Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
File: Bniec33m9e44cJOhO7kg4vjru4c.mft (raw, json)
Hash identifier: l+xuzHroid+kNZ8/Q9KxYj7pkQPvvJlsy8AwJhzIHBs=
Subject key identifier: FA:1A:E8:11:EE:7C:15:32:7E:AB:40:A1:4D:1E:64:78:93:A7:80:57
Authority key identifier: 06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
Certificate issuer: /CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Certificate serial: 01A0DBA9E9D8B3DAE084AB6724FA27A1817A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:02:20 +0000
Manifest this update: Sat 26 Sep 2026 03:02:20 +0000
Manifest next update: Sun 27 Sep 2026 03:02:20 +0000
Files and hashes: 1: 6-mGNtFvVv4bRX0dlAATOAXlSn8.roa (hash: 0WO6bDFjJSymIjA6OXueaw2A6exvPupQPgHT+AxbCio=)
2: Bniec33m9e44cJOhO7kg4vjru4c.crl (hash: KIVkk6GOZKe15D5RrrYxqEV9ZM0vJ1O/MPqMeqZICzM=)
3: MV5wwFzOHyjDe6pu8ZqU7KIQJi8.asa (hash: 1pqiqkET+K5CP0VTo+0H37vmscq55TbWpuBZIelfTAU=)
4: SBa_meSA36HXFsjD_RIbWMn9xQI.roa (hash: EdE7JSBny/awWzg8i3vFdNMbdChaGR5jW5k8vNopIlk=)
5: XH3KP8p8M1TTHVBg2ttIxJywgAw.roa (hash: ULlHL0+lL/r/GnXR9N9w6rO0qtS6xwIEQqb9F70nBQA=)
6: XbveJAeqDDs106lGs99HsrZ_Fqg.roa (hash: A18dZoqdUcbIqo30HuYitMDack0pNdwoScuJ/CigWsw=)
7: Y4EFKpxgx5H6d1ZJ5Tvx6vLndEk.roa (hash: znZW9Q0y62rcsMH+6OqX4t80H0K8FKMbQa9zE+wyH0k=)
8: ckCKGBy3gfOynIsxgKH7v5Tgxs8.roa (hash: klqqBPeOruXdOkHRPI1j3EwT9LC1T/WC+8cjVI4eguQ=)
9: o9BQ-R8ExgsNh3MUNPn9fT2gYKE.roa (hash: Ru9xVFn4F+xip63EFvMxQyrGr8GDfyz1+ruTaL9X4/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:e9:d8:b3:da:e0:84:ab:67:24:fa:27:a1:81:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06789e737de6f5ee387093a13bb920e2f8ebbb87
Validity
Not Before: Sep 26 03:02:20 2026 GMT
Not After : Sep 27 03:02:20 2026 GMT
Subject: CN=fa1ae811ee7c15327eab40a14d1e647893a78057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6b:d5:62:4f:ef:bf:5b:f5:c8:ed:cd:e9:34:
b2:5d:84:70:0c:92:3d:de:6f:01:7e:94:f4:6d:12:
54:4c:68:3c:fa:12:4c:e9:43:9c:3d:b9:ae:78:db:
49:1f:2e:4e:17:9f:1f:c7:ff:74:1b:29:41:24:48:
8f:ab:2c:0a:75:10:65:63:06:c0:fa:eb:fa:58:b8:
42:64:53:32:81:c6:cb:13:b5:e9:1b:bd:3d:fa:bc:
0d:45:80:3a:0d:1e:a1:32:c9:5b:f0:7c:90:e9:9c:
97:e9:8e:f0:69:49:09:d6:42:bc:e0:39:a2:95:04:
5f:76:2c:0b:92:fb:95:3e:8a:61:60:2e:83:8c:5a:
eb:fd:2b:4f:2f:33:44:d3:89:99:4d:b2:3e:22:66:
ea:a0:9d:3b:91:f0:17:40:f6:90:24:2e:04:2b:e9:
a8:c4:ff:32:5f:a5:b3:5b:a3:df:2d:64:24:32:0f:
b4:9f:07:47:61:bd:4c:4c:61:5d:85:17:e0:53:38:
27:74:32:04:a9:b4:3f:3e:51:d1:21:f5:27:93:26:
07:1a:83:4c:55:d7:7a:f9:ee:9e:71:0c:59:e9:0c:
a8:54:59:70:f2:7e:90:8c:ec:0e:34:5d:89:16:b2:
3b:e1:37:b8:7d:32:7d:af:dc:0b:4d:11:14:c3:01:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1A:E8:11:EE:7C:15:32:7E:AB:40:A1:4D:1E:64:78:93:A7:80:57
X509v3 Authority Key Identifier:
keyid:06:78:9E:73:7D:E6:F5:EE:38:70:93:A1:3B:B9:20:E2:F8:EB:BB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bniec33m9e44cJOhO7kg4vjru4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Bniec33m9e44cJOhO7kg4vjru4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:cf:57:2d:46:f6:75:7f:ba:1c:5c:69:93:ff:0b:00:09:
3f:66:4a:b8:f4:9d:fa:71:f4:6d:8c:99:cc:7b:d4:a8:2c:ce:
1c:ee:1e:60:60:f1:59:1a:ae:ee:db:81:43:29:40:5a:22:4e:
bd:f9:1e:75:9b:2a:ae:bc:9c:72:c7:7a:0b:e0:7c:3c:6e:06:
95:e5:05:51:78:e5:60:00:93:cb:c0:74:37:fe:0c:22:0e:00:
86:6b:da:5b:6c:29:29:ca:d5:3f:45:bc:0a:90:e1:d5:de:92:
f1:08:62:be:7a:60:f3:2b:7e:63:d8:20:c8:f9:f1:b9:1a:34:
12:e1:65:85:dd:bf:a0:fb:32:b3:d3:a2:f7:50:1b:e3:1e:a6:
bd:74:6b:48:76:48:5f:57:fd:13:24:d4:2f:38:9e:a1:4e:2f:
49:5f:8f:1a:d1:a3:76:8d:a9:f0:7f:8f:0e:f3:95:cd:a2:d1:
35:70:25:b7:69:74:6b:b7:fa:d1:1e:8a:e9:e0:92:30:09:17:
c0:9c:2f:6d:88:b5:1d:e3:31:63:99:8c:e5:13:27:b7:6a:bd:
f8:c0:e9:97:45:35:e1:08:f0:17:6a:96:86:c6:ea:1a:09:8f:
79:1b:34:3e:06:ba:19:85:6f:34:2d:30:e7:d0:8b:9d:a4:b2:
a8:6f:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:16:54 2026 by rpki-client