Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier: UThkToLOSAYrknEPQMQP8m+pYAclWvlkw/F1huqyFXI=
Subject key identifier: 0C:2E:2F:C0:F0:0B:80:AE:29:9F:B8:07:89:A3:20:28:FF:AC:2A:D5
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial: 019D25838640261D3C1D28F3D02C04B221A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number: 0A00
Signing time: Wed 25 Mar 2026 15:01:09 +0000
Manifest this update: Wed 25 Mar 2026 15:01:09 +0000
Manifest next update: Thu 26 Mar 2026 15:01:09 +0000
Files and hashes: 1: RNdr2XfKznxYQv64qQ8r-9v8mi8.roa (hash: 8EELTXHUCB2Nv32RBO7+0uGvBkgV+cDWxxUoIS6QShs=)
2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: 0pV2MMgru5yLsxLnLB4WXgd13SputP6W4UmlYw1toV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:86:40:26:1d:3c:1d:28:f3:d0:2c:04:b2:21:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
Validity
Not Before: Mar 25 15:01:09 2026 GMT
Not After : Mar 26 15:01:09 2026 GMT
Subject: CN=0c2e2fc0f00b80ae299fb80789a32028ffac2ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:b0:93:52:26:bb:ef:53:6a:e0:56:e7:51:
30:1e:37:53:5c:9e:64:2c:9e:2f:14:4e:2f:4c:4a:
5d:9b:ce:fa:77:4e:ea:2e:8f:b3:92:4c:44:12:31:
13:0b:db:15:69:7c:ac:1a:ee:c2:8b:8b:f4:fd:31:
27:3a:48:dc:b3:78:26:9c:54:47:fd:c0:84:12:9f:
34:9a:28:d3:77:57:12:ca:00:89:fa:86:48:a3:21:
0a:91:2b:a8:34:e1:8d:c8:ae:50:22:b8:c7:7a:31:
96:97:8e:62:ab:4c:0d:a9:a0:f4:47:aa:7f:22:35:
4c:55:b3:ad:91:fe:fa:36:47:ec:8f:62:8e:f2:24:
80:bb:5c:f7:5f:81:a7:51:2a:1a:46:1c:17:11:5a:
a0:e3:34:7d:7a:15:b7:59:e8:98:4e:52:27:13:80:
c3:e7:62:62:25:84:64:4b:6a:30:b5:42:ef:9a:fe:
aa:f4:23:75:21:08:e4:4e:aa:0c:7b:43:ce:a9:df:
90:80:ac:b5:2e:80:7d:45:cc:ac:76:01:db:37:83:
18:31:f4:29:a8:f5:01:f2:bc:b2:9a:9a:65:af:e6:
4d:72:5e:d0:a0:40:ba:bd:3f:a3:95:bf:1e:70:75:
51:3c:6a:d7:70:61:36:2d:eb:93:ce:62:3c:9d:72:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:2F:C0:F0:0B:80:AE:29:9F:B8:07:89:A3:20:28:FF:AC:2A:D5
X509v3 Authority Key Identifier:
keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5a:03:71:ef:f0:bd:b7:eb:42:b5:36:15:fa:00:df:e8:78:
f4:bb:6e:af:c3:7d:9b:24:2f:54:ed:3d:3d:b9:3f:4c:9a:df:
8e:0a:f6:7f:a2:5c:2f:9d:82:98:93:c8:d9:e1:b3:51:b7:e6:
48:78:c7:e3:bf:73:06:5f:7b:7c:fd:0a:93:b2:97:39:97:32:
1e:a1:96:03:aa:6d:eb:10:e7:e4:0b:74:90:7e:29:2d:19:1d:
5d:26:e5:fa:7b:69:45:be:78:96:e8:d4:0b:00:b3:df:e9:e1:
83:47:ed:7b:02:4a:f0:b4:76:60:6c:7f:02:3b:87:52:45:87:
52:61:b8:ca:06:d6:e1:0b:0e:e1:aa:d9:20:83:e8:2c:a1:2c:
20:51:e3:46:8f:63:21:d5:32:67:7b:23:97:3c:b2:64:ba:47:
a3:28:fc:67:78:e2:a0:fd:39:5e:11:26:24:2c:e4:9f:89:bb:
6b:6f:4e:eb:cc:d6:20:11:49:64:8f:7e:c6:23:a1:ef:81:c2:
ed:d0:2e:a3:9d:c0:46:eb:4b:73:f2:e5:2d:eb:00:06:19:1c:
f8:bd:38:2b:5e:a2:2a:f5:16:d8:97:be:6d:24:cd:8d:6f:bc:
15:a3:42:c1:de:e5:aa:63:06:08:dc:06:d5:a2:14:d6:cd:96:
fd:a4:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:10 2026 by rpki-client