Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: tSv+Cx8IU1U94xzzN9tPID0GtETrMZCle8PcQkd82Jo=
Subject key identifier: CA:2B:CD:3D:21:1B:86:F0:2F:BA:A4:39:E8:A0:5E:EF:AE:76:27:FC
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 01A0D011B7E26C2C05B7BD4754734BB775F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 178F
Signing time: Wed 23 Sep 2026 21:00:17 +0000
Manifest this update: Wed 23 Sep 2026 21:00:17 +0000
Manifest next update: Thu 24 Sep 2026 21:00:17 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: jlIQejpT1tbNyTewXSWPliB+NvMBHPtbMlm4a3yRecw=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:b7:e2:6c:2c:05:b7:bd:47:54:73:4b:b7:75:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Sep 23 21:00:17 2026 GMT
Not After : Sep 24 21:00:17 2026 GMT
Subject: CN=ca2bcd3d211b86f02fbaa439e8a05eefae7627fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:27:3d:90:bd:5a:bf:43:4c:2c:25:17:36:
79:23:85:fe:86:75:f0:72:43:dd:96:69:22:57:79:
e5:4a:ee:76:63:d1:84:f4:4a:ae:0d:52:90:87:b3:
42:32:d6:36:b5:5a:06:72:97:41:28:6f:62:1a:82:
7e:cc:14:d7:e7:60:d7:56:b2:8e:1d:6d:20:66:4d:
9c:5e:6c:23:cf:09:12:58:48:46:bd:a2:3f:54:83:
ca:fd:c8:31:9d:55:70:16:ce:a5:de:50:1f:26:6d:
5d:9d:1e:72:0f:4f:bd:57:1b:92:b4:40:8a:ae:b2:
3b:54:25:de:63:51:6a:bd:86:d2:64:c3:fe:1c:22:
b7:ec:f2:59:c6:72:e7:1e:a8:af:22:6d:2f:5a:e4:
05:44:9a:8f:25:4e:57:40:76:4a:8c:45:64:5f:50:
d3:f4:00:62:a6:46:7d:5c:67:64:73:35:35:01:61:
e7:3c:12:26:62:ee:b9:99:ce:9e:b5:92:6e:f6:75:
d6:a1:f4:c4:7a:7f:39:fa:97:97:3a:db:71:33:63:
d6:09:47:52:a3:8b:1e:47:56:48:d0:6e:c2:7a:7c:
ab:86:9f:04:b6:a7:5b:a3:ef:43:a1:62:21:74:4c:
21:70:fe:67:75:4a:0b:ce:64:15:14:71:a3:e4:13:
cf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:CD:3D:21:1B:86:F0:2F:BA:A4:39:E8:A0:5E:EF:AE:76:27:FC
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:88:1b:a3:ba:9a:43:51:01:fb:f7:fa:ca:e6:75:eb:29:93:
77:21:8b:9f:50:41:23:d2:14:7f:96:5c:fd:40:01:af:a8:26:
84:99:78:44:48:b3:1f:96:0d:93:db:4c:ff:d0:08:3d:85:fe:
ea:14:8b:c6:a5:5c:c1:dc:64:98:b3:2b:46:1e:33:d8:d6:43:
6b:38:14:ef:46:79:cc:74:8c:70:bc:55:f4:99:af:c8:04:f3:
e6:c3:25:de:03:6e:e5:d2:60:e8:73:b9:5b:68:51:1d:a5:fb:
39:77:99:a9:00:6e:20:9a:75:30:49:67:a8:03:62:c8:14:b6:
8e:08:ab:f3:53:e3:4e:3f:5e:32:77:5c:c7:c6:6c:db:8f:18:
8a:5d:32:e6:cc:c1:34:65:6a:db:01:cd:74:45:1d:9f:52:de:
6c:0d:5d:c9:fd:db:26:20:2d:a1:ca:40:72:51:c0:a1:70:c7:
65:0a:32:fb:5e:dd:da:14:00:73:09:7f:94:c9:74:6f:3d:27:
16:5e:89:20:71:bb:85:20:3c:d0:8e:f5:53:44:b7:89:88:db:
88:bb:e5:c6:c0:4b:e4:e7:74:81:5e:eb:15:8f:bf:0b:00:31:
eb:fa:20:5c:48:8b:1f:15:2e:48:25:37:cf:39:02:f0:1a:06:
0a:23:13:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:20:55 2026 by rpki-client