Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: aTLyTOomQbsMVNhOIBHigCVRxPj39jEJ4Uj0JmoeGcI=
Subject key identifier: 93:0E:CA:D6:66:B0:B0:34:52:54:0E:FF:21:2B:81:D9:63:6A:BA:9C
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 019E20920BE9CABC939B0B7FC977395F21FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 09:01:42 +0000
Manifest this update: Wed 13 May 2026 09:01:42 +0000
Manifest next update: Thu 14 May 2026 09:01:42 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: B2N6HrV9zcvW7/eIEJymVnIEA2egmru6vMXpll30O1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:0b:e9:ca:bc:93:9b:0b:7f:c9:77:39:5f:21:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: May 13 09:01:42 2026 GMT
Not After : May 14 09:01:42 2026 GMT
Subject: CN=930ecad666b0b03452540eff212b81d9636aba9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:2a:a5:fb:0e:bf:2c:8b:44:37:db:03:03:
0e:4c:cd:c8:35:00:56:de:9f:7a:55:c7:60:4e:c3:
af:84:f4:d1:50:85:10:61:e2:87:b9:27:72:72:46:
0c:a1:10:92:ec:f4:90:a3:df:61:64:cd:85:ca:70:
cf:df:a7:ee:f7:39:49:a2:74:77:bb:45:34:21:0c:
d1:4e:0c:5d:ff:08:25:00:45:92:56:c1:3c:94:6c:
90:9c:b2:8d:fc:69:e9:bb:b5:c2:56:11:eb:e2:5a:
47:d3:10:ba:b8:a0:77:b4:5c:7a:aa:9d:60:2f:b7:
28:e4:38:46:2b:11:a2:d6:72:f1:1f:55:e9:76:60:
a2:66:9d:b0:83:3a:01:7d:11:b0:e2:29:73:34:18:
d2:ec:40:b1:16:a6:49:8b:d8:21:ce:94:94:b4:52:
0a:ff:00:21:7b:60:e8:cc:c5:b6:6a:69:71:f6:1b:
cb:a7:a9:0b:70:92:9d:fd:0d:77:f6:f3:9f:4b:a0:
f0:0c:d7:f4:19:66:f0:9b:91:d2:c4:b6:19:c9:1d:
bc:10:ad:86:63:7a:e8:94:90:eb:3f:b1:55:e3:d4:
6d:a6:65:69:14:12:89:4d:a8:29:83:94:eb:ba:e8:
0b:c2:77:17:29:e9:ac:80:a2:6e:0f:ab:c6:95:12:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0E:CA:D6:66:B0:B0:34:52:54:0E:FF:21:2B:81:D9:63:6A:BA:9C
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b9:e4:57:e5:cc:f2:80:f8:21:e4:ab:52:d9:49:42:b1:78:
ee:22:8e:e3:17:7a:b5:f1:61:0f:0d:73:d8:cb:72:23:a5:1b:
c2:c8:94:76:1b:53:36:6c:51:4d:3b:00:2f:cc:c2:7d:7f:8d:
5e:d7:63:fc:39:34:95:70:52:d2:33:a7:0b:bd:3e:74:30:54:
0d:19:fa:68:1b:f8:18:ed:9d:10:e5:27:b5:16:cf:fb:0a:2d:
ac:ea:73:9e:27:40:b1:aa:e0:d5:f5:af:d6:79:33:08:e6:50:
ed:c1:06:c3:06:09:7b:04:99:9e:8f:cb:e7:e3:6d:1c:d6:85:
d4:87:51:b7:46:eb:95:12:dc:ef:21:76:62:45:ba:1c:e3:94:
e1:a8:d9:b5:78:3f:df:44:c0:13:50:75:7a:c5:4e:e3:47:db:
e5:91:f5:d0:fd:d9:74:7a:69:7b:9b:ef:36:c0:dc:4a:f2:32:
71:c1:b0:c0:83:57:ca:df:5c:9b:e0:50:dd:d2:f5:07:d0:29:
04:df:1f:49:bd:4f:72:ce:12:8e:35:b5:5a:3a:f2:68:7b:67:
7e:1f:63:3e:99:44:9e:16:7a:da:6a:40:77:b6:91:22:bd:19:
c0:f3:6f:be:d2:68:ca:09:4e:76:72:1f:18:0b:e4:64:dc:5b:
26:3e:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:07:06 2026 by rpki-client