Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier: mHfFx+kqpgSnrWSmMjL293Qylr83zm3lWZD5Y/W7Wio=
Subject key identifier: DA:4E:EB:F7:C6:AC:1A:FC:D8:B3:40:B7:2B:3A:3D:37:06:EB:36:D1
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer: /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial: 019E1CEBE63BD4BA76D8BF4A2FC33B4207B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number: 1461
Signing time: Tue 12 May 2026 16:01:22 +0000
Manifest this update: Tue 12 May 2026 16:01:22 +0000
Manifest next update: Wed 13 May 2026 16:01:22 +0000
Files and hashes: 1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: UrzU1uR26xo5HL65toJo38aBSwSCsoF6wuhX2rpLki0=)
2: tXmLrxvg5P19LKcFcwpM22Ekbt8.roa (hash: 6toc+sBgc1NEsqiLqJzbi/jVjcSYilb06CubyR9HJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:e6:3b:d4:ba:76:d8:bf:4a:2f:c3:3b:42:07:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Validity
Not Before: May 12 16:01:22 2026 GMT
Not After : May 13 16:01:22 2026 GMT
Subject: CN=da4eebf7c6ac1afcd8b340b72b3a3d3706eb36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:3b:ba:11:24:8c:42:fc:d9:6d:cb:11:5d:
31:41:12:f2:9d:de:dd:bf:af:25:a2:9e:30:06:ed:
09:ce:cb:cd:d9:7d:96:5a:09:f6:73:3c:d3:7b:28:
f5:ff:90:75:78:2a:31:49:1c:05:bc:8d:99:31:10:
60:73:f3:52:c2:68:0e:f1:93:1a:0a:0b:8a:69:94:
54:f4:58:db:09:a7:8d:dc:92:01:82:b4:b7:22:f4:
54:e1:b9:4d:b3:a2:51:88:cd:d3:01:3d:0e:ce:c8:
28:22:78:6a:99:95:d4:0e:77:96:86:22:d1:59:d8:
09:68:46:61:3c:d0:7c:5e:7a:67:a6:2e:dc:d9:ef:
2f:58:9a:8a:a5:e0:32:1d:14:f4:63:55:0a:e3:5f:
f6:29:8f:42:31:5e:8a:19:2f:52:98:25:ec:24:20:
c7:d0:b2:87:0a:90:5d:d5:8d:6c:33:60:6f:3a:e2:
ae:bd:f7:72:61:50:e7:4b:97:10:a6:f3:b2:66:fa:
8f:67:32:33:df:33:71:d2:11:1d:4f:a5:d7:df:9e:
ed:98:dd:6a:09:06:cf:59:6e:31:05:fd:ac:4a:e9:
50:b4:81:f8:d3:2d:c5:e9:52:e7:23:ee:dd:cc:28:
9b:e2:7d:5a:05:ab:21:49:3f:d6:98:02:4f:c6:36:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:EB:F7:C6:AC:1A:FC:D8:B3:40:B7:2B:3A:3D:37:06:EB:36:D1
X509v3 Authority Key Identifier:
keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:20:3b:4a:d5:fd:4e:10:e3:d5:e9:94:39:f7:8a:7c:fd:a3:
75:e9:71:1b:f1:38:62:db:2c:05:5a:5f:f2:57:b3:5f:40:de:
cf:03:50:f2:da:c1:04:3f:8e:44:dd:84:4b:b3:bb:9c:b9:4a:
b0:34:ab:98:d3:e9:bd:a5:eb:ec:cb:ae:c4:3c:c0:4b:c3:2f:
10:82:08:d7:72:56:69:e8:84:66:1d:58:15:1a:ca:9e:78:c1:
58:92:9e:ce:22:a7:e0:07:df:cf:dc:26:b0:81:02:93:3c:8b:
9d:a0:ae:27:4a:06:41:c9:9b:6f:fe:9a:f8:a4:a9:bd:11:a5:
09:5c:04:08:76:d6:66:e3:c5:c2:1f:7e:dc:08:d5:42:d8:9e:
7f:c4:e4:ce:87:d9:2d:48:98:e2:ce:3d:c9:7b:e8:75:09:7e:
89:7f:da:9a:e0:dd:66:d0:29:30:52:fc:99:ac:9c:b3:c1:e0:
c2:af:d6:0d:94:fe:80:d1:12:5c:78:9b:51:dc:20:5c:76:86:
75:c6:e3:e5:28:0f:0a:c5:98:e5:a4:9e:6f:72:ba:32:ed:84:
e3:cd:28:cc:9a:51:3f:1c:82:36:31:2e:a5:4f:19:c7:34:14:
98:64:93:4f:b9:c4:e0:69:58:3c:17:92:a4:91:40:3a:f1:03:
99:5e:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:29 2026 by rpki-client