Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
File: bb77vEdNQoNZo_f3X4FPVnmw8YI.mft (raw, json)
Hash identifier: N+TLX+y5b0FqaPDrb6nc8NJ+JjCtw907zomuLnZXmtY=
Subject key identifier: 27:25:0A:44:B9:1F:9F:12:ED:37:C8:CE:D6:C1:D9:39:BD:2C:C5:81
Authority key identifier: 6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
Certificate issuer: /CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Certificate serial: 01A0D502248674448BA3BE8E3DE3C9526095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
Manifest number: 89
Signing time: Thu 24 Sep 2026 20:01:22 +0000
Manifest this update: Thu 24 Sep 2026 20:01:22 +0000
Manifest next update: Fri 25 Sep 2026 20:01:22 +0000
Files and hashes: 1: bb77vEdNQoNZo_f3X4FPVnmw8YI.crl (hash: UaOJ9N9Fy9AIvbsUJhKZFYUqasePGX2eI0ZVepxAe64=)
2: e3W8J6q3iuKac7T4Oo6mtuEW26c.roa (hash: kUqfw4ZECKTGTgvvWuokS9PN540GUZ5VpnMypMvP8sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:24:86:74:44:8b:a3:be:8e:3d:e3:c9:52:60:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Validity
Not Before: Sep 24 20:01:22 2026 GMT
Not After : Sep 25 20:01:22 2026 GMT
Subject: CN=27250a44b91f9f12ed37c8ced6c1d939bd2cc581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:80:e2:2f:01:c9:4c:dc:ef:3a:57:bf:b5:
7c:7e:ce:9f:ec:08:ce:86:c6:92:51:c0:93:f5:5d:
e6:67:dc:7e:1a:09:c7:f4:18:76:1d:8c:b5:ea:71:
85:39:0b:c8:06:12:1a:03:55:10:7c:3a:18:b9:b2:
18:b1:c9:09:b5:f9:72:0d:b4:96:fc:0f:ac:0d:7b:
67:50:5a:63:02:aa:aa:ce:d0:b7:66:60:2c:76:6b:
5a:ee:48:55:79:04:c4:8d:cc:d5:22:64:dd:77:1d:
aa:02:9b:6f:a4:1f:a0:c6:d5:2a:66:cb:71:ce:1e:
2a:38:b3:c1:ba:57:c4:f3:2e:6f:9b:d2:77:c5:5e:
d3:f3:54:00:46:e5:fe:39:3c:e5:84:5b:32:96:9d:
0b:7a:66:d0:ce:33:58:95:c6:8e:7e:14:6a:ef:f5:
3c:7d:26:4b:23:08:5b:5e:26:34:84:1c:a2:b2:80:
9d:ae:92:0a:93:59:27:c5:7f:7c:63:ca:00:47:b0:
12:74:82:b1:f7:b4:69:18:9e:65:a6:47:a8:5f:6a:
67:6a:ea:9b:2a:80:0b:96:ba:9f:1d:ef:1e:13:2a:
9f:60:0c:c1:e5:d4:2a:b6:bf:53:1e:18:60:71:f2:
dd:06:59:12:b3:00:fd:10:87:0b:9d:52:0f:e8:e3:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:0A:44:B9:1F:9F:12:ED:37:C8:CE:D6:C1:D9:39:BD:2C:C5:81
X509v3 Authority Key Identifier:
keyid:6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:22:b6:42:40:ab:1a:80:9b:bf:48:40:42:68:ca:38:2d:fb:
ed:04:78:ed:6a:82:1f:ea:ff:25:74:90:60:d5:79:62:af:6b:
bb:40:33:ca:77:06:3c:ce:72:ad:64:8c:70:03:22:88:27:50:
28:83:01:1d:82:45:88:73:e1:21:e6:f4:63:22:f1:dc:ce:2d:
9e:dc:3d:8b:34:f5:77:02:5b:41:7e:36:3e:aa:14:4f:d6:e4:
07:8b:28:58:79:8d:2d:e1:93:b7:ac:69:5f:c0:c7:05:4b:5e:
91:36:e6:e2:f8:c0:9a:5a:92:5a:e4:3d:ca:63:b9:9b:73:f9:
ba:44:3f:5f:c4:59:79:38:be:9b:42:69:08:a0:f8:a3:cf:72:
dc:f5:2d:da:a6:eb:71:11:03:22:ea:95:8f:46:e4:25:f4:89:
b8:a1:09:6f:6a:8e:48:e9:30:79:f7:ec:62:cd:fa:a2:17:8c:
a0:a7:a7:b6:ad:93:c3:bc:7b:27:b4:f4:ce:bc:aa:b6:03:a3:
3a:cb:80:0c:ba:3f:f3:aa:58:f2:62:1a:b2:7a:c6:a9:50:02:
b3:9b:b8:ef:3e:ff:c6:25:f7:06:9b:79:15:b7:36:6a:40:15:
7f:62:70:d3:a0:0c:27:45:f9:3e:ff:5a:04:e9:fb:3b:43:e5:
12:5f:e7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:47:21 2026 by rpki-client