Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
File: v1axbhD6Re7KFoexaJ_CHxgR53U.mft (raw, json)
Hash identifier: EqGOm+Vw52JOhbn+jU8MJ+ED8i3CQq9J7rUD4fI67Tc=
Subject key identifier: B6:A2:57:37:29:0D:7C:72:14:C2:9F:4C:A7:2D:F0:0D:1D:15:F0:AF
Authority key identifier: BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
Certificate issuer: /CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Certificate serial: 01A0F6E8F39134FE65B30676B5F5E01C338A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
Manifest number: 02B0
Signing time: Thu 01 Oct 2026 10:00:56 +0000
Manifest this update: Thu 01 Oct 2026 10:00:56 +0000
Manifest next update: Fri 02 Oct 2026 10:00:56 +0000
Files and hashes: 1: pdd46O_7-gqSCVYzyxen2RSC1dU.roa (hash: GncF/pont0DY3uOfDhLzl1X5Kar3INu8dZi3iu5gRVM=)
2: v1axbhD6Re7KFoexaJ_CHxgR53U.crl (hash: u1+QjFVxFOKeU1ayHUTWiSQuda2cvOfzEMWUheyS2hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e8:f3:91:34:fe:65:b3:06:76:b5:f5:e0:1c:33:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56b16e10fa45eeca1687b1689fc21f1811e775
Validity
Not Before: Oct 1 10:00:56 2026 GMT
Not After : Oct 2 10:00:56 2026 GMT
Subject: CN=b6a25737290d7c7214c29f4ca72df00d1d15f0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:47:db:67:35:1a:37:68:31:b9:86:d1:cb:
9f:54:ac:ee:15:84:ae:ab:17:03:da:5c:ab:aa:87:
12:5e:dc:c5:d9:94:13:b8:df:a5:a9:07:ee:38:f4:
f8:0f:9f:ac:68:db:dc:7e:9a:50:7e:21:36:40:9e:
a3:4d:fe:f2:a0:b8:fe:c5:29:1d:d6:6d:ab:83:e7:
b4:c4:96:fd:9b:db:5d:bb:0a:1f:a3:9a:5f:c2:38:
e5:ec:d1:c4:93:19:47:af:1f:50:2a:40:ad:95:b6:
6d:e8:a5:23:8f:f0:d1:32:f7:6d:f7:1e:67:76:1d:
0b:23:67:fb:ec:5c:b3:c9:8e:0e:5c:e6:34:87:d2:
c7:d0:f0:51:6b:4f:8a:ab:57:a9:5c:13:6e:7a:fd:
7a:fa:ec:00:1b:ff:ee:ef:73:0b:fb:13:fa:21:9a:
80:14:48:05:5d:17:a6:3d:d4:1c:88:31:44:ac:b2:
5f:2a:9f:66:80:93:45:0e:98:6e:46:1a:1c:c8:df:
de:a8:8b:e1:f1:5c:5e:a7:7c:7f:cd:7d:00:0a:b9:
28:ac:c7:95:1c:43:7a:8f:75:fc:64:c3:1d:f1:ab:
8f:71:71:49:0c:c2:cb:cf:63:c6:d2:7b:34:2e:85:
de:7a:7f:14:89:49:8c:88:58:4d:82:3b:85:5e:21:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:57:37:29:0D:7C:72:14:C2:9F:4C:A7:2D:F0:0D:1D:15:F0:AF
X509v3 Authority Key Identifier:
keyid:BF:56:B1:6E:10:FA:45:EE:CA:16:87:B1:68:9F:C2:1F:18:11:E7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1axbhD6Re7KFoexaJ_CHxgR53U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/027fe3-0ccc-4a17-9606-b06431becaca/1/v1axbhD6Re7KFoexaJ_CHxgR53U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9b:b2:4a:bd:4a:43:aa:8c:1e:a5:97:f9:44:49:ec:21:a7:
42:ee:e6:7b:8e:f7:9e:f8:95:7a:f3:55:df:2c:dc:37:87:df:
5d:0b:87:8b:67:a8:3f:ee:b6:1c:a5:fe:2e:0c:51:a1:ee:6c:
95:b0:e1:a4:1e:86:18:82:7c:0b:b4:83:a2:d8:46:f6:bd:03:
72:d8:54:eb:bc:c9:2d:29:9d:65:46:aa:c3:8c:f1:c7:c9:9e:
cf:3d:65:cf:cc:2c:eb:c1:86:37:6c:b9:9a:c9:e4:2f:cf:ba:
65:be:d1:40:36:57:ad:ef:94:90:e1:64:9e:33:41:2a:7e:8f:
34:49:07:b8:ec:a8:5e:16:b0:ef:9b:eb:34:2e:41:af:3e:1b:
57:61:1b:ba:b0:b6:20:7b:be:ff:82:82:01:89:c7:10:12:21:
4c:92:c2:85:e7:d9:d0:a4:9a:5d:ee:3b:46:35:f9:84:70:14:
cf:0f:47:54:39:28:52:15:07:8d:e0:f9:53:f9:15:7c:71:f5:
f8:e6:4d:5e:33:f6:6f:0b:b0:b6:0f:e6:b0:7f:73:da:91:66:
71:5e:13:9b:ce:76:06:3c:e6:0b:bb:b6:e7:a4:d9:ff:a7:b9:
b0:b9:af:32:1c:17:7a:6b:48:0b:ec:7f:ab:04:32:70:13:e8:
fd:a1:d9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:24:37 2026 by rpki-client