Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 3JOkQ/PaY23/0VTY40eAFBdFEwBOog46xVl+3YvyohA=
Subject key identifier: 81:96:A0:25:02:EF:A0:8E:09:26:C6:0B:9D:B4:29:11:8C:77:E6:F4
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 01A1D9B81F769264CDBF86C00F146CA473CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1B02
Signing time: Sat 14 Nov 2026 11:01:24 +0000
Manifest this update: Sat 14 Nov 2026 11:01:24 +0000
Manifest next update: Sun 15 Nov 2026 11:01:24 +0000
Files and hashes: 1: 9U2gzAHMQAtRK1gQNHxjr09eebA.asa (hash: AXuT5FLBEMvZmsQmdwNr+acvh8DbWZJW923I5JZgo+o=)
2: SnthKeN0QNsYJSCvNCIW3QkdzO4.roa (hash: pm2CDsGetmBd20fFZ1+ibNzTRJyqdNoHhgU1ZBjBaHg=)
3: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: 85g6Nb6ZyPBFm8TosuM5zR3qeiAHSfM0O4AvZot9wnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:1f:76:92:64:cd:bf:86:c0:0f:14:6c:a4:73:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Nov 14 11:01:24 2026 GMT
Not After : Nov 15 11:01:24 2026 GMT
Subject: CN=8196a02502efa08e0926c60b9db429118c77e6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:5b:61:57:be:05:f9:1d:e0:0f:63:fb:f3:
54:98:f3:6c:6b:6e:cc:15:24:b2:28:18:a3:27:c2:
69:cf:fe:03:4c:16:29:c4:ed:ff:eb:cc:fd:c2:46:
92:f5:41:06:c6:0a:33:17:6a:6a:44:b9:c4:c0:3d:
06:c2:88:fb:95:5b:e5:a4:1d:73:42:12:b0:15:0f:
36:98:0e:02:f1:f5:29:a5:26:ed:3c:3f:57:6f:8e:
e8:31:3f:d6:5f:6c:72:77:9e:ac:cb:f4:93:2e:47:
f4:3b:44:01:88:1b:93:3a:a3:7b:97:b3:d8:f6:ca:
e0:c1:89:39:43:01:2b:fc:95:25:0f:b2:ea:ea:1d:
07:57:78:27:19:53:0b:cd:ba:61:05:1c:0c:e3:cf:
a4:7e:70:94:40:b7:5a:a9:2d:64:9f:d7:b2:c9:20:
1f:b5:ad:3c:5d:70:30:74:cb:e6:9a:e9:84:c3:e2:
95:c5:f8:df:54:d2:33:f1:ec:81:f6:a3:20:b0:0d:
fd:f2:59:b7:36:ce:f7:4f:ee:21:a2:1e:19:4d:5f:
04:3c:84:c3:27:f4:57:05:3d:9b:28:a6:36:86:c6:
1f:9a:20:81:1f:cc:15:0f:a8:a1:b0:ba:2b:7e:98:
e1:f4:3a:a7:d5:07:2b:64:5a:ab:de:85:ec:54:a3:
70:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:96:A0:25:02:EF:A0:8E:09:26:C6:0B:9D:B4:29:11:8C:77:E6:F4
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:68:a6:71:7b:4b:08:59:4b:ad:50:16:3a:3a:93:fe:ad:98:
31:14:86:5d:a0:83:2e:d6:a7:7e:ac:0b:0f:ae:ba:d9:8c:65:
73:9d:c6:47:fb:18:a0:01:54:0c:45:b3:6c:e5:65:36:dd:0f:
5a:b5:86:ba:d7:a1:e6:e9:0f:1d:4d:77:b9:13:b6:d3:df:ad:
13:82:91:60:2b:60:91:97:70:db:3b:c2:f7:45:a4:f4:91:78:
11:eb:66:da:6a:45:80:4f:92:09:c3:6f:67:7b:cb:f6:53:48:
63:b8:55:cd:78:4f:19:60:03:2e:ea:83:e0:01:21:3f:c3:11:
09:aa:91:ce:d9:4e:50:66:a3:5a:e9:29:df:ac:2e:d2:aa:c9:
82:51:2f:73:dc:e3:ab:fb:5c:7e:a8:02:bb:96:b7:b5:35:91:
bb:61:48:21:3a:cb:e9:24:28:90:d1:84:88:ab:34:dd:48:9e:
42:eb:8e:73:bf:89:3a:8d:69:5d:21:91:e7:eb:1a:af:24:e2:
a8:79:81:d3:65:63:59:68:76:b2:5e:ad:f6:8a:88:f0:a7:1e:
91:80:4e:48:c8:59:97:c3:24:c8:49:21:4e:1d:5b:dd:63:53:
fd:0c:b9:3d:a0:ce:66:9c:89:ce:72:d8:80:04:01:1b:ec:31:
6c:61:1f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZuB92kmTNv4bADxRspHPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjYxMTE0MTEwMTI0WhcNMjYxMTE1MTEwMTI0WjAzMTEwLwYDVQQD
Eyg4MTk2YTAyNTAyZWZhMDhlMDkyNmM2MGI5ZGI0MjkxMThjNzdlNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssxbYVe+Bfkd4A9j+/NUmPNsa27M
FSSyKBijJ8Jpz/4DTBYpxO3/68z9wkaS9UEGxgozF2pqRLnEwD0Gwoj7lVvlpB1z
QhKwFQ82mA4C8fUppSbtPD9Xb47oMT/WX2xyd56sy/STLkf0O0QBiBuTOqN7l7PY
9srgwYk5QwEr/JUlD7Lq6h0HV3gnGVMLzbphBRwM48+kfnCUQLdaqS1kn9eyySAf
ta08XXAwdMvmmumEw+KVxfjfVNIz8eyB9qMgsA398lm3Ns73T+4hoh4ZTV8EPITD
J/RXBT2bKKY2hsYfmiCBH8wVD6ihsLorfpjh9Dqn1QcrZFqr3oXsVKNwgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGWoCUC76COCSbGC520KRGMd+b0MB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmimcXtL
CFlLrVAWOjqT/q2YMRSGXaCDLtanfqwLD6662Yxlc53GR/sYoAFUDEWzbOVlNt0P
WrWGuteh5ukPHU13uRO209+tE4KRYCtgkZdw2zvC90Wk9JF4Eetm2mpFgE+SCcNv
Z3vL9lNIY7hVzXhPGWADLuqD4AEhP8MRCaqRztlOUGajWukp36wu0qrJglEvc9zj
q/tcfqgCu5a3tTWRu2FIITrL6SQokNGEiKs03UieQuuOc7+JOo1pXSGR5+saryTi
qHmB02VjWWh2sl6t9oqI8KcekYBOSMhZl8MkyEkhTh1b3WNT/Qy5PaDOZpyJznLY
gAQBG+wxbGEfpQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:25 2026 by rpki-client