Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: K80VAeYmKHqNBjjb08+GqEPn94DmPh59wvjXvJKrPuU=
Subject key identifier: 54:FE:A2:BC:D7:11:C5:32:76:5F:7F:80:2D:92:90:9C:4F:75:75:95
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 019D2695FE8974E3C9B8C4D42E3E3F48C2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 042E
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: TBYaftF03wHO2A22U2/5gK7o8wsAxN5tS0WIqKjV2ng=)
2: 6P5TrCrBMBOzWPp7NfkTPVfGFC0.roa (hash: sSdGu5Xuxs0f7WjvG48kyrMaNHwDQMDfZZyHNGWz4mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fe:89:74:e3:c9:b8:c4:d4:2e:3e:3f:48:c2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=54fea2bcd711c532765f7f802d92909c4f757595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:72:d7:c9:40:3a:0a:66:ce:e9:50:d9:c9:
9f:8c:68:57:c7:a3:0b:9a:f7:53:31:6b:c5:c9:b4:
37:03:46:14:1e:af:41:a4:ee:a8:bf:78:02:59:c2:
ba:2d:eb:97:d0:2f:2c:2f:dd:ae:90:d3:42:25:93:
50:f6:9c:5b:b6:0a:59:c8:eb:aa:1d:fa:b0:35:a2:
f3:1e:bb:0b:27:56:c3:0b:31:97:ea:c0:28:6b:77:
3a:4f:69:33:32:15:8a:ff:96:56:2e:42:dd:b6:9e:
16:49:3a:13:de:b3:9a:d5:84:39:cf:a7:2c:70:68:
31:5b:8f:fb:14:1e:9c:70:9b:b3:15:9f:69:e4:71:
fe:d3:58:d9:35:47:3e:82:c7:88:89:46:6f:ac:86:
80:e6:eb:4c:62:f8:5e:65:7a:43:3c:b1:4a:0e:4d:
dd:42:63:fb:25:74:23:c0:5f:2f:9d:74:f8:a8:e2:
53:68:a9:73:e6:cf:b2:9a:be:58:e7:ca:32:0d:eb:
f3:3b:4e:84:ca:5e:4e:36:f9:ba:2a:8b:d7:1f:c8:
2f:91:11:4d:c9:12:f2:cf:78:df:a8:b3:6c:34:c5:
58:f7:71:86:bb:c0:eb:2c:40:78:d2:ce:33:71:1c:
31:29:4f:35:6d:8a:3f:be:6c:33:9d:d3:f8:ef:94:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:A2:BC:D7:11:C5:32:76:5F:7F:80:2D:92:90:9C:4F:75:75:95
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d3:b8:0f:36:29:7b:44:dd:91:03:c4:d9:6d:44:5e:73:6b:
78:03:af:64:02:1a:c8:23:b3:9e:5f:cf:3a:eb:c9:32:c0:3b:
00:f7:e2:e6:69:0d:b8:44:96:1d:30:56:b6:34:62:c9:ec:ad:
5d:05:8e:72:5f:78:d6:03:95:6a:ba:2c:eb:2c:87:65:6a:a8:
9c:f9:91:ee:c3:f1:e8:7e:c4:56:d2:4c:ab:2c:a0:53:af:75:
1b:11:fa:2e:75:28:af:d7:57:d4:98:dd:e1:d8:66:fd:91:07:
b4:17:e9:7d:9c:fb:91:93:c7:0a:5d:b2:bc:af:e5:5e:b2:e2:
2b:4f:e3:8c:cc:c4:40:16:89:05:ec:61:6b:13:49:70:b3:91:
08:77:d7:60:c5:33:6b:2b:96:ee:bb:f5:d7:8e:05:87:c4:a9:
d6:ab:45:39:87:e6:d4:d6:1a:fc:e5:1e:61:69:fd:9f:41:1c:
20:40:1c:0a:3c:cc:a0:39:3b:89:5d:a4:19:a4:40:b3:49:59:
6f:80:fa:38:f4:f4:5e:a4:66:05:59:69:5f:d4:25:df:b4:ff:
98:63:63:25:ef:c1:5d:ac:63:10:de:63:19:91:29:1e:cb:d2:
f9:cb:dd:97:df:4b:cb:bf:8b:86:81:c2:a2:d2:c6:0c:30:77:
8f:27:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:26 2026 by rpki-client