Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: mHbqosGh6HKdxWCWBvUCxTLJh+gNJwBdU9O538/BXuY=
Subject key identifier: E6:C0:92:20:9E:3E:92:72:ED:42:9D:98:F9:88:03:00:2D:C9:A5:25
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 01A0F90E6F8DE87141A4C0D191B9ABB4258E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 14BC
Signing time: Thu 01 Oct 2026 20:01:07 +0000
Manifest this update: Thu 01 Oct 2026 20:01:07 +0000
Manifest next update: Fri 02 Oct 2026 20:01:07 +0000
Files and hashes: 1: pBZly4FM6dBwlJDuWkuLuvUQhJg.roa (hash: o71HDV8s+9P3IJ7RipmOqIZNCQQ65Mxlc2gRRdwJM+c=)
2: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: Fp1vk+Jsb8e1LaWp6jlEz2MK7p4yKeTdunpiqMfPcPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0e:6f:8d:e8:71:41:a4:c0:d1:91:b9:ab:b4:25:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Oct 1 20:01:07 2026 GMT
Not After : Oct 2 20:01:07 2026 GMT
Subject: CN=e6c092209e3e9272ed429d98f98803002dc9a525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:4d:4f:d4:a5:5f:17:09:92:43:90:74:31:
63:4e:d6:13:8a:87:cf:05:fc:c0:79:c4:19:99:8b:
62:eb:ac:9f:a1:72:64:e4:fa:04:4f:af:42:e1:c0:
40:0d:aa:aa:5c:a5:0b:3b:2f:4f:9e:77:17:6d:ee:
a8:14:e7:a3:70:4b:7a:5d:1e:81:08:2c:ef:c4:3b:
a5:1a:4f:cd:39:32:18:24:2e:67:72:78:d2:d7:48:
f7:a6:17:b6:bb:b7:25:fe:7d:e8:39:b0:b9:5c:d1:
b9:0f:65:c4:c2:27:1e:57:a6:b3:dc:52:f0:a8:64:
d4:6b:da:77:77:42:bc:dc:08:ba:72:2c:2b:dd:c8:
ff:ce:5d:0a:4c:a9:2b:0d:e3:57:da:07:2f:9f:b6:
8d:26:a3:f3:65:5c:26:e9:d3:a0:75:3c:89:74:79:
4a:db:b9:fa:f3:d3:55:81:bf:c2:ae:f5:35:b8:f0:
6f:05:af:a2:07:5f:41:28:3c:12:92:05:ca:64:cb:
ea:69:6c:34:fc:52:d9:a0:ca:ca:1e:39:d1:4a:9d:
9f:79:49:90:80:b8:49:7f:31:33:9d:ee:ea:c5:76:
82:cb:6a:9a:dc:cc:42:2c:d6:1c:21:75:c8:09:e0:
7b:bf:8c:8a:9f:ac:46:77:9e:40:c9:fd:4d:cc:53:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C0:92:20:9E:3E:92:72:ED:42:9D:98:F9:88:03:00:2D:C9:A5:25
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a0:df:e0:d0:18:25:ca:95:76:7e:34:51:f2:97:1d:54:9f:
f9:72:3f:6f:b0:40:9a:38:e7:e3:be:f6:c1:fa:9b:45:e8:08:
34:6b:68:77:cc:b4:4b:92:67:e3:35:30:a8:ba:da:c9:80:3a:
a1:fd:87:d3:1a:1b:70:b1:af:2d:6b:3c:5f:c5:e6:f4:0d:75:
52:23:88:e8:ff:af:f2:58:7c:4f:ff:c0:4b:21:21:48:92:7e:
02:bb:a7:bc:de:dd:2c:e9:39:9c:61:6e:90:a5:73:33:6e:f8:
f3:34:97:16:c5:67:a1:d7:d6:33:eb:a7:19:d8:1a:ea:d9:ff:
59:d9:23:2e:8c:40:59:46:8d:1e:c5:50:c2:eb:66:1b:6c:84:
cf:b4:b0:9d:51:23:9c:a1:7a:35:a6:82:ca:31:fa:b0:c9:60:
80:18:d2:2f:1d:5f:94:00:a3:1a:26:4a:43:73:a3:1e:6a:2c:
2a:e4:ba:9f:73:ad:62:7d:28:3b:44:a8:13:73:27:4b:a3:c1:
5b:49:e8:d4:e0:4f:1e:fc:66:8d:e5:f1:cb:4b:87:5f:9a:98:
a7:44:66:92:a2:10:0e:8e:19:96:6d:50:05:0c:3e:d0:6e:e7:
0b:a9:16:e5:1d:9d:b9:e1:58:50:94:23:a6:42:1d:b0:fb:f1:
fd:33:91:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:49:42 2026 by rpki-client