Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: 2W8VQXd993UDvR53ngoOOUw/kkRbnf7ISIauutDEszE=
Subject key identifier: 05:A6:D0:7B:52:AC:D7:84:AA:7A:0A:DA:30:C2:47:27:F6:61:F1:FA
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 01A0FC7E2832314A79C5D379C5DD331E2E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0F03
Signing time: Fri 02 Oct 2026 12:02:01 +0000
Manifest this update: Fri 02 Oct 2026 12:02:01 +0000
Manifest next update: Sat 03 Oct 2026 12:02:01 +0000
Files and hashes: 1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: tbS4u2aGjDaCJqnGp018vsb5gFbOM6cJUYQd6l3emT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:7e:28:32:31:4a:79:c5:d3:79:c5:dd:33:1e:2e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Oct 2 12:02:01 2026 GMT
Not After : Oct 3 12:02:01 2026 GMT
Subject: CN=05a6d07b52acd784aa7a0ada30c24727f661f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b2:1d:de:b1:0b:fa:61:e3:fa:71:76:96:8c:
64:ea:c8:7d:36:8a:0b:ca:b8:46:8b:d9:f8:3d:5d:
59:3d:df:22:9d:01:73:2e:e0:6b:39:f7:13:dd:d3:
69:60:8d:85:b7:ef:49:09:b2:16:9a:32:38:ef:2f:
43:3d:cb:a8:9e:17:27:24:01:b9:22:00:fc:f1:8c:
9f:5b:28:df:02:7f:fe:01:6f:e7:c1:24:87:4f:9a:
97:57:2e:f5:f0:fc:fb:a7:31:05:52:f4:16:3a:3b:
88:12:da:0d:35:5a:84:16:1d:30:8e:d4:84:11:8b:
bd:2d:47:1c:93:94:90:b5:64:13:a7:8b:56:4c:6a:
4f:2b:72:81:e8:76:22:50:22:c7:6a:55:85:2f:08:
3e:af:ce:41:09:17:f6:e2:23:78:ff:77:79:66:26:
ce:38:0d:ad:4d:84:89:60:3d:2b:d5:5a:a1:98:8b:
30:65:7e:bd:1b:af:20:1c:8f:8c:ad:8b:4f:86:4c:
d1:88:f0:71:38:34:cb:b0:32:78:90:5c:d6:27:0a:
1e:3b:b1:5f:56:f9:20:df:5c:01:60:8b:83:75:96:
c5:fd:97:df:83:93:ff:bc:ae:66:c6:e3:fc:11:b6:
b9:9b:c3:3e:89:aa:aa:2a:b0:0f:0f:30:5c:28:9f:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A6:D0:7B:52:AC:D7:84:AA:7A:0A:DA:30:C2:47:27:F6:61:F1:FA
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6f:0a:a2:bb:f8:20:ae:61:5a:78:0f:6a:23:a8:29:a1:98:
17:ff:9a:54:79:8e:54:90:27:e2:cb:49:ad:e6:17:62:ca:bb:
89:1d:48:a5:b4:12:e9:ca:ca:04:40:7d:d6:c1:41:a2:51:09:
7e:b3:18:38:01:6a:ee:ce:4d:b6:7a:1c:af:70:a7:ea:9f:56:
2a:cd:f7:dd:55:5c:2e:e2:93:fa:7d:0e:4f:75:44:da:a0:09:
8f:aa:c6:a0:94:89:81:e3:0b:35:7e:3c:db:42:4d:1b:a8:ee:
ca:65:ef:b6:cf:f2:ea:19:16:3b:de:28:a0:56:0d:9a:b3:de:
fa:18:ac:37:18:bf:ce:26:48:78:ce:c9:84:ba:ab:25:49:4f:
b1:2f:e3:db:7a:8d:de:0b:67:3c:5a:cb:95:6e:b8:04:e8:c7:
e6:72:c7:f4:fb:75:c1:84:c2:a4:5e:31:c6:b9:5a:93:bd:cb:
fa:57:08:d8:6a:35:ee:23:bf:ee:bc:0c:f3:e8:c5:c1:f4:38:
0d:b8:47:e6:75:cf:2a:18:5e:4d:3b:c7:76:5b:31:20:b8:db:
b4:5d:ec:2f:41:c0:97:b4:ce:d8:a0:55:b5:f2:8f:55:80:84:
f8:8a:93:77:2e:de:a3:51:98:9b:a7:23:3b:07:2b:7e:1f:5d:
d0:32:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 17:58:24 2026 by rpki-client