Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier: ntGE+6LE6pla4itat4SzgCI2UyuxTH53df1QNcFlxpw=
Subject key identifier: E6:8E:EE:6B:09:5A:30:CE:2C:D6:B2:55:A0:2F:C7:04:7D:05:28:76
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 01A1DF83219723C97C88A9281A64C19B8EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number: 1B11
Signing time: Sun 15 Nov 2026 14:01:15 +0000
Manifest this update: Sun 15 Nov 2026 14:01:15 +0000
Manifest next update: Mon 16 Nov 2026 14:01:15 +0000
Files and hashes: 1: Qlnk-TU3emncuI4U9LFebnP07e0.roa (hash: HdDucwYSpeHdchyohiZw3Ulfi4Ms+K1/9jYumPe+XtY=)
2: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
3: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
4: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
5: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: OWQTTEECHFV7IaJ15b6jlwx77osi0SkKYuKEZdQOscE=)
6: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
7: ocrWH4LXI5AcanxmF84LShRjSnA.roa (hash: IvINQVuazfHHpSQNQUlXHe0rPDP3TKBhqPqw+YoqC5E=)
8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:21:97:23:c9:7c:88:a9:28:1a:64:c1:9b:8e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Nov 15 14:01:15 2026 GMT
Not After : Nov 16 14:01:15 2026 GMT
Subject: CN=e68eee6b095a30ce2cd6b255a02fc7047d052876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:dc:1e:30:e2:a5:3b:ba:fb:32:20:4e:fc:
67:be:52:6e:5f:8a:c8:c9:22:ac:5c:1e:c0:b5:c2:
da:2a:9b:3e:74:92:63:22:92:7f:35:d6:78:c3:0f:
57:f7:21:8b:a0:a0:83:a5:2e:62:30:57:f7:81:b3:
1e:d1:24:30:08:35:1b:74:d8:1b:7d:fd:08:39:97:
56:07:8f:8c:b5:9a:ba:0b:cc:3b:da:df:b2:a7:4f:
c9:4a:38:d8:31:f6:d1:af:b5:4a:e8:ab:dc:db:dd:
0b:50:e8:0e:d2:eb:62:d3:0f:25:89:cf:8a:15:05:
f0:ca:1a:c8:05:88:00:22:de:ef:89:33:04:80:97:
f6:7e:84:8f:a2:0b:63:79:a0:ad:5e:82:7f:b3:1c:
59:25:99:ce:95:38:9d:25:e6:dd:ed:0c:65:96:00:
bd:75:36:cf:36:3b:75:b4:74:85:1b:03:04:da:b2:
15:a6:b6:5b:3d:7f:65:28:66:df:60:99:09:4e:33:
56:65:90:f8:4b:2e:63:73:40:54:18:14:5d:33:fc:
ef:75:fc:7e:39:aa:b9:40:84:d9:6a:b9:82:05:6b:
0b:e1:3e:2d:09:c9:7e:e5:2f:41:69:62:5d:63:df:
08:d8:00:f8:a2:1c:f8:eb:a3:c8:78:a2:b5:28:b0:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8E:EE:6B:09:5A:30:CE:2C:D6:B2:55:A0:2F:C7:04:7D:05:28:76
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ee:c6:0f:db:04:3f:a1:da:a6:84:6b:c5:87:cc:ef:9f:2c:
c9:2b:62:11:7e:8e:7b:d8:ec:f8:6f:23:d0:62:12:8b:75:e2:
f1:81:56:4b:27:5e:bd:53:46:32:7d:74:87:3e:9e:3c:5f:17:
54:fa:3d:1c:ac:4e:74:38:d1:c7:69:af:ac:b0:e1:ab:09:f9:
2b:16:c1:75:0b:dd:ab:4c:28:7e:59:72:3e:98:07:ac:9f:39:
b4:a5:85:c3:5f:be:06:ce:39:5a:1d:70:46:c6:4e:90:28:df:
f7:f7:4d:b9:30:95:f7:ca:09:22:7d:53:19:31:9c:82:3f:c7:
d0:0e:16:be:fe:92:58:32:a3:0d:04:ee:e6:fb:36:fd:1e:ce:
1d:ec:41:cd:e9:bc:a8:26:a3:58:73:d4:8d:4f:c7:e8:5d:e3:
7d:2c:99:2b:db:7a:3c:1e:2c:d8:60:c1:8c:4b:5c:9d:b0:01:
47:2a:bb:f4:59:6d:77:6e:03:48:88:19:e9:e8:06:2f:43:e8:
e0:b5:6c:39:17:60:87:f0:e1:af:4e:b9:8e:10:67:5c:d6:70:
5c:95:db:47:32:d7:9e:d6:9b:bb:47:7c:13:da:aa:8f:02:1d:
67:72:6a:0b:87:0b:e3:a4:07:54:2a:02:2c:d2:fc:72:ff:a3:
4c:76:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:18:17 2026 by rpki-client