Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: OS7lIDYlYQFq+yxfBe7WM5TseWr9EipM2itkH1SStmo=
Subject key identifier: 16:53:88:1D:B5:45:3F:66:86:CF:54:79:27:C3:D1:C6:81:1D:4A:7A
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 01A131B42F02222F46A2B56587A98A9E2EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0C96
Signing time: Mon 12 Oct 2026 20:00:54 +0000
Manifest this update: Mon 12 Oct 2026 20:00:54 +0000
Manifest next update: Tue 13 Oct 2026 20:00:54 +0000
Files and hashes: 1: Z15H2A8imrxH1p9HbxhPoKAu68A.roa (hash: css+XRNCUvk1FMrslfWIDxr5xIpejly6r5FZavKRPZE=)
2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: LWvNHlVZAweuSZ9SpMJlHF4UZ3d4bKnEX4xy9kjDwJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:2f:02:22:2f:46:a2:b5:65:87:a9:8a:9e:2e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Oct 12 20:00:54 2026 GMT
Not After : Oct 13 20:00:54 2026 GMT
Subject: CN=1653881db5453f6686cf547927c3d1c6811d4a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:64:5e:82:63:78:47:e7:f5:ae:f5:ae:59:
2f:9f:41:0e:16:c7:57:c5:34:37:9f:2d:7b:bd:d0:
6a:9b:04:7b:42:9c:50:b2:e6:5d:68:00:83:44:79:
78:76:91:21:71:9e:ca:04:9c:04:8e:cd:e1:a0:1d:
9b:c2:a6:3e:2e:27:61:67:18:84:57:c0:22:18:c6:
ac:cb:eb:6a:1a:8d:13:7f:18:a2:79:4d:ca:70:8d:
c2:82:91:7f:ae:68:e4:d4:83:c7:2c:eb:a5:a2:32:
7b:76:c7:ae:73:87:b9:3b:b2:e8:9b:a7:65:0d:29:
de:22:19:d4:92:90:04:70:8e:9b:dd:24:7c:d8:4d:
75:0c:ec:be:29:a9:d0:7f:4f:25:d5:6a:bc:a3:04:
4d:1e:ce:57:a7:7a:5d:e1:61:95:de:e2:c5:ca:f0:
65:1f:f2:f0:dd:6c:5d:f3:d1:97:c7:3c:31:bf:bf:
a9:6e:68:dc:e2:7b:a4:72:aa:44:d1:03:8e:57:1e:
fd:7e:8b:8d:24:22:fe:e1:1b:d2:88:99:bf:ee:78:
3f:0a:e0:39:c9:75:bc:43:9a:b9:de:98:b1:09:a7:
37:66:c1:68:43:fc:e2:5f:fd:39:18:aa:c9:2c:7f:
43:22:9a:1a:b2:a7:20:15:56:a9:d7:4a:26:33:8e:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:53:88:1D:B5:45:3F:66:86:CF:54:79:27:C3:D1:C6:81:1D:4A:7A
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:71:eb:c7:f4:de:cc:1e:01:34:da:7b:7f:79:f4:2b:3c:23:
c7:dd:34:57:60:43:ef:6d:31:51:41:96:aa:3a:39:37:1a:a0:
21:6d:9c:3f:34:58:84:0b:d7:1b:0a:47:7a:6c:5a:d7:78:87:
f8:04:16:70:52:7e:f8:2f:1e:c6:ff:6f:a0:9c:96:d2:68:87:
0d:de:58:20:f9:35:b2:6d:44:fc:ee:48:43:0c:a5:e4:da:0d:
3b:6f:87:e8:47:26:db:bf:f9:c4:71:ee:dd:bd:e1:34:b8:fa:
a4:e3:82:f6:98:7c:27:c1:ad:5a:e3:8d:32:ff:68:2b:69:5e:
fc:9f:5c:de:ca:7f:06:d9:c6:10:d3:22:dc:e4:66:e3:85:1f:
59:24:3f:44:23:25:49:fc:9f:63:a9:78:38:ed:fb:82:67:9d:
35:db:87:5f:d4:ce:7b:94:2e:bc:88:51:bb:98:83:4c:63:98:
39:ce:d5:c9:e7:55:1e:b8:42:7b:b5:bf:82:d9:c4:95:95:58:
f8:a8:b1:ee:b9:3e:df:dc:a0:f9:53:ef:de:3e:bf:f0:63:61:
38:1f:6b:f2:ed:e7:f2:53:58:b9:4b:a3:93:3c:db:49:2d:07:
c8:de:07:9b:cd:ed:38:3e:08:29:c1:02:a7:83:ed:6e:59:36:
f1:cf:77:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:28:19 2026 by rpki-client