Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: DAKcV9PJVeovM2DAAz7cuKSSc1I6ivCweeHNNS9XQ/0=
Subject key identifier: BB:A6:89:57:71:BB:BF:55:70:70:FC:9F:7A:A0:40:81:AC:07:20:BB
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019E2135D6B4EA403279BF54B674B908FFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1601
Signing time: Wed 13 May 2026 12:00:36 +0000
Manifest this update: Wed 13 May 2026 12:00:36 +0000
Manifest next update: Thu 14 May 2026 12:00:36 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: dMDpCAcNf5ny6CJXk5Y2PKTn15KGi/RujUv68QSTkgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:d6:b4:ea:40:32:79:bf:54:b6:74:b9:08:ff:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: May 13 12:00:36 2026 GMT
Not After : May 14 12:00:36 2026 GMT
Subject: CN=bba6895771bbbf557070fc9f7aa04081ac0720bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:d2:94:63:a8:44:7c:fd:7b:36:50:62:43:
7a:bd:c3:cf:9d:ff:84:3f:e7:77:0a:c8:a7:f0:e9:
c8:eb:ce:87:18:6f:42:c2:21:66:8d:2c:aa:67:e3:
cf:0f:6e:7f:04:ff:de:f2:f8:8b:31:19:48:a2:8d:
75:59:8e:24:a1:95:7f:8b:63:9b:32:ba:c2:51:ce:
fe:9f:66:82:05:07:fe:d6:d7:fb:28:75:99:ad:26:
39:be:09:fd:59:eb:00:ad:09:7a:a6:a1:e6:ff:06:
db:b3:35:42:c0:b8:34:8e:91:55:1b:49:8c:39:74:
53:fd:e4:4d:6c:f6:82:2c:42:13:c2:ff:33:b1:3d:
21:f0:8f:29:84:11:31:5e:0c:cc:2d:ba:58:0d:97:
19:bc:6a:fe:60:2d:2f:55:19:07:b2:f6:2a:27:0d:
2c:73:1e:85:51:26:a0:8a:88:41:8b:6b:ba:cd:ef:
c4:ac:47:73:13:55:ce:f7:07:2f:2b:c8:a4:13:aa:
73:f6:4d:14:cf:8f:d3:5a:37:55:a6:e9:5f:40:4d:
0d:4f:ce:e9:e0:19:6c:97:cd:24:8b:b2:7e:9e:59:
52:fb:7d:0d:32:c0:03:bb:ff:78:dc:4b:13:55:2e:
a0:b6:20:34:9d:75:6d:c6:fc:14:e8:a1:a3:00:50:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:89:57:71:BB:BF:55:70:70:FC:9F:7A:A0:40:81:AC:07:20:BB
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6e:39:4c:19:07:6e:6e:04:7a:d3:03:ac:4f:7d:88:8d:08:
47:c6:31:0a:99:91:28:ea:0e:0a:6e:b0:a7:cb:59:17:a4:ce:
e6:0d:a5:89:30:ba:ec:c4:c3:5c:74:ff:3c:fe:fc:10:24:3c:
6a:04:b1:e3:29:37:9a:4b:76:38:b8:f4:a7:f8:4a:44:c7:cc:
95:5d:ac:45:e4:f0:8b:81:d5:48:63:17:16:36:e9:a1:0d:81:
33:28:fa:30:24:6d:e3:eb:0e:11:a4:02:a6:ff:a2:b7:73:76:
32:4d:55:3a:2a:69:e9:93:5b:21:b2:ef:97:73:7a:af:73:00:
e9:36:c9:c4:44:d3:52:89:f9:62:26:65:4b:c1:b5:50:5a:96:
79:5c:98:19:77:1f:38:27:2e:87:57:a4:fa:08:8e:49:ad:98:
16:84:b9:ed:55:c1:14:bb:07:17:e8:07:09:49:b3:07:eb:3e:
48:22:3c:82:41:a6:25:a2:23:aa:e1:c9:68:b8:67:a3:c4:df:
a5:79:8c:be:2d:b7:c2:40:67:d7:8b:4d:9a:1a:e1:fd:80:9a:
96:ef:cb:d9:ad:8e:ee:6d:39:86:bb:0b:62:53:94:d5:7a:d1:
d4:19:35:57:b1:33:ee:00:34:20:7d:fa:fe:26:b4:f1:a1:dc:
79:e1:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:29 2026 by rpki-client