
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: yfEiHt3CabcCdghVQNbqUSEVSamNdQsYz+CD01WGY5o=
Subject key identifier: 8F:60:11:FA:7B:E4:52:F1:D0:C8:AD:BF:A2:7E:DB:EE:08:A9:F6:B5
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 01A1DD26A4E8FBDA8F09FFC3ED8AF3111C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: 01E9
Signing time: Sun 15 Nov 2026 03:00:59 +0000
Manifest this update: Sun 15 Nov 2026 03:00:59 +0000
Manifest next update: Mon 16 Nov 2026 03:00:59 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: 0ie/BNHL7SvAZOHGMZLjJ854TCFqeGJXcF8lnVjnEg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:a4:e8:fb:da:8f:09:ff:c3:ed:8a:f3:11:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Nov 15 03:00:59 2026 GMT
Not After : Nov 16 03:00:59 2026 GMT
Subject: CN=8f6011fa7be452f1d0c8adbfa27edbee08a9f6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:96:0c:5a:88:e3:56:7b:d1:5c:c4:f3:31:
68:c2:f3:5a:4b:02:29:72:07:92:1e:58:1b:b4:17:
cc:95:2b:5d:f2:db:34:5f:c0:39:ba:5f:96:c2:f2:
bd:69:4c:38:94:d2:0a:07:fb:23:3f:b2:d4:1f:5c:
f1:2c:44:a6:9e:7b:d6:30:81:e7:d8:af:d0:b7:a4:
3a:20:8f:f5:be:af:b7:fc:a0:43:b3:01:e3:d0:28:
73:1c:80:4c:e4:a8:00:ca:15:8e:08:d9:10:4e:71:
c4:9a:f5:94:e9:2e:ec:7d:e5:17:7b:4b:1b:cb:32:
ef:71:10:9a:ff:f5:7c:5c:80:93:26:1e:d2:bf:95:
01:72:ce:50:e7:bc:e3:f2:32:7a:07:20:27:8f:89:
ef:36:47:9a:23:dc:c3:c7:ac:19:9e:0d:cc:aa:47:
2a:74:b6:98:c8:62:54:5d:3b:b1:1e:8d:dd:8b:4c:
6e:c8:6f:ac:15:59:7e:1b:b1:9d:10:6a:89:2e:24:
99:55:a2:fc:31:31:66:cc:e3:ec:30:49:ac:da:0f:
42:30:e4:b7:1e:6a:45:3a:26:e9:86:a8:fc:e3:dd:
cb:af:5f:3e:1d:68:f3:92:44:b3:05:30:2b:4c:6a:
f3:8d:3d:65:2b:4f:77:54:d5:1a:66:f3:f1:a5:8d:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:11:FA:7B:E4:52:F1:D0:C8:AD:BF:A2:7E:DB:EE:08:A9:F6:B5
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:74:e8:96:52:55:39:05:40:42:6d:24:b0:1e:f1:db:af:84:
8b:97:e2:03:1e:e5:76:ad:b5:64:d3:44:f9:e0:b7:15:50:d7:
da:9f:0f:4b:ff:e2:ae:eb:70:12:e3:7b:50:11:7f:7a:22:1b:
71:8c:cb:13:40:91:27:db:53:52:62:a0:6b:d6:01:a9:50:01:
3d:35:ea:37:91:0f:33:90:8b:18:cf:5c:e7:65:26:45:8a:7a:
ed:d0:a2:f4:9c:45:22:18:d7:3d:53:40:31:1f:1e:79:0f:49:
a5:fd:bd:57:7e:9c:64:99:08:af:7b:2b:29:2d:97:52:04:66:
5e:64:32:8e:e5:ae:12:4d:7a:65:f2:29:ef:3f:25:ca:be:4f:
cc:8b:a4:70:cc:d7:37:28:93:fe:e8:fd:b8:1f:03:46:a9:5d:
3b:6f:67:77:f1:b3:e1:05:5c:92:2a:dd:96:5f:c9:9d:be:81:
65:33:43:8f:28:d2:44:89:3b:cb:fb:41:32:9a:be:60:be:ac:
cb:f5:37:80:3b:72:a9:1f:56:60:ea:1c:c9:d7:93:9b:f2:85:
09:76:35:6d:ce:b8:94:23:1f:31:8c:53:5e:32:a6:36:3e:f8:
56:51:a8:ac:be:03:98:3e:34:96:b4:e6:4a:ec:b9:7e:b9:08:
8c:d1:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:45:26 2026 by rpki-client