a:38:49:a6:ad:c2:8f:9a:bb:69:
cf:ef:8c:8c:c4:68:3f:04:46:94:9d:10:6b:80:5a:
52:40:37:b0:41:05:e0:be:d2:20:1e:e8:74:07:15:
e6:56:b7:e2:7b:62:59:fb:34:5a:1a:f7:9d:b0:cb:
a9:0e:db:40:2d:c7:56:d4:af:11:62:5c:55:c6:49:
6b:48:dd:42:53:9c:e1:13:18:54:a3:c7:ca:a0:8a:
3a:a3:91:4b:32:bf:38:dc:61:7f:58:c9:e0:4d:d9:
9f:53:fc:6c:4d:fe:01:1a:4d:64:e5:ca:7c:75:ed:
34:e7:71:c4:41:cd:dd:14:c1:fc:05:ed:cf:a8:f1:
af:2b:93:90:a7:45:9c:bc:7a:0a:01:38:c0:07:5c:
0a:61:93:25:86:e6:5c:5f:e0:69:bc:27:87:2d:f4:
2f:c3:d9:4a:63:b6:db:44:c7:15:f3:e8:31:d8:7c:
84:25:62:50:e4:14:32:02:f9:08:2a:bf:75:1c:e0:
e1:79:fa:06:98:e6:88:50:e4:08:2a:75:b3:3e:b9:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:61:7E:A3:94:6E:0A:80:25:9E:84:D9:DC:1F:6E:05:FA:09:F3:C8
X509v3 Authority Key Identifier:
keyid:6C:0A:FE:B6:F2:4A:D1:27:4A:C2:25:5D:1F:9C:5A:2F:41:35:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAr-tvJK0SdKwiVdH5xaL0E1t3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7e:41:61:5b:ad:4f:36:61:e2:e0:43:35:a0:4e:e7:fd:07:
07:36:e0:5b:11:09:4e:fe:16:ce:ec:55:84:c4:d0:61:24:a6:
a2:0e:b4:9e:96:6d:7a:46:1b:7c:30:33:f1:3b:9e:63:5c:15:
52:f1:0c:f3:a4:8d:71:26:f4:b8:15:ee:53:90:ef:20:46:ee:
9f:91:56:1b:df:ae:66:76:ca:d8:98:83:8e:6d:86:c9:11:62:
02:1f:40:da:d1:fb:54:6b:ae:e8:76:59:17:05:e6:71:d0:07:
b9:fc:8c:37:5a:21:3f:e9:0d:49:0e:d9:c9:7d:fd:0c:52:73:
be:2a:00:81:d0:d2:bc:dd:8a:bd:1c:20:13:d1:20:77:64:7b:
28:f7:85:63:d7:79:39:bc:e4:e1:b0:16:9a:b2:f7:4d:78:6a:
f3:a3:3f:64:6f:88:c0:b0:ed:fe:40:12:35:6c:6a:ed:f1:41:
4a:55:ee:ee:d9:22:b3:94:f5:c8:a5:ab:84:bd:63:37:a7:aa:
fe:fe:6a:54:35:b7:a5:b0:bc:eb:4b:d6:39:58:3a:00:90:67:
bd:60:9c:96:cc:ab:d2:96:d9:47:42:99:35:2d:f2:e9:65:e2:
37:13:f4:de:e6:77:c6:bd:b0:03:9c:d5:d0:24:9b:e6:8c:2d:
cd:48:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:57 2026 by rpki-client