Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File: bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier: A3N3oXMvxJ7TgU1lS894GWJ4P29+/Grn/VAf1c8TRoA=
Subject key identifier: 3A:5B:72:81:1C:45:40:C8:CB:9C:BD:6F:C8:B3:03:BF:7E:2B:15:FE
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 01A0D3B8598A596BDBEF34F6B545321BEDE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 14:01:09 +0000
Manifest this update: Thu 24 Sep 2026 14:01:09 +0000
Manifest next update: Fri 25 Sep 2026 14:01:09 +0000
Files and hashes: 1: 9DO8d9woQowqNiDzxlMl1Ect3bo.roa (hash: fzBgjDacb2JVb/qyd2WOo94sgyv6vVFqac/sTPnx2ow=)
2: ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa (hash: DiIJsSuhcAdz+1FlA1JBD5Ze6UThcXCbBy3MPnBKwvk=)
3: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: /3fORvMCa3lBstbWsB9BZJG3v/bR/XZzgskmRoGDuDI=)
4: vMRw_AiQzf5NqoSV0yfYQ6L48AI.roa (hash: 5YqohlbQK8Oupp95llwrVM2ByoSdreXVXtijBcRMnrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:59:8a:59:6b:db:ef:34:f6:b5:45:32:1b:ed:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Sep 24 14:01:09 2026 GMT
Not After : Sep 25 14:01:09 2026 GMT
Subject: CN=3a5b72811c4540c8cb9cbd6fc8b303bf7e2b15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2c:d7:f2:1d:e4:bf:62:30:d5:4c:08:2d:3f:
c3:23:d9:31:db:80:c4:49:ca:3f:e3:2f:b3:b2:6b:
35:c7:6f:01:80:00:e7:cf:8e:47:3b:82:f6:99:cf:
88:d0:a7:1e:b0:01:ad:86:1c:18:9b:28:69:2f:e6:
ef:51:fc:ab:36:8d:c9:83:7d:d4:aa:41:6a:11:50:
c2:d7:df:b2:fc:be:4f:3f:a0:e9:ee:74:87:46:90:
00:7a:13:54:d5:c2:5a:c5:22:05:11:40:76:20:cf:
ce:be:c5:73:3b:6e:de:95:b2:f5:53:3d:37:f6:cd:
ad:5f:5a:dd:fe:53:af:44:66:64:00:58:a6:28:a7:
22:0f:ff:bd:1d:d6:ca:98:7a:45:fa:bf:ad:f2:7b:
94:ac:c8:d6:2c:54:c6:66:52:6a:36:db:ae:af:6e:
71:d9:87:7f:04:ac:19:0a:fa:07:95:46:34:9c:23:
b5:ed:92:f1:6c:30:7b:92:fb:bf:72:15:07:88:1d:
c8:ca:33:a5:e6:41:07:a2:ca:61:f7:c0:59:d2:b1:
ef:13:02:b9:ec:ea:22:1c:c7:38:4e:0e:5d:61:85:
d4:2f:9d:49:a5:25:b1:43:3a:f2:b5:65:58:6e:e3:
b8:8d:0e:31:d8:78:b1:eb:aa:d2:67:84:85:7f:0e:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:72:81:1C:45:40:C8:CB:9C:BD:6F:C8:B3:03:BF:7E:2B:15:FE
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:87:52:dd:6d:c2:0f:39:9d:d3:15:54:84:c4:fb:3e:ff:38:
77:26:61:88:d6:9b:b5:ec:fe:7a:3b:a9:21:1c:c3:27:76:55:
b9:ee:99:4d:3c:cc:be:5b:e8:42:a3:5c:a5:9f:3a:99:14:07:
44:a3:d7:d8:79:35:c3:f4:2e:ff:0d:90:44:01:dd:c1:9c:ea:
f5:46:76:dd:30:37:4b:0f:e8:45:53:e8:5e:b5:a0:5c:5e:fe:
0b:f0:22:07:22:68:6f:9c:e3:de:e4:4d:0b:a3:56:82:ff:85:
8d:13:9d:37:16:1d:55:17:63:9f:e8:97:bb:27:70:69:9f:90:
dc:e3:0d:fb:db:f1:99:e4:4a:64:20:8d:43:f0:c0:d7:0c:f5:
d5:e0:33:4c:e2:86:5b:cb:f6:83:10:9c:02:df:4e:90:c9:ed:
8a:86:5c:1a:42:55:ec:9c:14:f0:4c:3d:67:60:bb:65:8a:42:
b4:9d:47:3a:fa:f5:1e:fd:50:77:eb:7c:b0:fc:61:1b:7c:1f:
a0:cb:bb:36:dd:44:cf:d5:49:5b:f6:eb:e7:da:87:01:96:95:
8b:5b:1b:d1:14:10:3c:f9:59:4e:32:fe:03:b7:31:20:3b:1d:
4e:d0:af:0c:20:6d:a8:b4:a4:55:84:58:05:46:b1:75:df:49:
9b:25:b5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:21:17 2026 by rpki-client