Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: uQE88ADfgcgcdP+PJQPvgWazeQ5gXQKC/JZ7Oeg14L8=
Subject key identifier: FE:2C:D5:1F:21:5C:3A:6B:BF:01:D5:A6:C0:5A:A1:43:5D:9C:AD:F1
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 019D27DFEB21012135AFBEFF4CCFA88C3B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 12C2
Signing time: Thu 26 Mar 2026 02:01:19 +0000
Manifest this update: Thu 26 Mar 2026 02:01:19 +0000
Manifest next update: Fri 27 Mar 2026 02:01:19 +0000
Files and hashes: 1: pBZly4FM6dBwlJDuWkuLuvUQhJg.roa (hash: o71HDV8s+9P3IJ7RipmOqIZNCQQ65Mxlc2gRRdwJM+c=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: TFLBu0eXTVfo0ztIg1ktQ7fT7ilzU+Hkkt4gpqPxpSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:eb:21:01:21:35:af:be:ff:4c:cf:a8:8c:3b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Mar 26 02:01:19 2026 GMT
Not After : Mar 27 02:01:19 2026 GMT
Subject: CN=fe2cd51f215c3a6bbf01d5a6c05aa1435d9cadf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:47:da:da:9d:76:f6:9c:cd:da:f8:54:1f:
d6:f8:af:8d:52:87:2b:02:f4:8d:49:58:9f:b4:8a:
ca:77:c1:a1:25:41:03:92:03:c3:d6:76:6b:e3:58:
03:bd:e5:a9:d2:c1:ed:83:5b:e6:b0:1c:69:8b:48:
97:ec:70:87:a8:95:1a:e6:5c:87:25:86:d2:bf:69:
56:60:1c:1b:40:e8:1f:f2:3a:81:03:91:a5:c8:c4:
06:b3:45:9a:c3:4b:b4:de:5a:d2:a1:d7:5f:f7:a1:
c1:ea:2d:94:af:14:10:ab:d8:1c:e7:ea:55:09:4d:
56:31:08:0d:98:70:a4:75:d5:1d:f0:28:f3:84:e8:
5d:21:9a:8c:14:1a:49:1d:c6:e4:ac:48:9c:43:1d:
08:9c:b9:dc:3a:51:3a:af:e8:f1:d2:69:e3:84:83:
53:fe:7b:79:c7:82:43:69:f8:b9:de:79:3f:24:44:
3e:06:39:63:db:f0:a0:b7:29:a9:21:2d:27:f0:5c:
42:8b:70:0f:a3:5b:e7:44:1f:91:8c:c8:72:d1:1c:
14:b3:c4:4f:e9:59:92:91:c9:1d:e1:aa:1d:10:cf:
9f:84:3d:ac:82:4f:f3:59:47:a6:c0:27:be:d3:2d:
05:cb:8d:b5:a7:65:a8:13:59:ae:0e:df:43:6b:aa:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:D5:1F:21:5C:3A:6B:BF:01:D5:A6:C0:5A:A1:43:5D:9C:AD:F1
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:94:ca:64:e0:3c:e0:9a:69:fc:b5:b0:44:79:0b:8a:2f:
b7:e6:96:de:69:f6:de:4c:5f:18:40:23:7f:cb:c1:b6:f2:a4:
aa:60:07:0e:8d:65:b4:be:97:cf:7c:a1:a9:89:a3:b1:83:98:
e1:17:c3:ee:36:f5:65:6e:f8:2f:61:f5:b6:1c:88:b1:88:3e:
e4:b7:8b:bb:d1:66:92:71:15:07:e9:c4:a2:47:5c:98:21:68:
28:21:55:9c:47:e4:41:69:09:6f:2e:30:3b:52:9f:fa:c6:93:
1e:21:ef:fb:f4:85:5c:e4:58:bc:10:00:fb:ab:8c:40:18:67:
16:ff:bb:ef:d1:dd:e4:83:5b:53:3f:c0:12:da:35:be:fb:2e:
89:4a:97:2b:05:37:2d:89:f3:ae:67:2c:2e:85:31:97:f6:cd:
7a:58:f5:9c:2c:3c:ab:9a:60:be:08:c8:db:9c:a5:32:99:87:
7d:5d:20:c5:a6:84:0d:f3:ab:96:c2:cb:9c:54:42:56:71:51:
ac:9f:b4:d9:14:94:80:7f:9a:f2:03:68:03:92:73:20:7d:a3:
2f:84:c5:19:32:30:eb:0b:b6:de:26:ff:74:3f:0c:74:98:7a:
0c:1e:dd:f5:7c:4b:60:8e:9b:3d:11:24:1d:17:b9:d5:f2:bd:
c6:84:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:59 2026 by rpki-client