Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: 5bHCDxh0EJG9YMnm6UMvt9WC9Mqez1x6XWB1UpQObdE=
Subject key identifier: F7:A3:FB:E9:5F:D2:92:94:24:1A:42:EB:F8:FA:84:3B:36:ED:A9:9D
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019D27E0071ACE6924B1870EAA1C55B3C4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 09F5
Signing time: Thu 26 Mar 2026 02:01:26 +0000
Manifest this update: Thu 26 Mar 2026 02:01:26 +0000
Manifest next update: Fri 27 Mar 2026 02:01:26 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: dZMVO9MJ7kzd3MDHGJdcL/0pN3KZCmRw+wPIj8xxfNk=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:07:1a:ce:69:24:b1:87:0e:aa:1c:55:b3:c4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Mar 26 02:01:26 2026 GMT
Not After : Mar 27 02:01:26 2026 GMT
Subject: CN=f7a3fbe95fd29294241a42ebf8fa843b36eda99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:8e:ea:bd:39:be:d3:b7:4f:a3:c9:63:1c:
25:e0:f4:6f:d1:4c:f9:f1:e4:7a:ee:18:ed:64:8a:
43:3f:d4:d9:b0:e8:dc:79:e3:cb:ba:94:43:a7:d6:
2f:a7:af:81:58:de:a4:da:1c:30:6e:96:3b:09:ce:
ad:1f:a0:e8:e7:95:7a:8d:e2:d9:6a:ae:e9:bb:c1:
84:89:9f:f5:01:e5:d7:8a:ef:83:29:58:50:33:75:
dc:de:a4:ce:39:a7:b1:66:b8:7a:a8:aa:69:5d:ff:
51:bf:bb:88:43:fe:0e:e0:1f:d1:0d:bc:58:ec:ac:
7f:53:0a:d7:0f:11:02:f3:ca:96:e0:e5:2f:b0:62:
39:7a:36:c8:b9:e8:7f:11:c0:16:aa:df:b7:99:fc:
67:9d:89:39:21:58:ed:c5:7a:62:a7:15:4f:63:45:
a8:23:49:bd:42:d7:94:4d:e8:87:3c:18:fb:14:f3:
1d:e9:80:bb:18:f4:a3:b8:65:bc:58:cd:90:86:bd:
30:9a:cb:0a:cc:f8:24:98:ea:4f:19:00:4a:29:11:
76:e9:75:07:15:c8:20:39:dd:03:a4:0b:35:ba:3f:
84:f0:d4:1e:df:d1:56:e7:bd:5b:e7:16:ca:6b:48:
a5:60:e0:e8:91:a7:66:5b:de:2a:4f:51:3a:43:7b:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:FB:E9:5F:D2:92:94:24:1A:42:EB:F8:FA:84:3B:36:ED:A9:9D
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e8:25:9c:43:32:7f:b7:26:29:dc:b1:39:5a:d0:41:93:46:
61:87:e5:5e:0f:b3:bb:1b:b6:05:71:82:3a:63:d3:a6:68:52:
d5:9d:78:92:6c:09:86:41:ed:92:b4:60:b7:2d:97:ce:84:1f:
59:36:34:ac:d3:53:2e:c3:3a:d9:5e:bd:7b:cc:65:8b:4c:49:
0d:a7:84:58:43:fd:89:d8:5c:19:21:ea:d4:a9:9a:a8:25:3b:
5e:27:3f:bd:0f:8d:73:8f:c4:85:af:b3:b7:db:93:5e:50:4b:
3f:98:1d:11:2e:8e:08:a2:76:08:2f:93:b0:8e:74:a0:58:c3:
a9:e5:a8:da:67:62:3e:a7:de:a5:c0:48:a4:8e:d7:ca:ce:8f:
ef:16:26:e3:76:cb:4f:03:9d:30:18:84:7f:8f:c2:84:19:9f:
51:8b:28:19:57:5b:7c:14:03:48:41:b9:5b:a1:7e:4c:39:f1:
de:a6:67:b3:e9:1f:ba:85:39:6e:9f:54:17:ea:c4:03:42:ca:
b6:52:d5:cf:61:4e:0b:a9:6b:10:51:23:0c:f6:ee:f1:9a:e5:
37:74:8d:bd:27:f8:8f:2f:eb:07:e6:8f:11:33:60:19:1f:f8:
4e:eb:7f:6d:6f:43:98:47:ae:c6:ed:6f:ac:0f:aa:9b:5f:89:
7c:66:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:20 2026 by rpki-client