Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: F39Pzbvvfr38BWHHKu7ocD0BTCYaPAm/iBbuitidHXk=
Subject key identifier: 08:C7:39:FD:29:0D:E8:DA:A0:6E:94:91:9C:32:73:D5:55:D0:39:1C
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 01A10E4C22D0C0CAF90C56BB5AFC5A00FBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0C3A
Signing time: Mon 05 Oct 2026 23:00:33 +0000
Manifest this update: Mon 05 Oct 2026 23:00:33 +0000
Manifest next update: Tue 06 Oct 2026 23:00:33 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: 8G+vBwmsDDLysbF+Td9OKGJkAugvAXCl9jp7frcSRnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:22:d0:c0:ca:f9:0c:56:bb:5a:fc:5a:00:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Oct 5 23:00:33 2026 GMT
Not After : Oct 6 23:00:33 2026 GMT
Subject: CN=08c739fd290de8daa06e94919c3273d555d0391c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8d:9d:64:ec:1d:b9:b3:3c:8c:68:43:38:79:
04:f4:cd:3e:e9:df:00:ac:30:bd:14:b7:f6:0f:38:
d4:49:3e:0c:f0:d2:e3:82:85:76:04:74:14:87:aa:
3d:ed:bc:f6:36:04:8c:e5:fe:45:48:59:3b:5a:b2:
3c:e2:1b:2d:c3:0a:86:37:93:e4:14:7a:74:1f:e4:
56:63:ec:ed:64:a8:96:40:c3:cc:7a:2a:53:53:06:
27:22:7a:e0:c7:ee:9d:33:a4:82:0f:8a:72:55:ad:
c6:92:64:a9:b1:5e:d6:00:50:c4:0f:8d:67:d7:58:
56:b8:37:ab:81:b1:7d:7d:47:7b:3a:83:19:62:34:
08:a3:a2:f0:22:98:e3:76:fa:f6:a2:ca:6f:48:ba:
9a:fc:80:d8:1c:b7:8f:2a:b1:78:75:a7:ee:10:ba:
9b:da:6d:bc:2f:51:79:d3:ba:24:90:63:fb:97:bc:
b3:b4:14:d8:2c:d2:4e:b5:e0:39:00:58:fa:bf:57:
cd:af:d9:39:0d:a3:ad:dd:be:5e:c1:16:53:7a:f6:
43:b2:74:5c:41:3b:fb:6f:79:ce:66:bb:d5:53:5d:
19:a6:a1:64:6a:4b:6b:7a:19:9a:f7:06:d9:96:4d:
3f:de:49:0b:2d:c0:f6:22:39:66:40:f5:60:f2:2d:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C7:39:FD:29:0D:E8:DA:A0:6E:94:91:9C:32:73:D5:55:D0:39:1C
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:50:f5:75:dd:6f:a0:eb:68:06:44:c3:07:de:53:03:42:d7:
15:2f:a6:aa:0c:0e:7d:34:06:88:b8:ca:17:44:c0:a9:3e:c8:
e1:f4:02:d9:9c:93:f7:bc:90:48:ac:7c:d4:b7:80:cb:e4:a4:
9d:75:9e:c6:e3:89:46:5a:bc:88:50:86:8d:c9:de:22:f3:1b:
cf:fe:e6:70:48:45:e3:1b:00:f0:26:07:e7:e4:85:e1:86:97:
ae:14:fa:1e:a4:9d:69:55:93:c4:c5:55:48:04:48:97:52:a9:
d3:6c:78:47:8e:4c:cb:fd:ee:f5:27:c5:5e:42:ee:b8:9e:30:
33:20:96:a1:88:0a:4f:c2:f6:6f:61:dd:5b:50:b3:b8:b0:c7:
4c:eb:cd:8f:64:d9:95:7a:41:fb:b4:7b:18:5b:ee:a3:cb:c8:
ec:3c:7e:9f:42:b6:b7:ae:3f:8c:ef:10:82:5d:5b:8e:71:92:
e5:43:80:ad:28:43:e6:c6:58:9b:71:51:ac:6d:44:3f:8e:81:
f2:f0:ff:0a:e7:4f:fc:87:2b:48:1f:b7:ca:20:65:d0:b0:6f:
0f:f1:9e:e8:14:0a:75:15:92:e8:5f:b6:cd:72:5c:58:0c:9c:
3c:37:c9:3c:18:45:4b:d7:f3:7f:cd:a7:ef:d1:90:c3:2d:90:
11:6a:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:39:31 2026 by rpki-client