Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: btgiWT3zM0V/ZOLm1TqOVS/2dv2S7YnBdq0d1T17tqw=
Subject key identifier: A4:A2:DE:BB:A1:6A:69:F4:75:4D:50:85:23:27:50:F5:BB:E0:34:1E
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019D2816E6226D4786F40CE478C6FB856C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 08FA
Signing time: Thu 26 Mar 2026 03:01:22 +0000
Manifest this update: Thu 26 Mar 2026 03:01:22 +0000
Manifest next update: Fri 27 Mar 2026 03:01:22 +0000
Files and hashes: 1: KYwLTeDRPbWZ7QruokVrRABez8U.roa (hash: K9pjcDveVnPL9nHRQKLenhV/fjpAku11BgS2kkrYnJc=)
2: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: ebxNs1Q7ajFqTVAqQ0dtquOXXoP9PjeWqjy61XtCUPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e6:22:6d:47:86:f4:0c:e4:78:c6:fb:85:6c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Mar 26 03:01:22 2026 GMT
Not After : Mar 27 03:01:22 2026 GMT
Subject: CN=a4a2debba16a69f4754d5085232750f5bbe0341e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0f:e5:bd:35:b1:38:eb:4c:30:16:93:0a:f5:
47:31:2d:94:72:88:d9:9d:88:68:2c:8e:af:07:7b:
5d:7d:cc:c8:65:07:41:14:6d:b2:3e:3e:29:a6:26:
8c:82:88:07:d6:57:d6:93:da:f3:7c:7c:89:ab:39:
dc:71:50:68:02:28:22:65:32:b1:2e:93:f4:3e:85:
d0:cc:23:81:d3:10:0f:7d:cf:7a:58:36:a9:4b:a6:
07:72:62:a0:08:dc:ac:84:20:ca:05:3a:eb:2a:68:
20:af:aa:49:a1:35:cc:fc:76:83:cf:59:c9:d1:2a:
2e:b1:81:86:bd:0a:cb:4c:da:50:76:e1:5a:44:fd:
a6:19:24:45:37:b3:71:e6:f1:71:d6:8f:43:43:d2:
a4:9a:6f:e1:b2:e2:57:8c:89:f6:b5:93:27:08:08:
32:b7:3f:85:ea:53:8a:27:e0:11:ee:67:73:fc:64:
b2:38:15:48:c1:57:f2:ad:66:85:a2:6e:17:4d:c0:
7c:04:47:ff:f9:a9:70:29:4f:5b:99:b8:39:c8:aa:
2a:51:24:b3:61:de:12:fb:3b:95:fc:f0:c5:e9:f2:
11:a5:91:28:6f:87:b1:bb:3b:aa:19:09:0a:f1:a9:
b9:49:b0:5e:e5:48:46:e9:d4:ab:85:ef:91:26:d5:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A2:DE:BB:A1:6A:69:F4:75:4D:50:85:23:27:50:F5:BB:E0:34:1E
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:90:af:b3:17:48:3c:81:93:0e:74:3b:04:66:d8:5d:7d:16:
30:dd:97:bc:fa:f6:8b:fd:3f:e6:e6:58:62:da:90:b6:bc:bc:
9b:ec:29:16:64:b8:7d:e8:f5:c7:2e:dd:b0:01:ab:9e:10:cc:
71:cb:e1:23:96:b9:27:dc:85:8c:a7:53:94:d5:fd:43:5c:6d:
6c:58:a6:81:34:8f:df:f6:2b:e3:fc:ce:67:66:8b:61:4b:46:
7a:c9:2f:70:b3:83:65:ab:bd:4a:06:59:8c:80:33:f9:ad:30:
b6:4e:52:1c:dc:6c:5b:6d:92:8a:1c:0e:37:e4:f8:bf:92:c0:
08:58:b3:58:1b:56:fe:bc:a1:44:2b:85:24:48:45:33:05:bd:
f1:eb:12:04:52:32:1d:87:a8:b2:d2:ed:77:c8:23:95:b3:ec:
7d:16:a7:53:09:26:44:71:7a:03:6b:50:de:fc:9b:5a:2c:65:
fa:71:6b:31:7f:be:a3:7e:f6:dd:30:b0:89:07:6a:f0:fe:35:
15:9e:20:1a:95:99:33:b8:78:3d:41:87:55:d5:a8:00:24:47:
d1:73:b9:d7:bb:1b:b1:dd:d3:d5:80:9d:ab:10:57:fd:e9:27:
c9:68:f5:6a:66:35:c2:96:3c:9d:66:bf:4a:35:81:78:2c:52:
10:48:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:55 2026 by rpki-client