Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
File: bX7uNVd5Y04CoUs5IgNn87NOW5U.mft (raw, json)
Hash identifier: l6oyuYVYrrxK/z2/4kVnhsYxVc/dC9hFN6zt5QTi1ms=
Subject key identifier: 10:FF:C5:D1:FA:69:88:CA:A1:41:D3:13:28:65:80:C4:DB:F8:C6:F4
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0D8DEAA5438AD4831A43D10B11508C66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
Manifest number: 20
Signing time: Fri 25 Sep 2026 14:01:06 +0000
Manifest this update: Fri 25 Sep 2026 14:01:06 +0000
Manifest next update: Sat 26 Sep 2026 14:01:06 +0000
Files and hashes: 1: DQ5ge_AVqMtAPY9U7I0NG3R42qg.roa (hash: jsnJNj/v/02NtfCQyh36AKD7ORjisZ7Gdmv2I1MdQ3A=)
2: OMdzvFDT-17HXZynyaIYHkJPOo8.roa (hash: PUTHdbxTs/622nYbcFAR73BbcBsVc3bYVmDcq7Edzqc=)
3: XNqsrUgtVK7DilBR1DXs0cRSPR4.roa (hash: 1CTAtzSUGnHEcBy7ELU8N1a+wh7hvDBmBp7Z0JSVlso=)
4: bX7uNVd5Y04CoUs5IgNn87NOW5U.crl (hash: 3NiOJnpnH7ypkBOrAgP2gkwkOT+XudfCaEwtWNT82nE=)
5: fXi5Wrcm2fcLAwlzB8rd9u1HB1A.roa (hash: nKFY+hAxXbReuJhFsMlnah/EDnIkhStz7ge/1s2VIIo=)
6: vZc8TkKpZddQb7OyDFh5hZnqw3c.roa (hash: 40tvF9e9DozuhvZl5vmPNz60qbgyihV7XMK0+CQNkf8=)
7: wir8QwsRDFDVgN00yDkwTAda9pE.roa (hash: u76/KPkxy/ErYPDKvp+ysDEP3QBqgUTI+DJxB+LMTgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:aa:54:38:ad:48:31:a4:3d:10:b1:15:08:c6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 25 14:01:06 2026 GMT
Not After : Sep 26 14:01:06 2026 GMT
Subject: CN=10ffc5d1fa6988caa141d313286580c4dbf8c6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:51:14:df:e8:19:95:ef:ba:19:cf:59:6f:
72:0c:6a:15:9e:0c:df:eb:d3:cc:77:cf:4b:89:3c:
dc:44:19:c7:17:2f:b4:dc:2c:0a:12:04:d4:5d:97:
85:4a:73:e1:73:35:39:2c:76:12:8b:a3:90:df:55:
0d:62:f7:fe:31:c4:ab:5a:0b:38:12:09:e9:25:e0:
a2:69:3c:58:96:f4:08:78:c1:b4:12:b2:eb:7e:0b:
94:d9:e8:7e:e0:5f:9b:e6:0e:ce:33:45:80:92:62:
99:00:05:50:b2:58:8e:25:67:6d:c5:8d:90:6f:51:
cb:2e:ea:53:10:53:53:dd:f6:bb:26:fc:b3:33:da:
02:41:9c:10:9d:58:1b:57:13:11:c6:d1:1e:8d:c6:
c3:ec:c2:70:62:c1:f0:b2:b8:00:9e:01:5c:00:78:
11:d6:1a:86:15:2e:cd:28:96:66:2e:80:9e:10:c4:
98:b2:f7:58:1b:2e:26:d1:45:5a:24:2b:3a:47:b9:
1b:fb:ba:77:a0:a1:63:4b:c8:48:9a:62:ff:95:cd:
56:43:db:bd:61:d9:cb:dc:cf:4d:21:ae:3b:8a:f2:
a3:25:86:a8:c1:bf:ab:3e:2f:24:d8:e0:22:94:ba:
9a:63:ba:cc:07:f5:fa:fa:2e:41:5d:bd:e9:40:83:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FF:C5:D1:FA:69:88:CA:A1:41:D3:13:28:65:80:C4:DB:F8:C6:F4
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:73:19:d1:6c:80:ef:45:e2:fb:78:8d:db:17:89:c7:54:1f:
89:1e:d5:47:b7:32:21:da:4f:94:3a:30:47:66:75:90:bb:6e:
b8:35:76:7b:c8:86:59:58:97:fc:0a:df:57:df:4c:72:58:5e:
9a:d7:b5:30:c7:0d:7c:fd:0a:4c:a5:81:5a:57:58:47:41:b7:
60:74:41:55:30:a1:04:b2:36:40:75:f3:b7:4c:d4:18:d2:76:
ae:b0:38:19:fd:27:86:9e:c8:c1:ac:f4:95:ad:3f:c3:1c:cb:
ef:fc:70:67:59:e4:9d:e3:0e:fa:06:38:57:c5:3d:2e:42:7f:
74:33:7e:16:43:b9:a9:a6:8a:d9:13:10:f4:ff:d0:a8:64:14:
3c:ef:b8:50:32:df:c7:a2:24:e8:8f:72:ca:60:d7:aa:c2:50:
3a:71:88:e4:df:5a:1a:e2:e2:52:12:09:ee:ba:16:93:98:22:
0c:ed:c2:20:84:84:57:c4:2a:f5:9a:c3:04:e7:5d:e0:07:cc:
85:97:b6:c9:99:d4:bf:e6:05:05:36:e7:9c:e5:f3:1e:cc:e3:
bb:69:3d:0b:de:41:d0:7a:0d:80:60:1e:1f:ea:75:25:67:10:
ef:6a:c9:6c:89:f3:9e:bd:e3:75:39:62:7b:72:81:65:5a:1e:
66:76:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:43 2026 by rpki-client