Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
File: bOLuhMz1bNwA_CyqWSknna4UiIo.mft (raw, json)
Hash identifier: fR8c1jHZyNBGPhEWWuJ8sgzKo2+t0wgCTiCh8ZcsTAs=
Subject key identifier: 6C:93:9B:09:5E:6C:63:14:6F:EA:1A:A7:77:46:47:E2:C4:37:01:B6
Authority key identifier: 6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
Certificate issuer: /CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Certificate serial: 019D2771CA27C8E9C24FB1CFD294E57EA2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
Manifest number: 13CA
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: bOLuhMz1bNwA_CyqWSknna4UiIo.crl (hash: AhAam2/JiuUyfO1nO47gAnsbFg9RZNXjeDoJyJ8zo5E=)
2: skgCaWxmIa3l2drnsUs1g9IHP6k.roa (hash: 38OQkMAm1X1v8VW5NmpHGjFcQdQR+2I5zzoNHi9K3wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ca:27:c8:e9:c2:4f:b1:cf:d2:94:e5:7e:a2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce2ee84ccf56cdc00fc2caa5929279dae14888a
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=6c939b095e6c63146fea1aa7774647e2c43701b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:c9:b4:1a:98:dc:67:c2:ff:bb:f9:59:36:
d4:1b:cd:13:ff:34:ef:0d:d7:a5:45:96:da:0c:d1:
a7:1f:fc:0e:dc:74:af:4b:cd:23:df:f0:a2:85:0b:
0b:9a:5a:39:88:8d:e6:d4:cf:1d:8c:98:1e:ce:cd:
95:fb:a0:66:82:66:de:fd:ff:d9:e4:57:70:fc:61:
7c:b5:60:af:06:dd:c5:a8:6c:5f:0d:d0:10:e2:84:
34:74:97:5d:63:f5:e3:2e:5c:ca:c4:02:cf:8a:c3:
a4:49:8a:cf:0f:5d:33:f8:7c:e8:cc:c7:cb:3a:fc:
b7:1b:c1:15:2e:75:00:9e:7e:14:87:ef:a4:34:31:
05:72:04:df:a3:dc:08:09:e4:d2:df:61:2d:72:df:
77:71:e9:28:f1:11:16:d9:95:d8:ac:93:43:a7:60:
f7:25:0c:61:f0:3a:95:9b:13:3a:9f:09:09:ae:cf:
da:58:0e:28:a6:12:1e:d6:d3:43:de:78:7e:18:8a:
f3:24:cf:6f:92:9c:3f:33:f7:cf:49:23:27:0f:4b:
03:96:be:7e:f2:02:fb:d1:a2:2f:40:a7:7d:a8:22:
e3:f7:e9:75:fa:78:2c:c3:11:e3:11:16:a9:a7:a7:
05:56:0a:81:7e:c9:05:c9:d9:ab:a7:ec:2d:4e:e2:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:93:9B:09:5E:6C:63:14:6F:EA:1A:A7:77:46:47:E2:C4:37:01:B6
X509v3 Authority Key Identifier:
keyid:6C:E2:EE:84:CC:F5:6C:DC:00:FC:2C:AA:59:29:27:9D:AE:14:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOLuhMz1bNwA_CyqWSknna4UiIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7d6f2f-984d-4961-a63b-495c6f2c5173/1/bOLuhMz1bNwA_CyqWSknna4UiIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d3:4c:69:f4:f4:81:7d:59:2d:0f:bd:3b:2b:75:d5:b8:5e:
9e:f1:b7:a0:7c:c5:db:31:7d:4f:a1:8c:dd:0a:d1:06:44:43:
7f:e8:e2:6d:df:4e:33:fd:8d:f3:6c:94:99:4b:ff:e2:97:3a:
49:4f:62:dd:d7:3d:8a:b8:d3:71:c6:18:60:08:c2:df:b3:e2:
a5:07:86:ab:41:d9:eb:a7:07:5e:33:21:e7:4d:57:30:dd:cd:
5e:40:4e:8f:26:b9:55:37:95:19:cb:8e:f3:71:7c:1f:f5:c8:
82:0b:33:e6:1e:21:8e:55:6c:f9:b8:8f:41:af:ae:ac:4e:ac:
d3:d4:07:de:a3:5d:f2:0d:d7:eb:dc:4f:a6:5d:19:dc:34:73:
10:51:7c:23:1a:e8:3a:0d:21:a6:8f:3d:f4:02:8c:36:b4:79:
66:8f:13:0a:12:51:8f:c2:a5:25:f4:ee:ff:1c:a7:bb:93:4f:
d6:6b:70:85:d4:32:c6:fc:16:5c:47:a3:ce:a8:23:8c:d3:b6:
7b:a5:af:8c:e1:ae:42:00:88:ab:9a:51:fb:95:b6:8c:f6:5d:
4e:6e:83:fb:81:8c:e5:80:b4:3f:45:d6:76:86:68:10:38:c4:
0a:96:dc:4d:05:81:38:c1:b2:f7:37:27:80:15:aa:20:dc:da:
c8:61:e3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:59 2026 by rpki-client