Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
File: bacdwHnJ2MLSAprWQOejv5f03O0.mft (raw, json)
Hash identifier: WTkvh5gNf8CFR6JXJsyHL8f++8lmYXH25yOrvA5J5MQ=
Subject key identifier: 23:38:97:8C:FA:54:02:2C:4C:61:7A:13:94:D3:15:55:8A:BC:9E:0C
Authority key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
Certificate issuer: /CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Certificate serial: 019D265ECBCEE4893E5F7D98FD6CFB5A9FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
Manifest number: D9
Signing time: Wed 25 Mar 2026 19:00:39 +0000
Manifest this update: Wed 25 Mar 2026 19:00:39 +0000
Manifest next update: Thu 26 Mar 2026 19:00:39 +0000
Files and hashes: 1: bacdwHnJ2MLSAprWQOejv5f03O0.crl (hash: jhl2LJs65MiWHvLkGlYGHuqV0EBGCqOc1VCrgcRmz1I=)
2: m_JOw_BMf-g5adkXcQ6dxPM0VUs.asa (hash: CNlwVMNpgukBKhCpFpqc+T+gnYp6AeSXdG0LEiF4vbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:cb:ce:e4:89:3e:5f:7d:98:fd:6c:fb:5a:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced
Validity
Not Before: Mar 25 19:00:39 2026 GMT
Not After : Mar 26 19:00:39 2026 GMT
Subject: CN=2338978cfa54022c4c617a1394d315558abc9e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:7f:63:8c:e2:c7:e5:83:79:01:1b:fb:e5:
59:6e:6e:d7:30:b2:c8:7c:2d:d1:c0:ea:41:3f:95:
bb:fe:80:bf:ae:07:4f:2e:14:68:6b:29:c1:99:41:
0e:8d:76:7a:f3:d6:58:8f:11:8f:17:cc:0e:76:1b:
f9:0f:5c:5b:df:20:9d:de:6b:14:d2:53:7b:1e:6a:
2a:60:db:be:69:34:50:3e:55:32:e5:94:c5:41:63:
27:44:92:fb:cc:d0:bb:b3:db:df:70:30:40:0d:52:
6c:17:7a:7d:0b:91:f4:39:af:b2:ed:9a:82:d7:9e:
6b:a0:d6:25:4c:71:31:0b:c1:72:d8:42:80:a2:96:
f9:03:80:e1:5a:4b:b8:75:71:fe:97:70:73:67:e7:
e5:4d:5e:32:f7:0d:1e:92:a4:7f:44:9a:17:51:aa:
37:75:3b:c6:2e:b7:2a:31:f2:61:41:7c:c0:46:03:
65:3e:c9:71:10:df:54:b8:2c:49:87:6e:94:8e:db:
ad:c7:b8:58:34:5c:f9:16:3a:b9:6a:39:2c:9e:ce:
e0:f2:33:39:77:89:d7:b0:9d:17:fa:6b:39:6c:df:
18:ed:78:73:ff:92:bb:d4:82:41:d5:c2:61:79:07:
42:36:6e:b2:34:e0:01:a8:61:c2:23:c7:5b:56:05:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:38:97:8C:FA:54:02:2C:4C:61:7A:13:94:D3:15:55:8A:BC:9E:0C
X509v3 Authority Key Identifier:
keyid:6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:72:3e:2a:64:d3:53:80:78:6c:9b:4c:4a:f8:b7:a4:32:a5:
98:8a:8e:f2:48:3e:06:4c:97:08:6c:f3:d6:fa:3e:3c:dd:3f:
e9:c1:cc:e9:b3:0d:10:fb:72:65:91:77:b5:93:6a:35:6d:b6:
0e:32:88:ad:d1:16:43:e4:03:e9:b0:d6:95:a7:70:62:8e:e2:
15:f7:f9:fe:44:4a:8a:7d:e1:e4:f6:dd:5e:75:ee:6e:15:41:
73:15:7c:34:ae:4b:3a:c2:62:9c:48:f4:b8:25:35:35:b2:35:
6e:3e:42:74:f4:61:41:79:78:c7:35:f6:b6:02:79:5c:2a:fa:
a0:a0:bd:e9:5b:d5:b2:49:dc:b6:65:01:a9:b1:35:ce:f5:ea:
db:7d:1d:bd:69:c4:2d:cd:76:d3:ec:7d:23:c1:ef:64:cc:7c:
34:f2:20:30:b3:0e:1a:1d:09:9e:e7:86:ae:26:68:be:a5:6d:
93:ea:15:34:e2:81:75:7c:2b:0e:da:57:3f:70:a9:3e:d0:3c:
24:bd:91:c5:22:83:80:8a:0f:7d:b0:7a:bd:a7:85:fe:b4:f8:
f0:aa:28:a5:3b:11:03:26:c6:55:ca:69:4f:3f:cf:cf:18:b8:
7e:68:18:8e:a1:2a:66:26:ea:f3:e4:ca:bb:3e:7d:39:a2:64:
cb:a1:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:59 2026 by rpki-client