Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: tcnp86H9C6ctyO9tW+MLZ1H+WADd2M4YNYyWJbSTASw=
Subject key identifier: 4C:41:38:9E:8E:1F:C1:20:AB:66:12:9A:C2:EF:F7:89:71:D9:54:AE
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01A1DE70E0A2EE544C032295A4EED924EFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 09:01:41 +0000
Manifest this update: Sun 15 Nov 2026 09:01:41 +0000
Manifest next update: Mon 16 Nov 2026 09:01:41 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: W6o418oX61K9z9evObpDSa9/0nzP/QsWLkzUxWZbcsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:e0:a2:ee:54:4c:03:22:95:a4:ee:d9:24:ef:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Nov 15 09:01:41 2026 GMT
Not After : Nov 16 09:01:41 2026 GMT
Subject: CN=4c41389e8e1fc120ab66129ac2eff78971d954ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:b7:3b:31:66:73:ad:a3:88:8f:1c:7b:41:
a9:00:fc:13:4e:6e:fa:19:86:af:c9:bc:e8:99:64:
7b:50:41:12:e6:62:56:5c:d9:c3:60:9d:1f:39:c3:
c2:29:f8:08:cb:9b:7a:ad:89:e1:c3:fe:71:7d:b0:
e7:21:33:86:69:73:11:7b:4f:b0:0b:7d:00:f7:3f:
7b:b1:c2:d4:85:04:e6:9f:c0:a8:2f:57:0d:e1:bf:
75:53:37:0f:e3:30:6c:bc:66:44:9b:61:49:39:fc:
5c:6b:71:cd:e3:68:05:49:d4:01:70:9f:88:7e:54:
37:c9:ec:45:fb:f3:c6:ee:65:c1:34:14:1e:23:63:
ae:b8:45:9c:35:55:9c:08:eb:2c:c7:4f:b9:4c:35:
28:1e:36:50:fa:a4:30:e2:61:2d:16:01:56:0c:d6:
d8:65:12:d3:61:3c:03:1a:26:f3:ca:3c:00:4b:14:
84:c4:2f:91:c9:3c:85:1f:a8:05:c7:20:61:43:6e:
d6:18:24:f6:66:1f:63:ae:d7:78:4b:db:d2:aa:c1:
e8:c0:0a:7c:14:27:25:99:ba:44:89:dc:fc:d4:11:
9a:d9:e0:ec:69:4b:0f:02:ff:90:1a:3d:b8:23:e9:
f4:fd:95:46:fd:59:c9:1d:ac:18:88:8f:ea:c0:f5:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:38:9E:8E:1F:C1:20:AB:66:12:9A:C2:EF:F7:89:71:D9:54:AE
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:39:e9:32:8b:60:4b:f9:61:33:8b:3c:53:2f:d6:b4:bb:
32:34:af:42:34:4b:76:3d:d6:cc:d4:b4:a8:36:3e:80:89:52:
ed:1c:74:04:f3:46:89:9f:2d:fd:1c:51:12:de:5b:88:c2:c8:
3b:bb:11:16:58:f4:81:dd:35:ae:9f:d3:04:85:20:19:63:07:
a2:80:d2:3b:ba:05:94:35:d5:3f:d8:ba:51:c2:33:60:3a:b3:
e6:08:e0:0b:35:7b:4e:a4:ae:78:df:5c:61:9a:1a:63:d4:e9:
b6:e7:10:19:04:f5:a8:bd:9b:ce:15:73:78:77:7a:0d:70:36:
e2:41:71:fb:66:ce:61:dc:bf:e6:b3:d9:de:29:ee:6b:23:e0:
8e:c6:0d:93:8a:14:55:17:6b:6c:98:5b:3f:b7:91:63:6a:24:
2c:dc:1e:42:53:3b:6b:f4:07:34:8c:e5:7a:a9:d0:b5:0c:a5:
8d:74:e2:ac:2c:92:d9:2b:03:77:07:69:8a:e9:b3:10:e9:26:
f6:df:cf:bc:6b:6a:20:43:96:d7:be:99:6e:6a:bc:ff:80:58:
c0:52:6e:ca:a1:45:b9:75:c3:b1:21:7c:42:4a:e8:ac:80:84:
0d:33:f3:a7:88:f7:58:01:ea:47:ea:cb:27:67:38:c8:0d:f5:
c0:b5:1a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:19:18 2026 by rpki-client