Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
File: bQmekI59iHniTR7eCdgSz0at4sw.mft (raw, json)
Hash identifier: ejEGyqsnQ89Het3XMVIyKSWJlEh72MMbAAVH4y8/H4Q=
Subject key identifier: A7:3B:E3:6D:B4:7A:1F:D8:A3:06:6C:19:94:26:60:2A:7D:FB:DD:00
Authority key identifier: 6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
Certificate issuer: /CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Certificate serial: 019D277276FAB28DC8DC7A9EBFAA81116E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
Manifest number: 0782
Signing time: Thu 26 Mar 2026 00:01:46 +0000
Manifest this update: Thu 26 Mar 2026 00:01:46 +0000
Manifest next update: Fri 27 Mar 2026 00:01:46 +0000
Files and hashes: 1: bQmekI59iHniTR7eCdgSz0at4sw.crl (hash: KGIKPbmM1dG9Vtw2HZ83WHXAiCw6Kz+HX1WadCmA5Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:76:fa:b2:8d:c8:dc:7a:9e:bf:aa:81:11:6e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Validity
Not Before: Mar 26 00:01:46 2026 GMT
Not After : Mar 27 00:01:46 2026 GMT
Subject: CN=a73be36db47a1fd8a3066c199426602a7dfbdd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0b:92:d2:a5:b8:8e:43:71:3c:06:5d:7a:07:
e5:f8:e6:74:e1:00:82:b1:4b:a1:1b:54:7c:57:62:
73:28:66:08:fb:02:bb:f6:7d:25:0d:e9:2e:7c:17:
9a:f4:11:2b:26:88:b1:31:93:e3:5b:7a:6b:a6:08:
78:36:90:e4:69:6d:a7:03:02:fe:99:37:e7:64:9f:
41:dd:78:51:7f:fc:ca:fa:e9:3b:8d:d0:c6:33:07:
7d:5f:2a:20:05:0e:d7:74:2d:c9:2b:e9:4e:11:28:
76:52:a9:78:e4:b5:69:56:af:ef:03:5e:4d:71:0f:
6e:ed:e1:e9:be:c9:9a:63:6e:3c:97:04:ad:19:12:
19:b1:98:04:c0:95:f3:0b:1c:1a:f5:a5:9c:69:8f:
cc:19:86:09:5e:9c:1a:f9:aa:3e:95:f0:55:4f:aa:
ff:5e:3d:12:60:db:8b:1f:d5:8c:45:c0:bb:33:de:
24:be:b6:8d:95:72:1b:b3:4a:75:b6:a1:2d:d3:2e:
fd:69:03:48:07:87:a7:7e:f9:7b:5c:6f:c3:d0:0e:
a7:05:cb:18:78:04:69:52:40:ca:d8:18:9c:d1:f2:
ca:2f:d6:c2:4d:d3:0c:2e:cc:95:43:6f:61:96:77:
96:8e:cb:97:cb:79:88:12:f6:14:90:4c:3c:46:d8:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:E3:6D:B4:7A:1F:D8:A3:06:6C:19:94:26:60:2A:7D:FB:DD:00
X509v3 Authority Key Identifier:
keyid:6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:9a:45:6c:3f:a5:72:56:17:22:c7:67:cb:d8:0b:a4:34:63:
81:a4:dd:dc:af:d8:78:13:a5:1f:0a:ca:f9:ec:59:85:0a:63:
78:7f:a6:a5:38:d7:a1:60:9d:f6:27:41:50:74:2e:fa:ed:49:
46:59:7c:a9:5f:22:03:55:88:d8:f7:7d:68:4d:db:07:6a:db:
9b:2c:09:64:05:6a:14:f9:f7:67:1a:08:47:0e:74:be:0c:23:
f7:fa:64:07:8a:c6:63:67:a2:9f:5b:6e:b1:5a:1e:3a:56:f6:
97:af:05:1a:0b:fa:ce:64:4f:4c:0f:e1:33:72:28:86:94:bb:
13:07:ab:05:f4:7d:39:0c:6f:da:72:c0:84:80:44:cf:2c:e8:
0d:eb:9b:0f:ff:ac:3d:29:7a:97:23:a7:e9:2a:4e:83:fc:9e:
c0:f0:c0:a6:18:85:7b:e5:3f:e0:8b:0a:ee:a2:45:70:d1:f4:
28:6c:b3:db:e3:3e:86:67:4c:32:3d:29:b6:d1:af:ee:5b:84:
a6:8c:55:40:df:cc:54:eb:7e:13:20:9b:df:32:a6:97:a7:68:
5c:3a:e5:e0:ce:aa:74:5f:9e:7d:53:ae:26:f7:81:25:41:83:
e5:d9:45:7e:12:27:4e:7e:16:1d:8c:d1:24:38:ee:52:a9:20:
eb:f0:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:02 2026 by rpki-client