Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: F1qyAu6u3TCCP8k4u1wej9OYaw2CAh/pCWgfEge/IRY=
Subject key identifier: AA:10:20:AD:BC:5A:9A:CE:D6:B4:CD:CC:35:C0:92:FC:56:96:B5:BB
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019E1F10FF65D0A4A5415DE7104AEC169B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0A75
Signing time: Wed 13 May 2026 02:01:08 +0000
Manifest this update: Wed 13 May 2026 02:01:08 +0000
Manifest next update: Thu 14 May 2026 02:01:08 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: ybByfBH1bTueRvZr1OVeMRaaazW8+UC2VcYkrNhe6Og=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ff:65:d0:a4:a5:41:5d:e7:10:4a:ec:16:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: May 13 02:01:08 2026 GMT
Not After : May 14 02:01:08 2026 GMT
Subject: CN=aa1020adbc5a9aced6b4cdcc35c092fc5696b5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:17:72:c0:08:76:93:e1:e3:26:61:dc:74:
bc:0b:b6:d3:94:39:8d:2c:5f:42:72:d9:33:b7:18:
5c:c0:6c:34:2e:68:82:ac:ff:7c:66:41:ae:42:1e:
95:81:1f:e8:df:bc:2e:f4:50:2b:88:ba:98:10:27:
7e:ca:a8:ec:af:29:a1:1a:a2:08:53:de:fb:6a:77:
83:b3:1a:f4:06:f1:d0:76:b4:eb:b0:53:b5:8d:6c:
97:30:6f:8f:0b:6d:31:6c:9f:d8:2a:f9:da:7d:53:
45:12:d6:ed:08:e6:5e:53:05:24:26:94:b3:a2:8a:
9f:26:26:0d:03:f8:79:2d:a3:a0:65:96:f4:0a:75:
5e:b0:3a:8f:08:08:3b:49:fc:f6:98:71:43:37:5c:
f3:a5:1c:2d:80:43:3c:32:50:fd:18:73:0f:85:74:
ef:b3:67:61:03:9e:10:10:82:67:3e:19:c9:67:ad:
16:9b:10:71:6e:9e:53:e9:d7:f4:ce:35:36:e1:2d:
83:ba:e4:72:36:8f:b9:69:a4:32:6d:15:2a:ca:6f:
9b:1a:b8:71:de:c4:a0:8c:84:35:5d:1a:ba:65:b5:
14:52:51:8e:d3:6f:49:c5:86:8b:83:bd:25:93:6d:
91:b9:58:3c:91:05:0d:fd:33:6a:cb:f8:23:92:48:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:10:20:AD:BC:5A:9A:CE:D6:B4:CD:CC:35:C0:92:FC:56:96:B5:BB
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d1:de:e2:8a:89:55:69:19:57:e1:2b:67:8a:20:ca:8c:21:
f2:17:14:30:29:1e:47:f3:bb:45:84:27:b8:32:03:49:66:d2:
54:7e:d4:e4:40:68:1c:91:07:da:b6:0c:37:41:9d:11:0b:da:
1e:d9:67:f6:76:0d:d6:d1:32:bb:3f:1b:86:99:67:18:33:c1:
8c:e8:88:61:9f:77:56:0c:6c:db:ca:9a:3a:5b:d1:6a:00:0f:
5b:08:9e:b7:88:58:b6:81:0d:4e:96:44:06:13:09:17:66:ba:
7a:12:db:e5:6e:9c:4e:52:20:68:f4:29:ca:1f:b6:0a:15:b6:
5d:dd:82:94:4b:c3:56:25:57:6a:05:c5:f6:fe:ce:40:20:e5:
fd:6d:22:05:80:0c:ba:37:ae:e5:61:82:bb:e8:02:00:38:10:
a1:9f:ad:7b:70:c0:e3:88:14:f5:d3:2d:a0:8d:e5:3c:98:ba:
8f:19:72:79:07:d7:41:be:4d:a3:f4:b6:8f:ec:39:8b:33:dc:
14:f5:02:93:8a:6e:b1:64:51:f9:e0:e3:de:68:bf:3e:6f:7c:
f4:a3:41:52:30:c4:f5:59:3b:f5:50:61:e4:48:85:b7:a8:7e:
d5:4a:6d:30:4c:88:f1:48:b7:ff:7f:de:fa:46:3f:59:ae:16:
95:09:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:48 2026 by rpki-client