Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier: 9r3bhZlFkObzrIgYqyAn46Sg89xwBGXQ3RuOKvZk7bI=
Subject key identifier: ED:A3:90:18:F3:16:AB:67:48:7D:FC:43:5B:49:09:47:34:87:B9:3B
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial: 019D330783ED1A47AEFBA138352A37FA3513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number: 0902
Signing time: Sat 28 Mar 2026 06:00:23 +0000
Manifest this update: Sat 28 Mar 2026 06:00:23 +0000
Manifest next update: Sun 29 Mar 2026 06:00:23 +0000
Files and hashes: 1: 4rvg74R2gZlKQSt9MtPUhs19Sxs.roa (hash: aa4t3U7R1vbR/QCIG7/Vzi9UpwOLBuhEx3X56aBs6+Y=)
2: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: 24Mq52JBdMOrGEQgkhwejt4X7Hd6mtwsCFCgSwePuvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:83:ed:1a:47:ae:fb:a1:38:35:2a:37:fa:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Validity
Not Before: Mar 28 06:00:23 2026 GMT
Not After : Mar 29 06:00:23 2026 GMT
Subject: CN=eda39018f316ab67487dfc435b4909473487b93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:9e:5d:c0:89:3f:ff:16:cb:5d:09:8c:06:
39:61:6c:f8:cc:8c:15:c1:39:13:b9:42:26:59:88:
2a:99:86:ed:7d:0a:1b:e1:e9:cf:1f:3b:36:62:6f:
7b:1e:fc:53:94:e5:de:af:ab:bd:2b:85:0a:61:df:
0a:af:3a:bb:85:27:5b:8b:ac:c3:a7:9e:1b:d4:58:
bb:45:b4:c4:6f:53:ff:e1:e5:22:fc:d8:41:9d:38:
b6:4b:8d:b6:08:7c:39:5e:ee:90:41:1f:fa:01:d2:
c2:d8:09:90:60:8d:5e:1b:88:63:af:5d:6e:ba:86:
1d:67:90:1a:07:d9:66:82:b4:3c:59:db:9b:03:1c:
cc:83:f1:19:06:ab:49:db:1b:0a:d3:c3:24:75:38:
aa:a6:dd:48:c4:c9:3c:b4:80:e0:f2:6f:e0:87:a2:
bd:b4:58:10:3e:8a:1d:34:1c:6e:32:a1:a6:a7:e9:
01:8c:36:39:48:e7:67:ef:fe:90:f4:17:a2:d7:8c:
66:a7:b8:9f:e8:65:c0:4f:d9:c9:cc:15:f9:44:3a:
0c:85:de:c2:78:6e:f0:e6:06:5c:b7:b0:9d:4c:03:
bd:30:a0:ed:97:94:80:e9:01:17:9a:26:37:67:61:
0f:bd:c5:0b:9e:b0:5c:3e:44:ce:96:00:bd:66:48:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:90:18:F3:16:AB:67:48:7D:FC:43:5B:49:09:47:34:87:B9:3B
X509v3 Authority Key Identifier:
keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3c:00:07:ab:63:97:cc:8a:bb:e1:04:36:5a:ef:f8:32:72:
a9:19:37:55:da:f5:4e:c0:ef:8e:64:0f:94:17:fb:5e:43:18:
62:69:90:7a:3d:c1:68:12:80:d9:14:7a:76:48:5a:1f:de:43:
fd:44:54:b4:8f:a6:3b:9d:89:6b:66:2f:16:1b:80:87:f1:6b:
28:4f:57:69:41:98:5c:e6:1f:c2:32:05:d0:fe:24:eb:75:54:
2b:54:f1:32:50:e2:75:62:5e:18:6e:88:cc:a7:e9:cc:22:4a:
c7:22:93:19:c4:bc:40:af:75:39:89:ff:2b:7e:9b:f7:49:76:
95:3d:76:0f:07:33:29:c0:61:45:8e:5f:a2:49:d9:6f:cf:7f:
32:4a:bd:52:cf:9b:c2:15:81:92:30:64:14:44:23:29:e2:48:
0d:2e:a1:5d:b0:8c:9b:c4:bb:f5:41:00:5b:0b:03:7a:0f:68:
12:29:b5:10:76:31:4d:7a:17:c9:5d:ce:3e:50:2c:a4:df:f2:
56:86:72:35:05:f7:19:4b:78:35:99:ee:aa:4b:24:99:5f:a0:
ac:ab:f7:7e:ad:73:ee:c5:a2:cc:1f:68:63:88:2d:d1:28:ec:
63:aa:3c:47:2a:90:0c:ed:f6:01:a3:1d:95:56:e7:d8:15:34:
e4:48:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:06 2026 by rpki-client