Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: VA13hoKPyprVdffWNM9Zls/pM6ZY9VTyQKL7ZpzfuPA=
Subject key identifier: E0:9A:8B:88:03:AE:06:17:21:F0:67:71:1D:47:5F:57:24:EC:05:58
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 01A1DEA747407BF0425C47D2A9E83DE3C81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 10:01:06 +0000
Manifest this update: Sun 15 Nov 2026 10:01:06 +0000
Manifest next update: Mon 16 Nov 2026 10:01:06 +0000
Files and hashes: 1: YQR-M13FITu11JiiH0aP1_gjSMk.roa (hash: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: QXvt/OIYIPgGljPg1DQ+h4sLfBQ6vqMoJCDy3cfQ0dA=)
3: oo3l14bHiK5EzB9mjkbAjeez7AU.asa (hash: LV6ke9Lg4BIOwUZIuFQOzI8UUwUkpkbRc2eIy7aXbD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:47:40:7b:f0:42:5c:47:d2:a9:e8:3d:e3:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Nov 15 10:01:06 2026 GMT
Not After : Nov 16 10:01:06 2026 GMT
Subject: CN=e09a8b8803ae061721f067711d475f5724ec0558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:af:dd:35:dc:cf:0e:79:7f:2c:f1:49:55:
74:06:2a:db:ab:da:1c:8d:f1:87:fb:55:e3:66:53:
fb:80:1f:29:f8:cc:e0:b1:dd:50:1a:8a:a0:7f:06:
3a:ee:9f:24:37:d7:9b:c8:6c:3f:4f:ac:a8:92:12:
50:b6:96:0c:26:c7:c3:af:39:74:c9:ba:c3:bb:08:
47:84:c5:34:46:1f:95:dc:69:49:c1:bd:f3:18:39:
3a:cf:e2:2c:48:dd:47:ff:1f:ad:84:e2:00:70:91:
c4:aa:8a:5e:89:eb:a5:a3:5e:46:fe:6a:de:b1:4b:
62:84:17:2e:ab:7b:69:25:d8:21:1b:68:6e:a1:8f:
35:4f:cb:9f:d3:c8:bb:e0:12:40:43:29:8b:2e:9e:
77:5a:53:2b:49:78:b6:34:94:d3:87:96:a1:72:f8:
5f:8d:e3:2b:fd:ef:5e:0c:3c:f3:1b:ac:d6:a5:2d:
b8:a8:ca:b9:dc:62:16:ec:c4:78:d4:8a:06:01:8b:
7f:47:3d:5d:57:e1:a9:8c:22:55:43:bf:31:42:48:
b0:25:40:e3:69:bb:4c:f8:1b:8e:8d:23:a0:c9:b2:
71:b7:2b:43:5b:86:9e:33:45:bc:8b:ff:4b:de:4d:
91:86:61:bd:17:32:e7:b8:bf:2b:16:42:58:08:21:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:8B:88:03:AE:06:17:21:F0:67:71:1D:47:5F:57:24:EC:05:58
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ee:28:f4:a2:c1:50:41:55:f8:37:03:a9:18:44:95:34:46:
2a:8e:05:14:4e:de:62:42:f0:bd:16:45:2f:c4:66:5f:30:8f:
bc:a0:d6:c5:88:c9:0e:9e:d1:42:0f:40:ec:7d:eb:de:e1:16:
0b:4c:fc:17:d5:69:2a:4e:ac:25:0e:72:d7:3b:74:ea:20:ac:
5d:62:6a:fa:1d:88:e1:59:c1:77:ea:4d:1d:d3:1d:6d:49:59:
5a:93:76:ef:0a:fb:99:9f:13:2e:c7:7a:b6:e5:53:0b:01:7e:
a4:b9:9a:f1:eb:3b:e1:17:b1:10:7d:c5:41:05:da:99:e7:5a:
c3:10:db:d8:cf:b8:8f:47:eb:52:b4:33:ed:bd:90:3b:1e:8f:
38:97:e4:55:cb:6a:a2:95:3e:16:c7:5c:06:93:64:43:7d:00:
69:99:92:12:39:29:cd:0a:ec:f8:16:42:a1:7d:ce:ca:1b:a6:
a1:a6:ec:a2:9a:0b:f7:b0:ed:64:22:35:e0:ec:65:ef:bc:7a:
0f:43:db:af:6f:ee:7d:c1:0e:16:ba:d8:76:9b:90:e6:ed:45:
4b:46:f9:34:49:ce:2f:3b:2c:de:02:57:b0:53:d9:88:a3:8c:
1a:0f:30:00:a3:5e:95:99:24:1c:65:d5:2b:dc:9e:7f:75:76:
e8:24:26:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:19:59 2026 by rpki-client