Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.mft
File: BkWVFMzozn1HZDyi8w4G7f5klvI.mft (raw, json)
Hash identifier: tjwFKp0RZMvgdtMpD3GLznla6kqBQrb4m6M2bSwiGZ0=
Subject key identifier: F9:58:5E:2C:1A:58:F5:3A:1D:B4:D0:80:28:75:2E:E1:30:B5:E0:F6
Authority key identifier: 06:45:95:14:CC:E8:CE:7D:47:64:3C:A2:F3:0E:06:ED:FE:64:96:F2
Certificate issuer: /CN=06459514cce8ce7d47643ca2f30e06edfe6496f2
Certificate serial: 01A0D0B6D6AB9E24CCBF328A13FCC77B9032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkWVFMzozn1HZDyi8w4G7f5klvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.mft
Manifest number: 5C
Signing time: Thu 24 Sep 2026 00:00:38 +0000
Manifest this update: Thu 24 Sep 2026 00:00:38 +0000
Manifest next update: Fri 25 Sep 2026 00:00:38 +0000
Files and hashes: 1: BkWVFMzozn1HZDyi8w4G7f5klvI.crl (hash: ShrN2Q9A0jYYyPDW7la0gW3Y2bi4xLYZI1cjyfPE4mA=)
2: bLRnj4DV0VoC1q-ux4rlxSo1XVE.roa (hash: U38078oK/iuU4lPi1x66qkSu379rVBdEVFczLSBZpeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkWVFMzozn1HZDyi8w4G7f5klvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:d6:ab:9e:24:cc:bf:32:8a:13:fc:c7:7b:90:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06459514cce8ce7d47643ca2f30e06edfe6496f2
Validity
Not Before: Sep 24 00:00:38 2026 GMT
Not After : Sep 25 00:00:38 2026 GMT
Subject: CN=f9585e2c1a58f53a1db4d08028752ee130b5e0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:a6:c6:48:22:83:2f:db:89:5e:94:74:01:
89:94:76:ee:b3:20:5e:96:71:6c:e3:20:42:3d:35:
9a:a3:fd:ec:1b:01:11:3a:f3:61:bd:f5:bc:48:08:
3c:9e:61:2c:16:b0:19:dd:32:f1:66:16:a1:3a:f2:
36:28:87:f9:fa:23:e0:fa:44:0e:47:5c:cb:0a:a4:
67:0d:2a:b6:a9:d4:e1:a3:30:50:ea:01:0a:d2:1f:
01:a1:af:da:c8:b8:b1:95:74:45:76:61:01:35:ea:
53:f6:86:fd:05:9a:dd:5e:13:94:e4:e6:7a:9c:07:
15:f2:33:12:79:d8:2b:3f:a2:6f:d5:bf:f5:ee:5a:
d5:13:3a:60:fb:2c:14:62:ad:8b:da:dd:ff:38:19:
6e:54:d8:75:92:e9:f6:47:67:b0:9b:94:59:a0:b4:
df:0f:e0:35:d6:2f:b8:f1:c0:08:8c:fc:d8:66:bb:
62:3f:01:6e:4b:cd:5a:b9:64:57:ca:ea:4e:86:3e:
3c:c7:b2:c4:06:f7:9d:eb:08:24:83:5e:7c:cd:22:
c2:82:56:bb:e6:07:36:11:40:41:42:63:0e:e5:09:
7e:4d:de:e6:ff:6b:20:c6:f6:18:ee:1a:15:78:c1:
10:8f:f5:42:a1:a6:e8:89:72:82:01:10:77:a3:22:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:5E:2C:1A:58:F5:3A:1D:B4:D0:80:28:75:2E:E1:30:B5:E0:F6
X509v3 Authority Key Identifier:
keyid:06:45:95:14:CC:E8:CE:7D:47:64:3C:A2:F3:0E:06:ED:FE:64:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkWVFMzozn1HZDyi8w4G7f5klvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4f:30:f7:c1:17:7d:08:e1:e3:c1:18:86:bb:6c:be:e0:2f:
b4:18:d7:38:58:7f:07:4c:1e:24:b6:74:6b:dd:14:f0:27:70:
f3:01:f1:14:38:12:07:64:ff:60:f2:cd:28:c0:80:c5:38:33:
93:53:ee:2f:3b:14:16:43:b0:86:35:3e:5d:81:eb:c8:32:2d:
88:40:62:ea:ae:f8:29:b8:8b:e4:61:f7:31:c7:31:0a:e6:b5:
db:2e:e6:ce:a3:b2:d6:46:e8:a8:d9:08:54:7b:7d:92:4d:17:
f2:32:94:cf:76:a6:4f:6d:33:39:43:39:76:3c:c7:2d:56:96:
7a:62:81:76:74:5d:4c:eb:5c:32:2b:03:4a:95:95:53:ea:5f:
a1:93:76:55:66:d8:41:b3:fb:f5:46:2e:b0:ed:ba:7e:03:89:
b5:81:71:41:7b:d2:e8:83:b0:93:40:79:ed:a0:3b:36:f0:50:
6b:41:79:a5:a1:ee:ac:47:5a:4a:5d:3e:17:75:50:32:cf:eb:
1c:00:59:08:44:26:38:e7:5c:a6:e0:53:f3:70:91:12:fc:9d:
b3:a9:b6:98:e2:48:c2:cd:a2:5d:83:3f:a7:73:33:27:95:cc:
d5:8e:7b:bc:d4:fd:6b:89:d7:43:00:c5:53:1f:ce:1f:00:4d:
e6:16:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:45:41 2026 by rpki-client