Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: DXl9xlYm0oHXxKth+6Z2tNe6/lZd6plmaedTMqNVXZk=
Subject key identifier: 4A:04:D7:D4:84:25:1F:1D:A2:5C:AC:35:69:8D:C8:41:AA:D0:27:F3
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01A0DBA8E5B8FC1E5E8516A57E9C84CEB192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1A71
Signing time: Sat 26 Sep 2026 03:01:14 +0000
Manifest this update: Sat 26 Sep 2026 03:01:14 +0000
Manifest next update: Sun 27 Sep 2026 03:01:14 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: OURVDBifIfeu5WdP2dTzP2SDjNlWcG5DOE3ytn98Sok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:e5:b8:fc:1e:5e:85:16:a5:7e:9c:84:ce:b1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Sep 26 03:01:14 2026 GMT
Not After : Sep 27 03:01:14 2026 GMT
Subject: CN=4a04d7d484251f1da25cac35698dc841aad027f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:c5:3d:e9:58:a7:dd:36:da:79:83:29:58:
b3:da:31:e0:f0:e8:e3:41:c7:a0:fb:38:eb:dc:19:
aa:83:57:8a:d5:68:c0:cb:a2:f7:5b:b3:49:d7:52:
a4:c4:f8:3d:9b:dc:a7:50:6f:dd:b8:7d:48:c6:29:
76:b5:1a:3b:81:f8:f0:35:77:df:66:7f:80:a9:6a:
36:96:e1:d5:19:24:f5:4d:eb:07:05:fb:9c:b8:83:
97:ff:1a:c1:d6:d3:ae:d5:a6:6c:88:bb:5e:eb:5e:
ca:f7:e4:59:06:7b:c4:30:4d:a2:5d:02:d9:e0:b7:
3b:7e:47:a9:04:0d:f3:ba:93:8d:e2:9d:aa:20:85:
47:12:62:80:fc:a0:05:4a:77:0e:4b:40:15:2d:39:
57:48:8d:16:bd:3b:b0:5e:9d:17:4d:f0:36:19:4f:
b2:d8:0c:1a:4e:33:b5:d1:5a:77:a4:be:ed:e9:00:
f8:dd:85:5d:eb:a4:a0:4b:e0:9a:04:81:52:8b:66:
60:85:84:32:86:b1:83:9c:b0:28:91:46:bc:17:eb:
49:87:01:36:c8:fd:0d:b2:4c:77:65:0c:01:f6:ae:
4f:0e:5f:3f:58:93:19:62:4c:ac:de:e9:38:0d:f4:
5a:d2:ba:40:94:a4:60:9f:e3:a3:9c:84:4e:2e:98:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:04:D7:D4:84:25:1F:1D:A2:5C:AC:35:69:8D:C8:41:AA:D0:27:F3
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:61:fd:f2:51:70:10:76:c1:f9:11:9f:82:cb:67:b6:68:09:
91:38:9a:8c:1e:cf:48:fa:fe:22:b6:7f:b8:37:a0:f9:5a:12:
78:55:e8:ea:e9:01:46:d0:c6:d9:0a:ab:19:bb:65:19:b9:a0:
49:f9:55:8b:5a:be:1e:90:03:70:7f:3f:af:72:d8:d8:33:00:
80:3a:dc:17:de:1b:d9:9f:01:46:6e:07:40:73:24:a4:0c:93:
67:76:74:55:6b:b6:be:75:45:33:9a:3f:8f:8b:3e:39:16:f4:
54:9d:e4:e3:f6:8f:75:39:10:f7:35:a0:43:7b:34:fe:08:27:
18:52:8b:4a:81:e0:08:c6:df:14:a6:da:41:65:f4:ba:90:77:
cc:0f:8b:ae:7a:f7:5e:d0:38:38:61:3d:f4:20:91:2d:45:79:
85:d3:c7:0e:e6:9b:8c:6e:6c:0b:d7:87:09:c4:1b:cb:38:d7:
ff:86:00:1c:71:cc:bd:5c:e7:df:db:4e:40:a8:47:1a:56:f1:
c2:3f:1b:f2:c4:30:89:d6:25:92:f5:af:26:e6:a3:57:0f:06:
e7:66:c7:fd:91:32:19:79:61:52:a0:99:8f:2c:50:f6:44:3e:
0c:b8:81:48:5a:70:e1:a5:ff:d5:d4:91:e2:92:e6:65:f7:ec:
31:e7:92:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqOW4/B5ehRalfpyEzrGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjNjZTdiMGMxMDA2OGZiYzQ0YzAyMTk0M2UzMzkwMTNm
MmFlZTAwHhcNMjYwOTI2MDMwMTE0WhcNMjYwOTI3MDMwMTE0WjAzMTEwLwYDVQQD
Eyg0YTA0ZDdkNDg0MjUxZjFkYTI1Y2FjMzU2OThkYzg0MWFhZDAyN2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurDFPelYp9022nmDKViz2jHg8Ojj
Qceg+zjr3Bmqg1eK1WjAy6L3W7NJ11KkxPg9m9ynUG/duH1Ixil2tRo7gfjwNXff
Zn+AqWo2luHVGST1TesHBfucuIOX/xrB1tOu1aZsiLte617K9+RZBnvEME2iXQLZ
4Lc7fkepBA3zupON4p2qIIVHEmKA/KAFSncOS0AVLTlXSI0WvTuwXp0XTfA2GU+y
2AwaTjO10Vp3pL7t6QD43YVd66SgS+CaBIFSi2ZghYQyhrGDnLAokUa8F+tJhwE2
yP0Nskx3ZQwB9q5PDl8/WJMZYkys3uk4DfRa0rpAlKRgn+OjnIROLphr7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoE19SEJR8dolysNWmNyEGq0CfzMB8GA1UdIwQY
MBaAFG0jznsMEAaPvETAIZQ+M5AT8q7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYt
NDBjNWViYzZmNzM2LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82NmFmMDctMzMxOC00ZjRhLTg5ZmYtNDBjNWViYzZmNzM2
LzEvYlNQT2V3d1FCby04Uk1BaGxENHprQlB5cnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWH98lFw
EHbB+RGfgstntmgJkTiajB7PSPr+IrZ/uDeg+VoSeFXo6ukBRtDG2QqrGbtlGbmg
SflVi1q+HpADcH8/r3LY2DMAgDrcF94b2Z8BRm4HQHMkpAyTZ3Z0VWu2vnVFM5o/
j4s+ORb0VJ3k4/aPdTkQ9zWgQ3s0/ggnGFKLSoHgCMbfFKbaQWX0upB3zA+Lrnr3
XtA4OGE99CCRLUV5hdPHDuabjG5sC9eHCcQbyzjX/4YAHHHMvVzn39tOQKhHGlbx
wj8b8sQwidYlkvWvJuajVw8G52bH/ZEyGXlhUqCZjyxQ9kQ+DLiBSFpw4aX/1dSR
4pLmZffsMeeSLA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:19:48 2026 by rpki-client