Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
File: b1GlChfEHhkEHD-xCwqDkielyQU.mft (raw, json)
Hash identifier: iHhO3GqaV2WFdC0uXfpJTtV7XKJHZ9qsqUxjkLByczA=
Subject key identifier: 76:B3:ED:AA:0D:A3:67:B8:BE:BF:2C:F9:07:9A:3B:76:0B:6E:19:FB
Authority key identifier: 6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
Certificate issuer: /CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Certificate serial: 019D25BA075D1FDFFDA5C333F2AE5B1DCF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
Manifest number: 05
Signing time: Wed 25 Mar 2026 16:00:41 +0000
Manifest this update: Wed 25 Mar 2026 16:00:41 +0000
Manifest next update: Thu 26 Mar 2026 16:00:41 +0000
Files and hashes: 1: PZMuJ8QpgBXhv1xbGqZzJ29BgDQ.roa (hash: jrIRAMtDwbYUDnGzpj0BHU287oxSgfwbWoyH7EMZ7jI=)
2: b1GlChfEHhkEHD-xCwqDkielyQU.crl (hash: qv1xUvq38Qp3lHizFLFq7gXBttaZTa/wVOVSzAVOVzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:07:5d:1f:df:fd:a5:c3:33:f2:ae:5b:1d:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f51a50a17c41e19041c3fb10b0a839227a5c905
Validity
Not Before: Mar 25 16:00:41 2026 GMT
Not After : Mar 26 16:00:41 2026 GMT
Subject: CN=76b3edaa0da367b8bebf2cf9079a3b760b6e19fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:8b:38:44:65:0d:5a:01:64:ff:13:99:b5:
46:91:a7:8d:e2:f7:db:9b:f0:be:28:fd:f7:62:86:
9a:31:f2:1b:90:9b:1c:ec:b5:ae:cb:59:87:d6:3c:
37:b7:93:fe:36:f0:ec:57:35:ed:c4:ad:10:8f:71:
aa:0e:bf:19:7c:ef:5d:d6:14:b6:46:66:c4:cb:bf:
6c:5b:6a:fb:c9:d8:61:ca:9d:31:05:43:41:86:a3:
79:ed:ee:7b:ab:e5:43:e2:56:b8:d7:7c:53:86:1a:
3f:6c:ae:0e:f7:f0:fa:80:5a:04:4f:9f:0c:87:c0:
4b:e2:d9:bb:0c:31:7a:c7:ef:04:34:52:d7:8b:cd:
a1:a1:93:ff:b2:dc:97:0f:40:65:9d:a1:a2:ae:05:
97:ec:69:7b:98:16:4d:aa:e8:7f:f5:12:70:f5:ed:
32:6f:d6:49:47:26:a5:1e:b1:64:f2:ff:8f:71:dc:
8c:c5:72:0a:30:cf:29:aa:40:bb:ae:df:2d:dd:7d:
77:86:52:8f:e6:78:65:e5:ba:19:c3:a5:6e:98:12:
30:4b:ea:14:8e:15:56:14:cc:ee:d9:a7:e7:c5:27:
3c:6a:36:c6:23:85:5f:39:45:d4:05:7a:1b:17:52:
4c:b7:59:12:0f:48:43:61:2a:1c:fb:a8:94:64:91:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:ED:AA:0D:A3:67:B8:BE:BF:2C:F9:07:9A:3B:76:0B:6E:19:FB
X509v3 Authority Key Identifier:
keyid:6F:51:A5:0A:17:C4:1E:19:04:1C:3F:B1:0B:0A:83:92:27:A5:C9:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1GlChfEHhkEHD-xCwqDkielyQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/16153d-fe58-4625-ba6e-092b9fb6a541/1/b1GlChfEHhkEHD-xCwqDkielyQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fa:c5:64:8e:32:e0:20:e0:f8:39:92:f0:17:4e:36:a6:d0:
90:e4:f7:e0:ab:7b:33:fd:ed:f7:9d:dd:3e:89:18:88:78:16:
07:e5:3d:cd:3b:ca:39:b9:b5:1f:80:eb:99:23:82:54:f5:54:
45:f8:c8:95:89:f4:b2:89:bf:71:2d:1d:e7:49:60:d8:d5:f2:
fd:68:0a:4e:b3:9a:49:e1:4b:59:0e:14:12:02:60:cd:db:df:
9b:07:1e:cd:25:34:5b:a4:8a:f1:81:40:62:c1:42:da:e4:a2:
62:de:31:f4:54:9b:89:03:cf:8b:03:17:9d:48:52:4a:9d:1f:
1e:f9:57:bd:e7:f6:cf:87:9a:23:30:36:24:1f:51:7b:e4:e3:
a3:f9:b1:d3:ce:ec:9d:db:21:a2:6f:c3:cd:ae:53:bd:25:00:
33:40:69:96:42:18:43:d3:ac:e7:e4:d6:8d:a4:98:43:af:e1:
01:4e:19:dc:d8:e5:06:58:d9:df:d0:6b:4d:e6:12:04:2b:01:
07:98:4b:60:cf:45:56:01:b6:b2:7d:3f:75:90:95:c6:66:e8:
19:9e:7e:53:6a:ff:f1:c4:33:0b:bb:e7:e9:7c:d9:f8:0e:32:
3b:4e:42:cb:29:9b:05:e8:44:22:ef:de:a5:f9:c3:db:1a:50:
cd:e3:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:20 2026 by rpki-client