Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File: bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier: HkQChf9lxu1O2oElE5I8DXt33+d98Y6vZCgdbp+okYs=
Subject key identifier: 24:FD:08:BB:D4:97:6F:A6:66:BD:11:17:EB:98:3B:16:FA:25:F8:26
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 01A0D5DDFA345005DF4C5ACBC2E6A9AEF9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number: 0DF2
Signing time: Fri 25 Sep 2026 00:01:29 +0000
Manifest this update: Fri 25 Sep 2026 00:01:29 +0000
Manifest next update: Sat 26 Sep 2026 00:01:29 +0000
Files and hashes: 1: AjNaf0XOBf9riDrcOuPKw561NDY.roa (hash: 9pTroZDCDfvNGpo8ht2rx0lIgrrP6ysux19y/1KOqeE=)
2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: x3KyEMXjPXLG07Gbum9l+vZvwmJJ6usYrKn0fwlI9S4=)
3: ozNQN_NZFecNhoYlp5UO91vuHOs.roa (hash: nM7bo7W7c3uRHayjYiquSs/XgOtGpwXa6S0K0J9q4Zw=)
4: yfDJRZg2skhYgI5YRIWudM4uRkA.roa (hash: kEPU+5FdgdE3UdwWy8pB51bGvVfcgF37Ajrzi1JqLzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:fa:34:50:05:df:4c:5a:cb:c2:e6:a9:ae:f9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Sep 25 00:01:29 2026 GMT
Not After : Sep 26 00:01:29 2026 GMT
Subject: CN=24fd08bbd4976fa666bd1117eb983b16fa25f826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:58:2c:33:17:d6:d2:9d:55:c0:c2:0f:ce:
c1:a4:98:a1:90:3b:74:1c:11:db:cd:01:3a:e4:1f:
41:80:23:d2:87:23:96:c8:90:f7:d7:0d:aa:d5:05:
39:1e:dd:77:9d:e8:41:36:c3:2f:32:f7:72:c6:2e:
44:12:6c:51:2f:9a:d4:90:52:20:ae:f2:0b:a6:2e:
93:4c:51:00:63:05:6d:1e:c6:f7:8e:88:76:d6:02:
44:76:37:f0:2a:54:1c:ed:93:d4:13:52:3f:64:3a:
c6:83:2c:8b:ba:63:2a:fb:4a:45:ab:96:19:83:30:
c9:64:8c:54:db:27:39:26:ff:30:37:17:1b:7e:2e:
04:e5:82:7d:73:79:af:21:a3:07:91:ab:24:ef:17:
2e:cd:79:e7:45:df:ab:46:13:5b:68:4e:05:b7:db:
64:33:78:cc:91:f0:df:3b:e3:76:ab:89:f3:60:64:
a5:bc:7a:19:69:4b:39:2b:1f:e1:e7:3a:19:a2:a1:
9e:10:0d:19:f8:87:16:c3:1c:82:cc:f6:d2:63:b4:
da:e9:4c:ba:64:cf:40:34:94:14:60:23:74:53:03:
c7:19:a9:bb:36:a4:7b:14:37:a0:39:3a:e4:e7:e0:
a0:32:3d:11:af:08:53:38:9a:db:d7:ea:65:30:ca:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:08:BB:D4:97:6F:A6:66:BD:11:17:EB:98:3B:16:FA:25:F8:26
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0a:1e:15:b2:36:99:95:b1:83:dd:6a:a2:e7:34:bf:f3:57:
a6:34:63:e8:8d:9c:f9:f5:79:01:95:17:c1:1d:07:5f:b2:a7:
77:a4:c0:82:4d:be:71:c7:0c:00:22:da:44:9f:ec:a4:03:ab:
59:7a:60:b3:22:a1:80:35:89:11:2c:87:71:5d:1d:f9:40:4b:
81:ba:a3:a9:60:e6:13:46:1f:e2:68:5c:66:ee:92:fb:1b:a2:
15:4e:9c:09:bb:7f:59:e3:44:01:12:bc:5a:c5:61:75:02:50:
68:bf:25:8a:1a:dc:ef:d6:c4:81:e8:b0:07:88:7c:81:11:26:
5c:0f:e7:01:68:da:d8:7b:9f:d2:66:14:db:aa:b4:90:a8:1c:
ac:bf:39:02:d1:9b:ac:3c:a9:26:ae:6c:19:86:23:5b:80:39:
aa:0e:0c:fe:71:73:7f:2b:d8:54:3c:06:1c:53:c3:31:c9:f3:
81:88:16:23:10:2f:c7:09:58:8b:bf:5f:c4:42:7e:3e:f6:8e:
24:3c:76:57:4c:e3:b5:68:ee:b2:69:5c:b1:eb:40:ad:28:75:
16:52:55:42:cd:7f:67:19:8b:9b:40:c0:35:22:40:8d:09:c2:
14:80:7d:91:2f:a5:62:31:61:c0:97:22:a7:e1:75:83:68:47:
6e:b9:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:04:45 2026 by rpki-client