Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: WOh7AaQOPb4C0fpCXBQ8sqnLSJlUcz94QGQSbAHffyA=
Subject key identifier: F8:E9:75:64:F8:7C:C5:E4:07:23:5A:0B:EB:1D:C6:5C:5A:3F:FB:C9
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019E20FFF86596AF0DEEBB33673751591048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0AB6
Signing time: Wed 13 May 2026 11:01:46 +0000
Manifest this update: Wed 13 May 2026 11:01:46 +0000
Manifest next update: Thu 14 May 2026 11:01:46 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: Eihu/Yko4mBjvc0OAIXiCTBLnOPtrtGyv4Hfr3yNJ4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:f8:65:96:af:0d:ee:bb:33:67:37:51:59:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: May 13 11:01:46 2026 GMT
Not After : May 14 11:01:46 2026 GMT
Subject: CN=f8e97564f87cc5e407235a0beb1dc65c5a3ffbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:87:71:b3:2d:fe:f1:84:b1:21:ea:c7:ee:
b1:e4:3d:6a:08:3b:ff:8e:05:47:3d:e5:cc:27:73:
6a:45:82:1b:35:4d:1e:bb:7a:b6:e1:96:de:22:50:
af:a8:6f:d7:0d:80:25:ee:e6:11:b4:f9:e4:88:df:
61:81:51:19:ef:6f:df:7a:5b:c0:51:d9:3c:58:b9:
e2:75:e6:b0:ae:2c:b2:20:c8:87:39:01:73:76:bc:
0d:e7:4f:98:51:fa:cd:7b:49:ca:48:1c:8b:72:22:
bf:e2:b9:1f:f3:e2:6e:5b:e2:32:3c:7e:04:d4:82:
44:55:65:e6:3d:f4:95:9c:15:9e:bd:5d:a8:96:85:
04:b7:63:99:7d:7b:9d:14:51:11:c7:1d:83:91:87:
38:f8:3f:76:99:68:7f:8c:5b:3e:6c:8b:8a:c7:be:
6f:6a:f5:0f:0e:11:cd:ce:d2:8e:aa:87:46:aa:d0:
e7:2d:2d:f1:be:a6:93:f5:6e:f0:23:42:e6:a4:61:
eb:c4:f6:58:49:f6:39:22:d2:93:76:d6:75:53:45:
af:57:13:5d:a1:85:b4:8a:2e:62:c9:c8:90:0b:f4:
a6:dc:94:14:3e:d8:c3:85:14:27:f5:56:a0:89:25:
59:a3:16:a5:bd:4a:eb:62:a1:6d:eb:76:eb:52:36:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E9:75:64:F8:7C:C5:E4:07:23:5A:0B:EB:1D:C6:5C:5A:3F:FB:C9
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4d:c2:ae:6c:85:25:61:71:ec:c5:6b:12:93:d5:57:05:0d:
31:45:e2:1d:09:c8:72:b0:05:e5:96:cb:a1:a4:07:2f:b8:d0:
e8:0d:70:03:0a:be:85:fe:1d:bc:a7:00:a8:f0:06:0f:aa:77:
cb:5e:f9:9e:62:61:99:f3:7d:a0:98:7f:25:03:54:e0:dc:f8:
7c:cb:7a:4e:ba:5b:ed:aa:14:84:00:02:13:1e:cb:e1:fa:ac:
0a:7a:a4:b5:16:ec:f8:74:30:db:01:60:7a:3f:01:45:36:a1:
a8:e4:7a:5b:11:06:95:05:99:e9:54:95:78:2f:79:03:82:e2:
e8:0e:ef:7a:55:bd:c5:f6:48:1c:8f:e2:ba:58:d5:17:37:3a:
b7:ad:27:5b:7e:85:59:4f:c1:67:7f:74:49:e1:44:83:ee:49:
85:3e:e8:60:4c:e3:df:75:aa:2a:2a:dc:8a:8f:b5:8f:3f:7e:
6f:b6:7d:09:be:55:05:fa:86:3d:75:92:4e:5c:87:dc:75:b2:
0d:9e:73:15:49:7c:78:b8:b6:55:da:4e:94:f4:8e:8a:c3:31:
f1:d2:27:f1:6e:76:11:eb:89:ca:f2:7d:50:ed:72:a3:89:72:
e1:e0:fe:a7:77:14:53:fb:8b:8d:8f:f2:c5:c8:1b:77:af:8f:
9e:2f:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:25 2026 by rpki-client