Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: JJUnjQkjCM4ABHT03Imb4cYCn9CnTQftCkgPb/EDQ4U=
Subject key identifier: 43:A9:09:E2:CC:B1:2F:32:97:08:33:7F:5C:EE:44:DB:3C:6F:FA:72
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 01A0FFB5CBD011129938829089DCF4B71E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 17D0
Signing time: Sat 03 Oct 2026 03:01:39 +0000
Manifest this update: Sat 03 Oct 2026 03:01:39 +0000
Manifest next update: Sun 04 Oct 2026 03:01:39 +0000
Files and hashes: 1: 13x6q0kK4jWtFgTsaQE2IuvYeC0.roa (hash: jOVJU7qUmDkbddDyA5OyhBcSOp8ncmsAOoZ16mvRU1k=)
2: 2TPDXIW8nRhH-zn4Tm9ZPC07Xoo.roa (hash: vNp+e/Xr5uBDdSepNIMLpg+2kp7VmOLIl/0ANnudWck=)
3: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: q1Z9ZtJv4SlH0dBTuILOk07qWg9QDcDK2YanfmhquI0=)
4: ekrqCKLizVAMKQXSGPD3DpBP_OY.roa (hash: s5CParuuwC3JvXqHExuQ7yQFo1a7fTuNWPzfjB6dlrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:cb:d0:11:12:99:38:82:90:89:dc:f4:b7:1e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Oct 3 03:01:39 2026 GMT
Not After : Oct 4 03:01:39 2026 GMT
Subject: CN=43a909e2ccb12f329708337f5cee44db3c6ffa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:96:2b:e9:9a:d8:18:b7:f3:13:cf:23:6e:
ee:19:ad:28:f6:2c:b6:55:f4:f1:23:82:6f:11:62:
7f:c3:d9:d9:97:03:e0:c3:c4:37:1d:c0:12:b0:b0:
8a:0f:8c:0d:5e:14:2d:33:a4:3a:32:ed:8b:6f:ad:
a0:8a:97:59:7f:9c:b2:35:66:d2:f2:4d:ec:2a:05:
a8:ff:ce:6d:ab:51:f7:2a:8a:99:20:77:44:f9:b5:
83:1f:77:ec:55:b9:07:9d:0d:93:46:10:5c:ed:4e:
36:f7:2f:37:58:c9:46:e2:cd:88:d8:ae:47:93:34:
ec:c0:48:68:6a:f3:a5:3f:63:de:1b:d2:b7:14:9a:
ff:7f:44:d3:0b:5f:23:89:96:41:23:a3:ef:37:5d:
ec:91:9f:27:83:64:04:28:1a:48:21:16:93:c4:29:
77:5f:99:30:6a:0c:d0:cb:bc:81:8c:65:9f:97:b4:
67:62:81:d3:db:86:9a:96:aa:86:4c:d8:a4:f8:7e:
52:42:7c:61:41:a9:d6:26:1c:54:e1:5d:1b:69:22:
62:a3:b7:85:f9:f3:cc:55:ab:ec:01:58:f9:c0:76:
49:05:4a:a7:b8:2b:25:eb:36:ed:df:d3:b3:60:f3:
92:b7:88:71:00:11:0d:07:60:4d:e9:24:b2:55:7e:
67:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A9:09:E2:CC:B1:2F:32:97:08:33:7F:5C:EE:44:DB:3C:6F:FA:72
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:70:52:1b:e9:99:91:3f:3e:8a:94:7f:a9:55:b0:da:65:c3:
7c:4d:70:8c:e8:0f:f3:e1:00:9e:db:a6:35:38:06:e4:9e:8a:
b6:ab:11:e9:7a:56:64:a1:bb:b2:86:c5:e2:b9:a1:e7:5d:cb:
95:fc:58:5a:ba:a2:8a:14:9f:4d:ed:50:bc:93:a2:c3:7d:57:
c2:fd:d3:00:07:a1:cc:a9:82:e8:04:66:2c:6a:3c:17:9b:53:
cd:cb:3c:af:54:09:9d:d6:a1:fe:37:29:78:43:30:56:90:62:
d6:08:f4:a2:5a:5e:e6:c5:d8:4e:55:f2:f0:9a:2a:e8:1a:20:
2a:47:63:03:d7:4a:34:fe:1a:f8:ff:68:d0:94:da:ff:94:6b:
88:07:a1:de:64:29:35:67:bd:be:98:9c:92:1e:3e:b7:63:2c:
5b:ca:ec:61:b5:75:16:cd:c1:20:46:8a:5f:da:82:33:0b:19:
72:8e:1e:92:c4:05:96:93:4d:ea:01:46:0b:cf:40:b7:b3:bf:
49:63:94:fb:c1:f4:6f:f4:6d:58:48:7c:45:cd:e7:28:3d:0d:
cd:01:2c:ff:e6:0a:8a:3d:01:23:76:a8:e4:67:f8:05:6e:76:
de:44:c1:54:ae:29:48:58:14:8b:13:67:f0:1e:e3:48:ed:bc:
41:3c:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:44:02 2026 by rpki-client