Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: UN0qjNFzVYTMI7sL9OtoLltmAF2FOGI8KkBPJ/lMOo0=
Subject key identifier: BD:9C:0B:5E:CA:E6:3A:F5:1E:14:EA:E3:E9:05:15:52:46:FF:F1:12
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 01A0CE2381849458C9B4CC181CCDFC8FCE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 12:00:28 +0000
Manifest this update: Wed 23 Sep 2026 12:00:28 +0000
Manifest next update: Thu 24 Sep 2026 12:00:28 +0000
Files and hashes: 1: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: n9hNiyh3z5rMCc8AkOY4fBlyP5lYmXSZ197E7MzuAQU=)
2: UG82JYjOL5Jql3nxWvN-Xh4Nr4A.roa (hash: 05+0vfIPDLVFjVB3L2D7iJWPXu6x5fdq82fKXp61A0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:81:84:94:58:c9:b4:cc:18:1c:cd:fc:8f:ce:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Sep 23 12:00:28 2026 GMT
Not After : Sep 24 12:00:28 2026 GMT
Subject: CN=bd9c0b5ecae63af51e14eae3e905155246fff112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:dd:54:b5:08:d2:7f:01:29:46:4b:9c:ad:
ca:5a:52:a9:9d:8a:5d:bc:b3:8d:e4:ed:4c:e7:3a:
ae:15:6b:b2:21:2a:5b:42:47:49:15:a6:07:6e:95:
1c:0b:11:0a:f2:c4:ff:c1:f8:ef:30:1a:f3:5e:1a:
af:4f:a0:c1:e5:c4:89:85:88:19:52:c3:1d:ef:ac:
f5:b8:e1:41:df:6b:56:e4:94:bb:74:21:0d:31:26:
e3:82:21:70:18:bd:b1:7d:4f:52:ec:7d:78:30:67:
49:0a:2a:17:fb:83:89:d0:bd:e8:6c:18:4d:98:c3:
74:03:57:67:72:d0:3d:56:b3:76:cb:3e:ac:cd:5a:
7e:50:d2:e5:45:53:f4:71:e4:50:f3:dd:dc:a6:b0:
68:05:59:af:8c:62:a9:79:c5:5b:45:bc:79:e9:c8:
d6:89:d2:03:c1:9c:c6:87:a0:09:35:90:3b:89:ce:
24:03:78:90:4d:f9:94:b7:5c:67:fe:00:ab:d6:e0:
93:29:ca:13:3b:6c:03:e4:b8:55:ef:06:87:b4:62:
31:c6:26:03:0f:92:c0:68:cd:c9:c6:1f:70:bb:73:
48:85:68:90:0f:ed:3e:bb:85:ba:5b:41:e2:d6:37:
db:4c:a9:86:13:b6:45:28:b5:14:5e:a7:e2:71:f4:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:0B:5E:CA:E6:3A:F5:1E:14:EA:E3:E9:05:15:52:46:FF:F1:12
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:19:86:1b:37:35:bd:51:f7:19:3d:12:d5:65:34:1c:bb:22:
2c:2a:16:e9:1e:4a:f0:b0:a7:5d:45:05:40:53:f0:ab:13:ff:
cb:c0:ab:29:a3:d8:d5:89:cd:ea:af:1d:d8:f3:cd:ca:22:a2:
fc:6e:23:a9:75:18:63:ce:a1:aa:62:9f:e2:87:31:ef:5c:b5:
77:df:a3:79:8a:07:6f:58:ac:16:51:4c:06:ba:a6:e3:1b:d9:
ed:6b:85:8e:66:0f:80:f2:22:3e:79:fc:eb:a2:6d:49:36:fa:
2f:21:23:a4:44:1f:6b:62:4c:6c:b5:30:ea:72:39:c2:97:91:
3a:6c:e3:c6:5c:cf:65:04:cb:4f:f1:a4:fd:59:96:a1:ed:24:
d8:78:39:a9:dc:72:3f:03:81:18:56:50:6b:f2:34:53:d7:39:
36:0d:db:b2:9d:19:5d:b7:6a:b5:2b:e1:66:51:66:97:8e:55:
6f:9f:ad:27:a6:1a:d4:bf:bb:3f:a1:90:e1:f6:6b:07:23:79:
4c:99:62:cd:b1:42:eb:9d:ff:f0:0d:0b:89:e7:5f:f6:9a:52:
94:6c:b2:c5:f9:c8:2a:1d:56:b8:45:84:ba:c2:5b:e1:b0:bb:
22:43:44:e6:78:ed:76:bc:65:9a:b3:a3:fd:e1:56:6f:e3:9a:
0b:ac:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:22 2026 by rpki-client