Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: HItFiFdXcwXlaM8vdjfN7pkqHnLLcB2+696Gz0dAcss=
Subject key identifier: FE:23:65:72:BE:44:2D:07:AC:ED:41:08:D8:67:1D:01:1F:21:D2:3B
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 01A0D5DE3FCC8686D581A04F59CAA46638B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 18DC
Signing time: Fri 25 Sep 2026 00:01:47 +0000
Manifest this update: Fri 25 Sep 2026 00:01:47 +0000
Manifest next update: Sat 26 Sep 2026 00:01:47 +0000
Files and hashes: 1: J01Fpct5Y6DBY-ay2CI2Onxw7ls.roa (hash: U4PkhqJ+Vho+VmAjuCONJYVLeK5uvQZ0u+ij3ZflsHA=)
2: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: llu6Pt9Gp72rzoPuMVLv09+/gO08LsjvhULbOQ0EI9M=)
3: hUmeN4RZKbsYYc_l4uCSd2PDCfo.roa (hash: Tk0pGzYSdyHfAZRkeQDxs+AKgZCXk7MNPWm4TXjCtDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 00:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:3f:cc:86:86:d5:81:a0:4f:59:ca:a4:66:38:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Sep 25 00:01:47 2026 GMT
Not After : Sep 26 00:01:47 2026 GMT
Subject: CN=fe236572be442d07aced4108d8671d011f21d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:c3:5f:9c:70:26:f7:f2:4c:5e:51:5e:27:
86:9f:de:22:c5:c6:f7:f9:27:b2:5d:1c:2f:4c:51:
06:10:d6:7e:a3:cb:8c:7f:4a:94:10:d0:3e:76:36:
9d:67:dc:e2:96:19:a0:88:78:fc:7a:db:f9:3e:4b:
b4:5b:74:3c:c7:16:ad:33:09:57:2c:8d:88:77:84:
02:23:d4:fe:12:fa:ed:74:1d:c9:86:7a:cd:11:f8:
a2:28:14:04:6b:85:27:c9:de:71:db:c1:13:eb:93:
85:b2:65:fa:3a:2b:77:5d:a3:74:1e:05:1a:c1:b7:
29:4c:2a:14:b6:ef:75:9c:53:ff:dd:0f:07:e6:82:
2f:78:10:7b:92:b1:45:e0:2e:aa:46:c0:c1:41:d4:
88:0a:b1:57:9a:4e:82:20:48:01:40:0c:6d:68:56:
83:6d:b2:b5:b6:90:ae:25:d1:36:a1:2e:1e:be:2d:
dc:b9:74:d5:8e:e7:1e:70:ed:4e:28:0e:7e:59:f6:
2f:33:7b:31:d0:3f:cf:37:73:1e:c2:b6:87:f7:64:
40:38:90:6a:a5:bd:6e:bf:99:9d:1b:f6:5b:f9:7e:
c1:be:22:82:0e:74:f7:1f:df:a5:82:a7:80:01:66:
27:4e:3a:32:19:95:a5:f1:fb:c2:1c:e8:f5:42:96:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:65:72:BE:44:2D:07:AC:ED:41:08:D8:67:1D:01:1F:21:D2:3B
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:23:33:00:75:b6:e4:4d:4d:19:11:17:09:63:6b:84:83:f8:
9b:c8:69:99:f5:7b:48:b4:15:12:29:46:b3:32:99:3a:16:bb:
1c:82:3f:b9:08:a8:b5:68:ea:aa:e1:4a:f4:c3:b8:10:ba:04:
aa:93:b9:28:5a:32:ba:26:bd:ec:a0:09:36:74:27:b1:4b:2c:
52:f2:e6:bd:91:24:81:5d:80:c2:82:a6:9e:22:50:ac:9c:29:
7b:62:24:da:c6:61:5e:3f:4c:1b:cf:5e:25:1b:06:8f:14:b7:
18:22:42:a9:15:41:6e:3e:74:6c:20:9f:e9:30:09:6b:6e:45:
ed:fa:19:56:97:15:47:e7:c3:73:b4:5e:c9:c6:26:c9:72:32:
fb:1c:11:fc:a6:d4:8e:49:c3:4d:b0:cc:9f:3a:3a:d1:16:63:
ef:7a:a4:81:f1:c2:1e:79:e4:33:e8:9b:5d:19:57:3f:60:e6:
4f:3a:3a:f8:25:bd:dd:3c:39:63:ea:12:64:37:36:b8:93:7d:
61:ac:19:11:42:15:a3:69:53:f9:1c:a8:21:8f:35:ce:ba:8c:
4a:07:06:2d:09:f2:f3:b8:13:bd:2a:0d:9d:93:a6:c1:72:5b:
ad:ac:97:d5:44:ee:e5:88:8d:37:d6:74:8e:e2:98:e6:2f:2d:
85:67:39:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:06:44 2026 by rpki-client