Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
File: bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft (raw, json)
Hash identifier: DIbx3G14GhbiVo+/dFaxI4gF95pFmKQCwVNtietweXE=
Subject key identifier: 41:66:C3:DE:9E:43:53:94:58:55:B7:3D:2A:B3:16:0E:E8:D9:2A:3A
Authority key identifier: 6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
Certificate issuer: /CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Certificate serial: 01A0F2D5677395A6DFDDF196CF594C7BE2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 15:01:06 +0000
Manifest this update: Wed 30 Sep 2026 15:01:06 +0000
Manifest next update: Thu 01 Oct 2026 15:01:06 +0000
Files and hashes: 1: bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl (hash: wwhfQqrVx8OHjD6WWMQHdx0zyvHJN7cr11vl0EaGuT0=)
2: plAMGVXNXWtFejbG7iio91PMiaw.roa (hash: 58FHfUkq55AqJ4HX7rCOQcZBxJ2v0NdBhojmOIwPxJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:d5:67:73:95:a6:df:dd:f1:96:cf:59:4c:7b:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d003c2fe657ec4e543804430c4b8ad0c2f058fa
Validity
Not Before: Sep 30 15:01:06 2026 GMT
Not After : Oct 1 15:01:06 2026 GMT
Subject: CN=4166c3de9e4353945855b73d2ab3160ee8d92a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:56:3d:3e:84:13:d2:23:4e:51:d1:c3:62:
1e:79:27:38:f1:ea:de:85:22:48:85:66:3a:1f:49:
ea:71:a3:61:55:39:36:e7:8c:5c:b1:14:97:dd:d0:
61:7f:76:d0:54:af:cd:1a:64:6c:9d:94:22:02:c9:
e7:fd:4c:77:1e:4a:73:bf:6f:13:b8:0b:fa:be:51:
4c:f7:90:2b:12:9e:73:b7:ef:98:53:56:ac:4c:0c:
0a:af:85:d6:f1:ef:3b:c4:17:76:84:8c:b5:46:dd:
67:9b:aa:3e:62:aa:41:03:af:92:4f:d4:dd:d0:5c:
0d:d5:08:a6:7c:fd:4e:85:55:80:69:f8:e6:7e:36:
5d:d6:42:47:d4:8d:3f:4d:14:ba:00:d9:e7:21:b6:
84:fc:38:8c:0a:dd:fb:61:9b:44:29:6e:f0:a0:f9:
8a:a5:a6:7a:57:a4:67:83:8b:fc:b5:ef:42:dc:e7:
fc:c2:eb:12:4d:93:f9:b4:92:a0:34:d0:8f:c4:90:
60:aa:27:bc:c9:12:b8:a4:22:1a:a0:cb:2d:7f:30:
36:d4:29:7c:32:a7:1e:d5:73:fe:9d:86:df:77:03:
18:3a:91:76:25:34:ea:ff:dd:36:e8:d3:b7:9d:fe:
26:d8:ab:70:ac:78:63:30:63:2e:96:ca:5a:d3:7b:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:C3:DE:9E:43:53:94:58:55:B7:3D:2A:B3:16:0E:E8:D9:2A:3A
X509v3 Authority Key Identifier:
keyid:6D:00:3C:2F:E6:57:EC:4E:54:38:04:43:0C:4B:8A:D0:C2:F0:58:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQA8L-ZX7E5UOARDDEuK0MLwWPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/bQA8L-ZX7E5UOARDDEuK0MLwWPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:26:d3:25:45:54:99:5b:d0:e7:3d:0f:13:dc:f3:f5:d7:22:
aa:a7:db:43:dc:ba:a3:36:73:c6:2a:43:ec:79:8d:49:30:93:
e6:63:54:53:df:cc:d6:ea:ac:83:49:2e:4d:48:3e:3a:56:ff:
89:bb:a9:5f:a6:74:b1:92:bd:f4:d3:b8:d5:b3:97:20:52:37:
b0:f5:4e:60:1b:a6:85:73:2e:8a:e1:a4:aa:e9:f0:32:12:04:
5d:7f:ef:2d:62:0a:4f:85:01:a1:69:c7:5f:6e:05:d4:29:c7:
ff:66:ca:55:dc:95:49:d2:38:9a:ec:3c:b8:9d:22:d8:c6:06:
13:65:c1:3c:65:6b:92:31:52:ee:bc:26:81:8e:01:2f:dc:75:
6d:64:da:45:43:58:1a:c6:e0:55:d5:b2:6c:54:f2:f7:34:85:
eb:f2:6f:31:b3:69:28:95:bd:04:fc:a2:67:0f:34:5d:7c:3c:
53:70:94:b2:44:8e:7c:cc:28:3b:96:46:a8:21:d4:a7:10:fb:
6d:27:2c:3b:4e:00:26:81:8b:6b:1f:bc:17:fe:32:a0:fa:79:
7b:25:e9:a4:8f:39:45:aa:f1:36:9f:c0:20:29:c3:9e:0a:8d:
8c:db:1f:29:c3:20:04:36:34:f7:92:54:3f:34:9a:61:a7:83:
2e:ac:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:41:40 2026 by rpki-client