Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: R6CkG8AXfy+ungUQ8DSsF6WsfYqdH4l87BgbIQZ4IM0=
Subject key identifier: 24:71:10:4F:3A:BB:03:9A:D1:5E:3E:90:03:68:1F:7D:34:E3:5E:94
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 01A1035B3AAE486EB4AA5E6C2BB5A49E1E1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 1A89
Signing time: Sat 03 Oct 2026 20:01:12 +0000
Manifest this update: Sat 03 Oct 2026 20:01:12 +0000
Manifest next update: Sun 04 Oct 2026 20:01:12 +0000
Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: vhQymN6ZBF6M2MIeCds70H5Rx7Cf4j+8gIkZxoSqECk=)
2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:5b:3a:ae:48:6e:b4:aa:5e:6c:2b:b5:a4:9e:1e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Oct 3 20:01:12 2026 GMT
Not After : Oct 4 20:01:12 2026 GMT
Subject: CN=2471104f3abb039ad15e3e9003681f7d34e35e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:19:ed:3c:dc:0f:6d:13:9a:76:87:21:17:
6a:a7:e2:3c:33:60:b7:b0:53:54:9f:e7:e7:95:0d:
94:11:72:34:9d:ef:c8:cb:a7:13:e3:8b:75:09:f9:
23:e0:5f:8f:ae:10:dc:e2:3e:5e:15:e1:7e:41:1f:
20:b8:a4:dd:7e:c6:e8:57:10:0f:bf:e0:4e:23:f0:
5c:66:40:8f:5b:d3:a6:77:6f:40:ee:d6:ed:bf:db:
9e:65:5f:c2:7b:c5:0f:2a:e5:c4:14:f2:a8:9e:4a:
7a:ea:00:fa:5d:90:d1:2e:74:e4:a0:02:c4:27:ed:
c2:82:9c:9a:9a:c8:e9:b5:5c:a4:dd:76:1f:5f:eb:
04:b2:4d:8b:4e:a1:34:57:79:b9:16:fc:1b:8f:29:
fd:63:7c:7c:b4:28:05:60:b2:6d:7b:a5:89:35:23:
61:8d:11:a6:0c:0b:cb:da:92:0e:b7:64:bc:42:ea:
56:d1:1f:e8:7f:54:d1:a7:48:b8:1a:72:25:07:16:
e4:81:e1:f6:ed:19:76:f7:42:3e:a6:87:25:bd:32:
9d:a0:16:eb:85:e9:ff:29:34:a2:6a:88:7b:6d:09:
ca:d9:d2:1f:63:f8:1c:65:5d:bc:fe:37:9b:95:74:
ad:09:77:be:73:06:69:c2:2f:14:6c:b2:92:5c:bb:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:71:10:4F:3A:BB:03:9A:D1:5E:3E:90:03:68:1F:7D:34:E3:5E:94
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:02:7d:6a:f2:02:91:88:67:21:55:b3:bc:60:8a:34:48:7f:
9c:cb:e4:cb:c1:c7:33:98:43:18:46:85:1a:93:92:0d:3a:dd:
d8:48:59:06:41:dd:c4:ed:67:51:ae:e2:ed:dc:25:97:6d:c0:
70:af:5d:38:1a:91:03:fe:2e:d9:95:f1:dd:9c:49:f2:e9:0d:
69:50:d0:3c:f7:01:33:c6:e3:5d:3b:23:05:22:0e:39:d9:f8:
14:c8:e1:4b:d5:a2:bd:79:9a:bf:47:24:34:ff:27:62:d8:a7:
a8:93:36:c6:4e:b5:b8:4f:5a:27:32:73:1c:11:b7:b7:7c:45:
77:67:d1:9e:8f:ea:55:77:53:96:de:1d:45:a2:4b:26:b3:92:
bc:01:7c:19:87:dc:ac:ef:72:b1:37:09:97:20:8b:00:8c:a0:
c6:52:86:5d:d8:c7:23:b8:42:f8:38:1f:e5:72:34:c4:54:6a:
d4:cf:2a:be:a8:cd:4b:4d:2f:ad:d8:0a:2b:58:e2:57:a3:c7:
c0:80:80:a9:45:c9:73:66:2f:89:8b:8f:49:45:d7:f9:66:7a:
c5:2c:16:bb:ef:e9:44:53:91:2c:36:71:29:cd:c7:6c:4e:10:
38:b1:d8:90:c5:d5:75:29:41:b2:28:4c:5b:06:de:df:dd:5f:
88:3e:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:38:20 2026 by rpki-client