Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: qdfvY6f09Car5k/HcMcIMrti1+Zdzzj5FS6jeAdhQ1o=
Subject key identifier: 94:AE:48:5D:17:99:E8:31:C4:3C:13:7F:95:25:D2:74:B1:5D:ED:E5
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 01A10090CF6919DAB04988F9CA88F627A774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 07:00:52 +0000
Manifest this update: Sat 03 Oct 2026 07:00:52 +0000
Manifest next update: Sun 04 Oct 2026 07:00:52 +0000
Files and hashes: 1: SUVgPcCNecAn7h3a2odgkdUnXAE.asa (hash: JHYm3gRUz1k6I2OldseBDJbvhLcJl5oAw0QgRA7AXfE=)
2: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: p2O/n4nxLm68ChxCfN/QmlMcoeWlzjTM4lRq0GJMe8E=)
3: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:90:cf:69:19:da:b0:49:88:f9:ca:88:f6:27:a7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Oct 3 07:00:52 2026 GMT
Not After : Oct 4 07:00:52 2026 GMT
Subject: CN=94ae485d1799e831c43c137f9525d274b15dede5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:89:10:61:98:12:8d:70:53:6b:d3:36:a8:
1c:e6:1a:6a:8a:91:f0:1f:34:f4:de:f9:23:85:db:
b8:54:91:8c:e3:75:92:a3:32:70:c2:d9:ca:98:65:
58:48:68:3d:18:b6:05:e8:ed:b4:69:c8:9a:d6:b3:
89:dc:46:49:0d:d5:96:0d:31:53:1f:e8:f5:42:db:
d5:21:ef:83:3a:64:7a:6d:f7:4b:03:49:98:b4:e9:
d9:30:f9:dc:cb:26:40:82:4d:2d:85:15:1c:94:ee:
01:d8:ae:8d:f4:ee:fd:c6:45:49:7c:40:0b:25:14:
61:ab:26:1d:54:2c:2a:23:ac:03:94:02:85:d5:70:
04:60:bd:dc:dc:ef:b9:f4:42:10:1b:95:28:82:65:
9e:d8:cc:f1:80:4a:76:3d:bd:0d:00:6a:45:04:ae:
17:f3:8b:71:a1:01:ed:ae:02:66:3f:40:87:fc:bf:
1e:16:76:ef:55:21:b6:9c:7c:cf:e7:79:f7:39:8c:
c2:76:b1:55:e8:18:9c:3e:22:6a:85:ee:87:b7:ce:
5c:6c:dc:47:56:f9:7c:0a:6a:f7:61:3a:53:79:21:
51:61:c6:42:9c:a6:19:36:60:c0:f0:b2:92:5d:ac:
40:f2:80:d5:22:a5:05:93:15:5c:73:73:76:ec:23:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:48:5D:17:99:E8:31:C4:3C:13:7F:95:25:D2:74:B1:5D:ED:E5
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:11:7f:3a:ce:c0:78:81:ec:22:b7:6a:80:6e:c2:a8:13:96:
94:0f:0c:d8:24:51:5b:9a:5a:c8:e1:64:63:2e:b7:df:27:50:
4d:26:8a:24:88:b0:d4:62:7f:62:52:c5:78:ac:6e:48:45:e5:
11:12:57:6c:07:fd:6a:e8:3e:b6:9f:09:b5:d6:e3:7e:4c:a8:
a1:4e:1e:1b:ee:76:85:c6:38:e8:72:fa:f9:7a:ef:fc:f3:cc:
f3:72:ac:cd:49:30:89:1b:cf:1f:86:e2:bc:08:9f:e0:4b:2e:
7d:f3:d9:6c:3e:14:2b:a4:ff:74:6d:7f:25:fd:fe:24:b1:e9:
b7:49:ae:ef:9c:32:bb:1f:1e:c3:b3:ed:f9:c5:f1:d0:75:70:
c1:71:34:77:0e:32:6b:41:d0:c4:ff:e6:47:a8:8f:cb:ee:5d:
e3:0e:42:2c:d4:4d:93:15:fa:88:89:fb:f0:9c:13:e1:b5:3b:
a2:6e:4f:e4:bd:29:7d:f3:26:e9:bb:df:b5:5a:07:03:16:61:
6d:c8:40:72:10:18:86:62:e6:46:46:f5:aa:df:1f:f9:5a:21:
a9:0d:e7:04:b8:14:90:98:18:9e:06:33:d8:8e:aa:42:04:50:
d4:ec:b2:ed:8c:1a:25:0d:5b:c4:f1:19:5e:8b:e8:11:ab:64:
84:18:a5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:47:27 2026 by rpki-client