Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
File: b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft (raw, json)
Hash identifier: cxtbd0bjSkAL2Vk6IoHD1jR3ZcQ5Rsrd5WhMfP9tLr4=
Subject key identifier: D1:67:FC:2B:50:CC:85:1A:EE:9B:A8:1F:29:B3:A6:06:81:3E:83:3C
Authority key identifier: 6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
Certificate issuer: /CN=6f930698733bad33c081719c7b68bd19723a5a77
Certificate serial: 01A101363D8389562D6EFF4B1E62BE9227BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
Manifest number: 0D68
Signing time: Sat 03 Oct 2026 10:01:34 +0000
Manifest this update: Sat 03 Oct 2026 10:01:34 +0000
Manifest next update: Sun 04 Oct 2026 10:01:34 +0000
Files and hashes: 1: 2E_5c2tZgKxgYVqHOgF9pIGzE74.roa (hash: 7EiMkIUV539Sj9o+RaFXH20bjjKdD7ng/M7VyVmG8mw=)
2: HVZne9WI9uLyJvB9NxBslBjCmlY.roa (hash: YcoHAaoNXAPXHw2TXGEF6Izlodu3eSDrEKdqQwFTx38=)
3: b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl (hash: GVc8XokGaz/3tR6BjVvpR12AqG1y88TNXWZ0RJWbH0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:3d:83:89:56:2d:6e:ff:4b:1e:62:be:92:27:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f930698733bad33c081719c7b68bd19723a5a77
Validity
Not Before: Oct 3 10:01:34 2026 GMT
Not After : Oct 4 10:01:34 2026 GMT
Subject: CN=d167fc2b50cc851aee9ba81f29b3a606813e833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:62:f6:ed:83:40:48:58:a9:2f:17:e0:de:
81:44:f2:4d:04:96:30:19:10:e4:98:36:59:76:5c:
88:5e:c0:bf:04:f5:45:da:7e:f4:dd:dd:a4:ff:47:
5e:f0:e8:70:9c:c7:f9:f8:0d:4f:fe:11:3e:71:a0:
77:52:21:2f:dc:4e:61:b0:8c:47:fe:2e:27:79:6d:
d2:0f:b0:f5:14:ce:ef:12:a5:dc:2e:b2:4c:24:82:
f2:72:62:89:b7:c6:e8:5f:05:a7:84:d2:fe:ed:70:
f2:2d:36:c0:7c:f3:3b:b8:31:a6:5a:19:e2:27:d5:
08:3a:66:61:90:89:25:b6:61:90:8f:d1:83:32:15:
be:d0:91:f1:ed:88:c3:f2:f2:22:86:73:23:0b:39:
9a:2c:cd:bb:06:e4:57:f4:60:8e:ad:c4:cf:9c:7d:
21:aa:04:3e:00:43:aa:c8:f8:53:8d:cf:0e:80:5b:
a6:99:a8:bc:e7:69:85:e6:db:d5:7a:36:77:c8:c5:
7b:86:1e:2c:56:25:0b:68:8f:da:47:18:da:ec:4f:
f4:ec:d2:f8:66:1b:73:75:27:d9:1c:54:1e:48:88:
42:58:e5:c1:05:40:67:6b:41:0d:b5:73:8e:bb:6d:
3f:6a:61:e4:60:2a:c7:b4:a1:1f:7b:f7:dc:4a:7d:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:FC:2B:50:CC:85:1A:EE:9B:A8:1F:29:B3:A6:06:81:3E:83:3C
X509v3 Authority Key Identifier:
keyid:6F:93:06:98:73:3B:AD:33:C0:81:71:9C:7B:68:BD:19:72:3A:5A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5MGmHM7rTPAgXGce2i9GXI6Wnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5e61f7-8363-4acc-b8a4-fe103fd3857c/1/b5MGmHM7rTPAgXGce2i9GXI6Wnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b5:9c:fd:c0:57:7a:9b:3a:cd:0a:8c:b0:fa:06:fa:c9:65:
44:71:0a:3c:9c:c0:6e:d2:d3:3f:60:da:86:3a:bb:a2:38:25:
44:3d:cc:05:6a:fe:38:a1:8e:5b:78:b2:08:7f:62:39:db:ed:
48:e5:37:ba:20:e6:98:e2:be:39:ac:35:f0:52:97:32:68:36:
a8:9c:30:d7:b5:11:c0:7d:fa:1c:7e:b7:6d:fd:e9:f9:6e:20:
f6:1f:e4:c2:4c:97:5f:7d:62:dc:c9:7a:83:e6:c1:d5:35:41:
2a:11:c3:8f:50:9d:f8:f6:c5:63:ee:be:67:d3:9c:fd:78:6f:
03:3d:f6:12:68:c9:2b:3b:40:a7:19:b4:64:0a:a6:4d:79:7e:
54:4f:94:fb:26:87:88:f4:c6:c2:a3:05:48:a5:61:82:4a:d7:
19:06:9d:98:8b:66:39:91:d6:b9:fb:3b:f6:e1:e1:e0:3c:2c:
42:9c:f0:ae:e6:4e:74:9b:1d:9c:2b:2c:51:b7:57:ba:f1:09:
a0:9a:b6:fb:ae:65:c5:08:38:4d:2a:9d:64:95:5e:cf:c9:bd:
92:79:e4:eb:16:56:91:7f:93:61:fb:a3:d6:2b:ff:f7:d2:d3:
0f:48:1f:d1:a6:31:4b:ca:6e:73:f1:cc:84:29:d7:53:01:e9:
fe:e2:be:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:51:14 2026 by rpki-client