Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
File: bW812JkKeylMRTlW4OgkLAqssDE.mft (raw, json)
Hash identifier: DpX6O/m5RDswkcbucb57Psr21Xz71w1xEj0WBKXIx4I=
Subject key identifier: 96:00:78:91:2E:06:2A:C0:F6:23:E6:24:AA:5D:1B:CE:7B:9C:2C:E7
Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Certificate serial: 019D26CCC7331985BEF6B52A4D05DF739DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
Manifest number: 0129
Signing time: Wed 25 Mar 2026 21:00:47 +0000
Manifest this update: Wed 25 Mar 2026 21:00:47 +0000
Manifest next update: Thu 26 Mar 2026 21:00:47 +0000
Files and hashes: 1: _NwNsp9b9uhvyyyQcxAfQ3IS8fI.roa (hash: Ttx9R/0zVGUKZuQJ7g+6z7yt6OgTL+9nJFIi7ROKEa0=)
2: bW812JkKeylMRTlW4OgkLAqssDE.crl (hash: VYZzHL5u8yZ7AKyXJjSalwhVBLQHjDXlcrLYrZgFbG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c7:33:19:85:be:f6:b5:2a:4d:05:df:73:9d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031
Validity
Not Before: Mar 25 21:00:47 2026 GMT
Not After : Mar 26 21:00:47 2026 GMT
Subject: CN=960078912e062ac0f623e624aa5d1bce7b9c2ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:2b:eb:b3:4e:3d:4e:31:e3:0e:47:e9:fc:
c5:aa:3a:d1:23:92:37:66:5a:1d:f2:94:5f:42:f3:
05:6d:1c:25:90:54:aa:e1:0c:4e:31:e1:c5:cf:45:
e3:cb:a8:48:2f:f3:b2:7e:a0:22:36:56:5d:53:7d:
db:4d:06:00:d9:0f:4d:73:1f:33:4d:3b:94:39:3d:
18:6e:19:7b:f0:32:a5:94:3e:c1:7c:b2:85:87:2a:
78:6a:ba:36:ab:44:42:f3:46:f2:48:bf:c7:87:39:
7a:71:d5:e6:8f:a2:b9:22:68:68:2c:fa:c8:0e:7f:
9a:d1:41:30:61:bf:cf:76:d6:88:da:3c:0e:1d:2f:
f0:22:25:cf:18:e6:09:30:8e:27:73:c6:8c:7d:fc:
b4:d4:4e:2b:3a:1d:43:46:bc:ed:08:17:01:16:a7:
ed:e4:c3:5e:f1:30:63:65:33:9f:ed:03:98:d5:f7:
0f:27:1f:f6:c0:87:16:85:d1:16:2a:5d:65:88:b8:
7f:f6:ff:b2:52:b1:bc:aa:b7:95:44:71:99:89:2a:
92:b0:0d:21:ac:ef:7e:d3:df:51:09:9a:2b:84:cb:
6d:5c:c8:63:bf:f0:8f:ed:22:e3:f0:33:f3:c7:b1:
40:85:bf:84:e9:a3:20:a5:95:61:be:3f:37:f9:71:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:00:78:91:2E:06:2A:C0:F6:23:E6:24:AA:5D:1B:CE:7B:9C:2C:E7
X509v3 Authority Key Identifier:
keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cc:15:f6:d0:ed:d2:b7:7b:36:4e:05:44:b0:cd:b7:64:8a:
6d:5a:78:01:18:33:b9:83:8d:cc:cf:71:dc:86:c1:05:6d:8b:
4f:bd:56:55:c3:a0:1e:9b:ee:33:e8:0c:bd:0c:28:7c:00:75:
ea:9e:91:95:6b:bf:43:6e:e1:4f:60:82:7a:d0:3e:2e:60:ce:
8f:e1:f2:c7:10:af:86:8d:6c:a8:1e:f7:8f:bd:df:84:16:b4:
d7:a7:d1:51:81:6f:6e:cd:59:0f:18:6a:fd:46:1f:2b:fb:bb:
25:f2:c5:74:1c:bb:c6:f2:a4:b9:8a:36:bd:63:50:1a:fb:2e:
90:57:69:ff:89:ef:29:07:3e:62:d1:f3:05:9c:05:71:94:6d:
da:93:01:43:92:1a:7f:23:0c:a9:9c:36:26:f8:e1:26:b3:3e:
16:36:15:ac:fb:a3:70:a6:14:59:14:5b:48:45:d3:b9:1f:4f:
bf:9f:49:7e:cc:0b:b4:1a:1d:f9:72:e2:c9:69:cf:46:da:52:
d4:0b:fe:90:31:37:aa:48:b8:96:06:97:85:64:1f:86:98:27:
47:95:d1:03:67:ea:20:41:d7:5b:c4:33:a5:a1:65:4e:e2:e2:
16:8b:b3:79:89:cb:9a:6c:1e:e0:43:7f:f4:ed:9f:0b:d9:15:
6a:38:88:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:19:38 2026 by rpki-client