Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: RIVLowNE+lo8PKJ/nvLoE1yBRATb0gr+z5tv+nzsOzg=
Subject key identifier: B7:CF:39:FE:BF:7E:C6:30:30:9A:7C:9E:8A:08:84:09:28:68:FB:2F
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01A0D9F1B1DC178D66949C9AEDC33E337C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 1A89
Signing time: Fri 25 Sep 2026 19:01:30 +0000
Manifest this update: Fri 25 Sep 2026 19:01:30 +0000
Manifest next update: Sat 26 Sep 2026 19:01:30 +0000
Files and hashes: 1: LWs_a-IjpKyiNHYmRA5l6DCBk5w.roa (hash: sxEGN7MwA9AyuNhX1MvFrW1Irc6EYC19ff7DBTf7fx0=)
2: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
3: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
4: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
5: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: ngrWqDBn9gz0bI/6mihf970d2sHiNM2YoJdfvupIfPk=)
6: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
7: ocrWH4LXI5AcanxmF84LShRjSnA.roa (hash: IvINQVuazfHHpSQNQUlXHe0rPDP3TKBhqPqw+YoqC5E=)
8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:b1:dc:17:8d:66:94:9c:9a:ed:c3:3e:33:7c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Sep 25 19:01:30 2026 GMT
Not After : Sep 26 19:01:30 2026 GMT
Subject: CN=b7cf39febf7ec630309a7c9e8a0884092868fb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:cf:6f:af:f5:e1:29:b5:1a:ec:14:60:d3:
a8:f1:3e:97:b4:99:eb:c6:ee:57:d3:e2:1a:3b:8f:
98:51:65:b3:83:8e:8c:d9:1c:95:98:d8:16:53:32:
5c:fe:cd:b1:7c:52:b7:a3:0f:e6:df:27:c0:7d:06:
23:66:1e:a2:98:44:28:4c:87:9f:ab:61:5b:b1:52:
71:54:f8:0c:a9:d1:6d:e9:4c:90:ae:b2:53:db:b0:
b4:4f:af:9d:5b:45:8e:6b:20:df:d9:0a:ac:d6:55:
03:34:cc:22:76:79:6e:7e:b3:39:55:e9:5c:50:8d:
d4:b0:be:1a:a6:a4:fc:f3:2a:9d:6d:8f:93:81:76:
11:7c:b0:f4:20:02:c9:90:2c:08:c4:3b:9d:9e:4d:
5b:f7:95:d7:6b:46:82:1c:9f:ca:e6:4e:33:bc:44:
a6:38:08:f0:eb:c0:35:d5:b4:64:58:f1:5c:f5:01:
ff:51:c3:79:9c:44:81:d5:36:9c:1c:f0:bd:b7:56:
db:89:ea:54:6e:ea:f6:81:d2:3a:d0:e4:c1:0a:49:
88:96:2d:cb:d5:e9:88:00:f3:5d:db:ce:c8:a9:d9:
13:0b:21:89:e5:60:70:68:43:0a:ea:f1:da:b5:d6:
2f:f7:12:6b:bc:40:64:72:a6:e2:be:6b:f1:f2:59:
97:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:39:FE:BF:7E:C6:30:30:9A:7C:9E:8A:08:84:09:28:68:FB:2F
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:65:b9:f3:77:9d:d3:03:f0:09:ef:56:be:73:d1:e7:2f:f7:
6c:6f:8f:a9:57:a1:a9:a1:de:58:0a:0f:98:f7:25:c2:1f:4a:
5f:20:57:5d:9f:c0:8c:91:a0:bc:74:b7:10:a8:e1:f9:83:ef:
ed:8f:b2:14:bf:42:d4:08:bc:2d:8b:dd:7a:6c:c7:23:6d:81:
ae:b4:dd:a6:5f:c1:55:90:b1:6e:6e:bd:d7:3a:bf:c7:cd:f0:
7c:d5:b9:90:97:09:08:cd:7d:7a:ec:ac:fd:8d:70:25:75:1a:
af:cb:bd:58:0d:19:3b:a4:bd:07:47:c6:f3:7a:24:74:1b:a7:
ad:5d:aa:eb:13:a0:1d:c6:45:9a:bf:19:53:09:19:09:8b:24:
6f:51:46:f8:46:84:5e:19:8e:4e:44:03:75:48:86:07:34:44:
ab:ee:e2:42:7c:73:30:86:16:6c:a6:b6:51:db:9c:8b:23:e1:
2a:34:42:af:c9:a6:12:7d:e1:fe:af:b0:76:e7:93:ad:39:81:
56:32:d5:55:0e:72:57:20:76:63:b6:31:82:ea:e1:45:ac:39:
e7:39:c8:88:7b:20:4e:be:a8:30:40:b8:0a:84:44:d1:06:1a:
ec:04:b2:d0:aa:cd:ce:a2:fd:7f:22:3b:8e:2d:64:1c:4e:a1:
be:d9:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:42:19 2026 by rpki-client