Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: rGyaWa8mhFElfoZeYHhUND2pi3EpMXmCJo76QqqBoSw=
Subject key identifier: D4:78:89:A3:B2:38:E7:32:1D:7C:AA:7E:87:D5:01:EB:50:B4:51:FA
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 01A110721FC4B84D55E8EBFE011EA04F13C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1786
Signing time: Tue 06 Oct 2026 09:01:17 +0000
Manifest this update: Tue 06 Oct 2026 09:01:17 +0000
Manifest next update: Wed 07 Oct 2026 09:01:17 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: Trtd6VbAmf8LoaYtHtwmXez2QBfXoba6rGlgX5UO9Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 09:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:72:1f:c4:b8:4d:55:e8:eb:fe:01:1e:a0:4f:13:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Oct 6 09:01:17 2026 GMT
Not After : Oct 7 09:01:17 2026 GMT
Subject: CN=d47889a3b238e7321d7caa7e87d501eb50b451fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:c7:14:87:01:ef:8d:19:71:ed:a5:e7:20:
d2:7e:3f:89:7f:0e:e8:57:6f:8c:1b:38:5c:a3:72:
fe:71:85:a7:23:10:48:3a:42:eb:5a:b2:b4:3f:ca:
16:c8:d5:0b:d0:e2:06:5b:5a:e8:01:c7:cd:43:d2:
23:f0:6c:0f:29:2f:f1:82:80:6a:53:53:2f:ea:fe:
31:a8:1b:0f:5f:9e:83:01:21:52:1f:ed:f4:91:e0:
a8:6e:e2:42:20:c2:56:bb:40:00:ea:83:c3:e0:fb:
8c:63:ee:9e:f3:d7:fa:91:d4:89:bb:1f:62:67:73:
a1:29:61:02:67:ba:e7:97:aa:c7:06:fe:13:25:d5:
f2:7e:f6:5a:53:3e:9f:1a:94:f5:a6:d9:61:c8:f9:
3a:b4:08:be:17:e0:ef:af:94:7a:07:54:a5:c7:97:
64:7d:32:1b:e3:b3:bf:54:16:09:37:c4:99:38:71:
27:4f:b6:ab:b9:30:71:36:2e:97:06:4d:97:f6:7a:
e6:35:9f:0a:3f:79:95:ae:3b:e2:80:de:e3:23:04:
c8:d3:06:48:ad:3e:13:2c:f2:0c:07:30:7c:e1:e3:
01:16:29:d5:cd:44:e0:5a:29:68:24:98:6e:38:59:
1d:6b:9a:3e:9d:2c:4e:c5:2e:92:2d:10:ac:f6:b3:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:89:A3:B2:38:E7:32:1D:7C:AA:7E:87:D5:01:EB:50:B4:51:FA
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e3:39:ac:f1:a9:47:05:80:8e:4b:c9:d5:f8:af:52:e9:16:
83:8c:45:8d:29:61:2a:20:3b:fb:ad:f9:30:0b:6f:3a:87:50:
0b:c6:73:95:1f:9a:b7:b1:e6:50:b5:0e:76:d2:dc:36:4c:bb:
8d:ad:94:b8:7b:8e:8c:94:32:84:89:63:89:54:b6:ba:f3:71:
e5:30:65:cf:a0:32:f2:52:c3:0e:6c:ab:c6:fd:31:b7:fb:43:
cd:66:81:e8:ff:50:06:5a:73:ce:8d:ad:9e:03:66:fd:ba:e4:
18:da:61:d8:85:b9:d6:0f:73:84:32:54:41:c7:d7:18:7a:cf:
17:66:bc:34:4b:f3:be:21:9e:ef:92:b4:14:b2:14:b3:fa:f5:
67:41:ca:42:ca:e0:4d:d8:67:e9:a6:c9:91:2f:84:98:59:42:
47:85:89:de:a7:58:9c:99:c8:5d:a7:c4:3a:3a:82:12:8a:f7:
e0:8a:35:e2:56:d8:94:0c:27:83:66:18:3d:be:7d:d3:16:ee:
ba:b1:58:1f:ac:e8:18:96:46:40:94:83:2d:75:55:47:66:20:
79:91:cc:d4:f0:2e:c8:6c:5d:01:c5:f5:06:b0:be:e9:9b:1d:
be:45:7a:ae:19:44:a3:ed:f0:cc:f3:9f:6a:28:8d:97:5e:f5:
5a:e0:99:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQch/EuE1V6Ov+AR6gTxPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmY1OGU2MzZkOGJiMWRkMTAzOTZjODI0NGRjMTE5MjE1
ZTc5MTQwHhcNMjYxMDA2MDkwMTE3WhcNMjYxMDA3MDkwMTE3WjAzMTEwLwYDVQQD
EyhkNDc4ODlhM2IyMzhlNzMyMWQ3Y2FhN2U4N2Q1MDFlYjUwYjQ1MWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb3HFIcB740Zce2l5yDSfj+Jfw7o
V2+MGzhco3L+cYWnIxBIOkLrWrK0P8oWyNUL0OIGW1roAcfNQ9Ij8GwPKS/xgoBq
U1Mv6v4xqBsPX56DASFSH+30keCobuJCIMJWu0AA6oPD4PuMY+6e89f6kdSJux9i
Z3OhKWECZ7rnl6rHBv4TJdXyfvZaUz6fGpT1ptlhyPk6tAi+F+Dvr5R6B1Slx5dk
fTIb47O/VBYJN8SZOHEnT7aruTBxNi6XBk2X9nrmNZ8KP3mVrjvigN7jIwTI0wZI
rT4TLPIMBzB84eMBFinVzUTgWiloJJhuOFkda5o+nSxOxS6SLRCs9rNMWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR4iaOyOOcyHXyqfofVAetQtFH6MB8GA1UdIwQY
MBaAFG0vWOY22Lsd0QOWyCRNwRkhXnkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTct
Y2U2YjdjOWQ1NTliLzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jOTc4ZGItNjU2OS00NTQ0LTgxOTctY2U2YjdjOWQ1NTli
LzEvYlM5WTVqYll1eDNSQTViSUpFM0JHU0ZlZVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuM5rPGp
RwWAjkvJ1fivUukWg4xFjSlhKiA7+635MAtvOodQC8ZzlR+at7HmULUOdtLcNky7
ja2UuHuOjJQyhIljiVS2uvNx5TBlz6Ay8lLDDmyrxv0xt/tDzWaB6P9QBlpzzo2t
ngNm/brkGNph2IW51g9zhDJUQcfXGHrPF2a8NEvzviGe75K0FLIUs/r1Z0HKQsrg
Tdhn6abJkS+EmFlCR4WJ3qdYnJnIXafEOjqCEor34Io14lbYlAwng2YYPb590xbu
urFYH6zoGJZGQJSDLXVVR2YgeZHM1PAuyGxdAcX1BrC+6ZsdvkV6rhlEo+3wzPOf
aiiNl171WuCZeQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:42:33 2026 by rpki-client