Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
File: bQ1tLElBrnWMSVIKy3V38jKuRiY.mft (raw, json)
Hash identifier: 8/F4CXlTuqNrKmaA6Uf3O+PbN8pPI/hlTGDWNepaffc=
Subject key identifier: 28:DD:10:DB:7E:ED:BB:EC:B7:19:EE:11:C3:10:0E:A1:52:39:2A:6D
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Certificate issuer: /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial: 01A0CDB61542476B2F946BCA2D5C08450FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
Manifest number: 017C
Signing time: Wed 23 Sep 2026 10:00:57 +0000
Manifest this update: Wed 23 Sep 2026 10:00:57 +0000
Manifest next update: Thu 24 Sep 2026 10:00:57 +0000
Files and hashes: 1: BBATvh4xeWeL839jiNfIKPcK8JA.roa (hash: VpG3w6G88UCXf4PVa4Xkm7ESG9W4N22rBINybDK9cYA=)
2: ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (hash: 5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=)
3: bQ1tLElBrnWMSVIKy3V38jKuRiY.crl (hash: KEv6dqvsPBr9Z2SW2QELT2mdBwShohLULbZTj2hkzCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:15:42:47:6b:2f:94:6b:ca:2d:5c:08:45:0f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Validity
Not Before: Sep 23 10:00:57 2026 GMT
Not After : Sep 24 10:00:57 2026 GMT
Subject: CN=28dd10db7eedbbecb719ee11c3100ea152392a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:64:14:01:6d:b5:8e:74:4e:df:19:e0:2b:
fc:8b:f0:32:f1:af:b9:c7:ea:55:34:b7:37:0c:72:
d4:8e:81:27:95:95:b7:fb:3c:40:9b:89:38:91:2d:
18:00:c0:4f:a4:56:94:4a:35:8d:04:08:4a:c7:8b:
c8:ff:3f:4b:26:af:ac:f6:ea:bf:3d:84:f8:d0:fc:
90:e9:80:9b:a9:f8:96:7d:83:33:ff:75:4c:73:20:
64:03:7a:24:64:e6:40:cd:22:bb:09:09:32:ce:c5:
48:06:2c:f2:75:da:8d:d3:66:4d:32:34:c6:76:59:
f5:d3:d8:de:46:f0:ed:dc:e3:73:95:ec:5a:4d:f4:
84:12:dd:3a:43:54:13:a8:fd:fa:7a:ab:61:19:a5:
c9:33:e3:03:c1:65:a0:96:45:8b:19:66:1f:b1:61:
f4:07:06:3a:2d:1f:79:dc:ed:90:a2:a2:90:0a:cc:
f7:b1:47:c1:10:e7:1e:9d:77:71:83:ad:14:a9:d9:
1d:80:9a:95:ab:9d:4d:b0:4c:f4:0c:7a:66:1a:73:
3f:65:6d:55:73:0a:4e:0e:56:90:ef:f6:91:d9:8b:
4f:0b:00:2c:4b:23:47:05:39:e9:e9:6c:65:b9:de:
34:09:88:81:51:4c:59:fc:6b:90:27:f5:a1:9a:cf:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:10:DB:7E:ED:BB:EC:B7:19:EE:11:C3:10:0E:A1:52:39:2A:6D
X509v3 Authority Key Identifier:
keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:1d:e5:f7:32:66:d6:bf:57:5d:95:66:56:68:0b:0a:d4:
9a:ef:46:c4:5b:d1:8a:80:41:be:76:14:41:11:42:28:a1:d9:
80:2e:71:bf:61:9e:f8:bb:74:0f:00:75:b1:22:02:8f:78:30:
07:d0:33:e4:13:73:a9:a6:73:d6:c1:8b:28:04:59:c1:da:45:
52:bf:bd:68:e4:dd:59:95:e1:9d:ac:39:c1:56:20:1a:f4:db:
7a:e3:7b:19:b5:c7:1a:cc:dd:1e:d3:84:e4:3d:19:73:9a:bf:
f5:01:41:ae:80:79:25:fe:1d:dc:01:e8:70:16:83:c8:7e:d5:
cf:a0:25:1e:e7:2a:9d:15:56:c7:75:68:56:ee:0a:aa:95:e0:
c8:fc:e9:aa:60:95:15:2e:b2:ba:a9:83:1a:53:12:5b:6a:6a:
a3:62:2a:d4:79:dc:cd:31:8b:1c:e2:18:0e:ac:01:b8:ff:28:
68:d4:b1:b0:78:30:c3:68:31:07:55:e1:9e:ef:7f:b9:73:5b:
cd:ab:fc:02:21:a4:79:dc:4b:ad:c9:bb:1c:c1:15:e6:3e:b4:
a9:db:da:40:af:76:fa:75:71:d5:a3:f3:09:42:ba:05:59:22:
f1:8c:78:cd:49:23:93:91:1f:5b:0f:bc:6e:96:12:19:09:a5:
b7:4e:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:40 2026 by rpki-client