Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: bPOVcBJncvNQeJSm7zc5b5yvg3vFuAF77/CcTzb4IIo=
Subject key identifier: D3:B1:E9:A0:48:42:48:37:C5:18:61:81:84:87:1C:7C:18:B0:E6:32
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 019F9211908B8C253F076675C7964D88BD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: B9
Signing time: Fri 24 Jul 2026 03:00:52 +0000
Manifest this update: Fri 24 Jul 2026 03:00:52 +0000
Manifest next update: Sat 25 Jul 2026 03:00:52 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: W0QnoOFWbDhnEn9kQnzvJUqpfItm62bUro1DMi25FPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:90:8b:8c:25:3f:07:66:75:c7:96:4d:88:bd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Jul 24 03:00:52 2026 GMT
Not After : Jul 25 03:00:52 2026 GMT
Subject: CN=d3b1e9a048424837c518618184871c7c18b0e632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:77:08:0a:ba:16:59:1f:3e:1a:59:f7:12:
d7:2c:9d:e9:78:f2:73:42:ad:75:2a:05:ba:21:88:
2d:0c:05:7a:85:42:bd:4d:02:8b:21:47:dd:ec:f5:
a7:58:9a:a0:64:7e:9c:2b:c2:9d:ba:69:ad:db:76:
f7:11:19:38:f0:69:0f:bb:5a:d0:c1:87:1c:7c:e9:
78:ac:99:70:ae:d2:2b:0b:3b:1d:b1:89:62:57:cf:
4b:4d:7b:6d:b8:7a:2c:42:1f:49:dc:f3:4a:8b:aa:
06:3b:d9:1d:99:37:c2:f3:b3:4b:73:c1:62:36:c8:
70:db:32:dd:b3:dc:c4:74:ca:63:c6:05:94:4a:14:
30:51:df:ad:88:e6:de:ea:37:13:35:d0:3e:d4:52:
c0:d8:cb:75:12:e0:18:48:e2:92:a2:3c:8e:09:99:
6c:37:fc:ea:ed:86:55:00:be:e9:19:f8:79:62:a5:
6f:31:2b:47:27:96:dc:b8:c7:31:88:c5:e7:65:c0:
65:9f:5b:96:0f:bc:8f:83:e8:70:67:4d:ab:59:89:
95:35:63:74:96:25:2f:e6:4e:51:a1:36:d6:50:a2:
d6:f7:0a:0f:70:d5:57:ef:09:fa:6b:17:99:49:ab:
d7:3f:c2:62:08:7b:cb:7e:ac:43:04:f5:ad:11:4c:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B1:E9:A0:48:42:48:37:C5:18:61:81:84:87:1C:7C:18:B0:E6:32
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fb:75:8e:e8:1a:1e:05:93:91:78:a1:cc:67:65:5a:c8:57:
c5:92:af:ea:22:87:9f:f1:81:78:cc:ca:49:88:2b:56:a4:4a:
28:15:27:33:b7:72:90:fe:8b:e1:05:2b:31:06:a8:cb:c3:ee:
01:39:c6:ea:ee:35:07:be:6a:98:3d:61:63:41:27:29:6a:80:
a3:8d:e5:44:f4:fc:97:a4:6d:81:97:ef:16:cd:50:bf:3f:2b:
c6:fa:7d:37:aa:c6:f3:57:20:81:92:77:d0:53:1d:e2:15:1b:
87:0c:32:67:cb:2c:d3:a6:30:b3:45:a0:e8:46:1d:24:da:af:
26:0c:8f:4b:5c:7e:ff:ab:0f:d1:05:59:5f:b1:e6:68:c9:8a:
08:3b:42:6c:aa:25:c5:f1:9c:ac:74:a0:04:14:28:79:5d:aa:
39:99:58:ba:84:94:83:31:49:ec:62:37:cc:f4:74:7f:b4:59:
66:69:49:ac:01:de:cd:d1:e1:91:65:fc:76:fa:ac:2f:94:ed:
bd:71:aa:9b:29:d4:1e:04:e6:d4:c4:13:cc:1c:a7:bd:f7:8b:
6b:db:46:73:0c:38:96:39:bb:76:7a:bf:d3:ba:65:34:6f:ae:
8d:4a:9d:d8:9f:04:e3:9b:17:6a:28:cb:cd:ed:67:85:61:19:
3c:37:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:21:28 2026 by rpki-client