Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: 5W0+Wy9IZi3CBdGIjpgCH232yKu8cmHQeUze37pGxVI=
Subject key identifier: 2A:12:CA:2D:85:A8:62:8D:98:9E:62:DF:84:52:82:5A:77:08:2E:63
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 01A123F900ECBA0E7BE8A8724554C4122FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 1AA2
Signing time: Sat 10 Oct 2026 04:01:23 +0000
Manifest this update: Sat 10 Oct 2026 04:01:23 +0000
Manifest next update: Sun 11 Oct 2026 04:01:23 +0000
Files and hashes: 1: 8t3JN_7LDw-CGs7GhP5-c9YQT3Q.asa (hash: vle8JAoc+z41qSzbAnkjsok+oNKxAJh14QSzgoReOFc=)
2: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: UiFI/G/5bZfzfpaR4So5kxq0hIm/KedPW0hClLvjTj4=)
3: HlyeT63d_hTRQoUdqffq7QL-QuQ.roa (hash: x2NNm6m6wU3oFBfBTa5MizhpP5bdnw5qPXYrszPxhbc=)
4: MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa (hash: 4wqf+3mVFGC07sq2JR8okYP1Xx2LwUoWzZSDpdV1+vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:f9:00:ec:ba:0e:7b:e8:a8:72:45:54:c4:12:2f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Oct 10 04:01:23 2026 GMT
Not After : Oct 11 04:01:23 2026 GMT
Subject: CN=2a12ca2d85a8628d989e62df8452825a77082e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:63:0e:7c:22:a5:e1:d1:9a:28:5e:97:0e:
dd:46:ad:ca:ca:9f:bb:62:cc:13:77:94:27:a7:c1:
c4:be:d6:aa:60:ef:3b:27:44:24:a2:ae:31:3c:4d:
2f:13:6e:18:9a:b1:89:93:d9:9d:2d:19:87:13:8e:
f2:25:7b:2f:6a:8d:31:79:44:82:c5:6c:ee:9a:bf:
d7:fc:7e:98:36:5d:2d:27:39:85:d4:f8:7d:65:09:
09:b1:20:c9:04:1f:80:b3:45:6f:9c:6f:18:20:ba:
39:b9:29:03:1b:5a:21:05:3c:7d:d6:c3:4b:a0:1f:
e5:a5:5c:34:ac:d9:79:d7:b9:54:71:46:89:8e:ee:
a6:2a:0d:4a:d2:97:c7:15:fc:d8:80:b7:b1:64:5a:
4b:4b:d8:f4:4a:fe:84:09:38:ec:91:c8:28:cf:fc:
92:13:3f:ce:51:78:d5:cc:72:15:ab:e7:51:ec:bf:
16:ca:84:18:ff:33:cf:71:51:ea:62:75:01:79:34:
ce:7b:94:76:ac:8f:54:bc:7c:2e:d1:06:a2:9a:8a:
e1:d7:ec:07:2c:90:55:a4:12:73:b6:a5:29:ac:e8:
a5:1a:6d:73:4f:7d:a0:8b:0b:00:5b:d9:70:98:f2:
47:da:c7:ac:a5:72:d2:ae:2e:38:7d:7f:2b:02:78:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:CA:2D:85:A8:62:8D:98:9E:62:DF:84:52:82:5A:77:08:2E:63
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7c:58:19:f3:b1:f3:8c:d5:64:33:d2:cd:c3:2f:ca:6a:71:
83:68:69:35:66:72:41:02:ad:ba:62:d9:f6:dd:f5:96:79:0c:
b6:86:69:7a:e1:00:5d:21:41:8e:be:e6:7c:9f:fa:64:a6:9a:
7c:db:e7:8c:90:ab:12:1e:55:5a:c7:2d:37:17:8f:05:e3:3e:
ea:a9:f7:75:23:63:8a:d1:d2:f2:92:99:99:6e:13:8a:3c:72:
84:6f:2f:92:f6:51:e8:a9:8b:e1:ca:10:1e:e3:dd:ff:5d:dd:
39:25:95:5d:60:ea:3c:c7:b1:13:f0:9a:a3:2c:f3:ef:59:5c:
f9:25:a9:ae:06:93:7f:dd:05:63:db:f6:ef:e7:ee:85:6a:1d:
21:fd:ae:c8:4a:4d:dd:dc:6a:e2:62:4e:5b:fc:c8:04:13:96:
a6:9c:ab:14:87:5e:3c:3d:33:5f:e0:92:b4:fc:d1:71:c6:ef:
89:ba:77:14:6b:17:08:57:c7:0f:b2:a2:c4:3f:61:90:55:c6:
df:d8:11:10:ee:8a:71:ed:54:88:d1:3f:96:78:73:11:05:24:
ed:48:ab:70:57:d4:e0:ea:0a:dd:b9:f2:ac:95:18:49:a5:b8:
33:13:71:23:12:30:f6:45:fc:1a:b9:c1:9a:52:ea:05:63:e3:
89:65:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:55:04 2026 by rpki-client