Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: DLijq1rz7x6Pz8VpLPDR4XRruWO6vvsnY7uis6mDTRA=
Subject key identifier: 84:B1:5D:73:15:01:C0:DB:25:E6:4D:3B:20:61:2C:CD:77:B5:EF:ED
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01A0EB8A94EDC0B9BD2C3716DAE4B452CC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0BE8
Signing time: Tue 29 Sep 2026 05:02:02 +0000
Manifest this update: Tue 29 Sep 2026 05:02:02 +0000
Manifest next update: Wed 30 Sep 2026 05:02:02 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: tclWyKGIWCcizMqkgbhXsSjh4OxLKN5Q9veOe6V+wqA=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:94:ed:c0:b9:bd:2c:37:16:da:e4:b4:52:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Sep 29 05:02:02 2026 GMT
Not After : Sep 30 05:02:02 2026 GMT
Subject: CN=84b15d731501c0db25e64d3b20612ccd77b5efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:14:d7:8a:f1:b9:de:0a:dd:f1:87:0a:fe:
5f:20:82:0a:1a:c5:ef:d4:26:3f:1e:8a:c4:12:57:
c6:6e:c7:3b:55:2f:ac:05:48:20:8e:3e:db:f9:00:
5e:a5:e6:16:00:25:f7:d4:34:fd:e8:66:7f:18:0b:
b3:b1:c7:be:c5:16:12:a3:38:8c:12:65:68:aa:96:
e2:4a:96:8c:ee:69:c8:8e:49:8e:02:19:2e:de:5e:
a7:9d:3e:43:60:74:02:73:45:20:b1:0b:6d:ac:d4:
51:07:b4:21:dd:cd:6e:5c:34:62:96:a3:06:34:22:
66:08:e6:0d:c0:92:29:74:85:25:eb:90:77:b6:99:
bb:0f:ee:07:34:4d:b4:cb:b7:c6:c3:54:9f:87:e2:
bc:52:1d:51:72:ed:b7:57:84:b0:eb:f2:9c:17:b6:
eb:30:e2:06:73:97:a3:d4:9d:3a:82:11:7a:38:3e:
81:3b:82:e3:a6:a4:33:28:f0:b6:06:77:14:3a:d3:
96:08:ec:02:ea:34:a3:3b:4c:a8:c4:52:2e:09:d4:
23:7c:a4:b6:90:0e:f6:54:0d:a2:83:9f:88:fe:f6:
17:db:93:b2:9a:b4:97:80:a1:d5:7a:2f:1f:3b:f2:
a3:17:e5:2a:e2:01:ec:a8:3c:57:67:c5:26:69:78:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B1:5D:73:15:01:C0:DB:25:E6:4D:3B:20:61:2C:CD:77:B5:EF:ED
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:34:11:43:44:9f:6d:70:31:cc:b7:42:ac:47:9f:b4:e1:
20:b0:3f:06:7a:fa:1f:f0:0e:04:91:d9:18:f0:1c:24:4a:2f:
3d:67:f9:0f:67:04:2e:06:c0:84:0a:6d:8e:da:f9:94:92:c8:
5f:06:50:c5:63:e8:1f:3a:c4:09:0e:22:d2:5d:34:16:b6:da:
34:a4:fd:7f:51:83:7c:af:5d:0d:71:01:c6:ac:8e:f6:21:69:
ec:2c:7f:8a:b8:0a:9a:08:06:45:6e:ed:75:e8:8a:a8:48:4d:
67:d2:1a:90:98:4c:45:be:26:42:78:5e:08:20:8b:52:47:f0:
6a:13:2b:72:fd:3a:a9:bc:03:b3:08:60:26:36:e9:60:f0:ab:
4e:a3:c5:65:e1:8a:a3:0e:fa:29:11:3a:2f:0b:0e:2b:27:4e:
4c:d7:b4:27:74:6c:89:12:8f:c0:fc:b6:c6:19:7e:7d:50:93:
ee:ed:1e:ae:c0:9b:a8:f0:0d:14:bd:ba:19:5f:b9:22:bb:76:
85:62:ca:f6:3a:de:6a:88:4c:ac:a2:77:8b:2e:3f:99:05:f8:
7f:d9:a1:a5:ef:54:51:17:fe:1a:bf:83:52:08:81:00:c3:6a:
80:a3:e8:b4:00:a9:ae:c9:e7:41:e9:1f:58:3c:10:74:e4:cf:
e1:d5:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:22:12 2026 by rpki-client