Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: hKOH87z1Ij72vbhH2kGc3QrawOOLPcbj/WFX8HMnezA=
Subject key identifier: D4:F8:58:DF:2E:09:4A:AB:EC:4D:85:52:C8:CE:D6:9D:95:4A:CB:22
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 019E20FFAE0D6F252A63AAE48D7E52FD6DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 1343
Signing time: Wed 13 May 2026 11:01:27 +0000
Manifest this update: Wed 13 May 2026 11:01:27 +0000
Manifest next update: Thu 14 May 2026 11:01:27 +0000
Files and hashes: 1: pBZly4FM6dBwlJDuWkuLuvUQhJg.roa (hash: o71HDV8s+9P3IJ7RipmOqIZNCQQ65Mxlc2gRRdwJM+c=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: Jot4ESV+LgdVPlOUFqqSIy6qltcVo9N4qicr1ZP1mb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:ae:0d:6f:25:2a:63:aa:e4:8d:7e:52:fd:6d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: May 13 11:01:27 2026 GMT
Not After : May 14 11:01:27 2026 GMT
Subject: CN=d4f858df2e094aabec4d8552c8ced69d954acb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:ba:97:fe:49:91:fa:e9:6a:96:d0:ed:db:
39:28:94:ef:0f:6e:b6:21:f0:85:8b:06:6f:32:8b:
45:7e:42:24:44:62:22:74:b6:8f:a7:13:86:76:91:
8f:8f:e8:9c:30:3d:8d:d5:cb:7d:2b:1e:72:4e:0f:
8d:b0:64:a4:bf:74:c5:a8:6d:54:cd:ae:27:6f:97:
42:55:f5:2c:ae:31:03:5c:07:d8:f2:46:d4:85:ec:
35:07:22:d1:2b:0d:8e:ea:b7:bd:89:25:64:32:a9:
3b:c2:b9:a9:3c:66:22:ae:c0:0a:52:d4:61:53:73:
cc:3e:e5:2c:3a:79:9d:91:89:0b:d1:53:e0:1a:25:
ae:c4:2e:41:1a:64:d0:97:cb:74:cb:c6:31:f1:d5:
d7:e8:8a:f6:13:12:1d:84:cd:4d:0d:41:79:9e:d5:
d9:68:13:25:11:cc:73:85:ab:38:3f:dd:5b:c8:9f:
10:95:61:16:1f:61:23:e5:06:f4:09:b7:23:00:fc:
e9:bc:d6:fb:7c:9b:67:4a:4e:7e:e6:75:48:3d:cd:
7f:32:52:9b:53:78:8b:c7:4c:59:9a:f0:8f:73:53:
8f:7c:f5:14:95:ef:f6:98:77:61:ef:62:b5:5e:41:
17:b4:f0:fc:52:b2:48:d4:59:d2:6b:db:8d:2b:fc:
e8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F8:58:DF:2E:09:4A:AB:EC:4D:85:52:C8:CE:D6:9D:95:4A:CB:22
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a9:60:02:4b:49:b4:d8:51:6d:46:7d:0b:b8:fe:aa:a6:22:
b8:9e:7e:ad:a8:ea:0b:82:ea:f8:63:00:ff:96:da:9f:ad:f6:
c7:34:73:19:09:9d:93:9e:c1:0c:ef:5b:27:9e:0f:f2:79:8c:
8c:42:5d:9c:55:36:dd:e6:82:d9:e5:f5:76:df:26:fb:ee:73:
9e:71:d4:9b:b4:a0:6a:3f:5c:3b:22:6e:88:c8:37:8e:91:a4:
fd:66:30:d9:16:cf:60:ef:33:39:57:7c:7f:62:b5:88:a8:58:
d7:9b:31:64:2e:2c:f3:1e:ff:aa:f6:ac:03:15:e1:70:1b:d2:
1a:8f:4d:b9:dc:df:c0:ba:8a:8d:e9:45:50:1a:b4:e9:5a:59:
e7:48:85:ad:9d:b4:40:f4:63:ed:5a:80:13:b5:95:f0:06:89:
6b:b2:0a:c5:6a:e8:61:1c:cb:16:51:4c:14:15:eb:96:a2:32:
17:8f:d4:97:78:99:30:d1:5a:b8:52:4a:23:04:09:61:a1:06:
96:62:d5:24:f9:ad:fc:0d:b1:9f:2d:00:04:ed:b6:b6:58:06:
9e:cf:a6:05:67:70:73:77:f6:01:47:b3:b3:59:eb:00:a0:79:
87:22:3b:29:c2:1d:50:20:17:4c:25:89:d7:e8:40:a8:e0:6f:
f6:fa:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:41 2026 by rpki-client