Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: TwNTvXNLDxTtKtc8iWLyTJ0QpRWIAEpisDs+6uB26J4=
Subject key identifier: 3B:13:EA:94:E0:F4:97:52:16:52:B9:4F:9A:8E:D1:8B:6E:7F:4D:09
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01A0DE05E07633A2AE8E41772D45B5C7A6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0BE1
Signing time: Sat 26 Sep 2026 14:02:01 +0000
Manifest this update: Sat 26 Sep 2026 14:02:01 +0000
Manifest next update: Sun 27 Sep 2026 14:02:01 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: LI6Jm88XuHERnjrepdUcLgaM/z/xDd4NmoDMGyXYjvY=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:e0:76:33:a2:ae:8e:41:77:2d:45:b5:c7:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Sep 26 14:02:01 2026 GMT
Not After : Sep 27 14:02:01 2026 GMT
Subject: CN=3b13ea94e0f497521652b94f9a8ed18b6e7f4d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:41:a0:a3:dc:6a:74:c0:90:63:7a:7c:ef:
61:d1:f5:7e:da:80:ab:55:21:a1:21:b6:6c:fc:42:
a8:f8:7a:3b:28:64:6b:97:f0:43:63:cb:96:90:57:
54:48:41:24:d1:3a:54:06:88:19:cb:a6:c3:b3:76:
55:10:13:c8:b4:d2:d2:b8:b3:8c:89:d1:8f:c3:d0:
15:19:42:28:30:3b:f3:58:40:3d:5e:9f:3b:0f:5b:
d9:6f:c2:04:aa:db:e4:cd:da:a2:53:12:0e:e6:6e:
70:4c:b9:bc:23:2a:80:b3:f1:ab:e6:f4:44:44:60:
c4:b1:18:bb:7e:4f:d4:0d:cf:c6:d7:af:27:7b:d6:
c3:ac:34:fa:9b:84:6b:bb:cb:c8:d6:5b:55:7c:36:
c6:cd:f5:fa:cc:fb:ab:18:61:53:15:53:d3:af:d9:
c4:91:7d:06:49:46:f4:18:38:33:52:8e:f1:35:f1:
04:38:e8:34:72:b8:9f:c9:57:cd:6a:e0:28:77:0a:
f9:35:1d:c1:ef:d7:7e:5e:22:57:20:18:12:c5:3f:
1c:55:f4:24:63:70:e6:48:de:24:0b:b9:38:ec:8d:
2d:7f:3d:af:c0:2a:6f:d4:b7:4d:2c:bb:34:16:8d:
f2:5d:7e:ad:f5:51:1c:40:70:90:4d:c1:93:5d:d4:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:EA:94:E0:F4:97:52:16:52:B9:4F:9A:8E:D1:8B:6E:7F:4D:09
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:2a:23:50:a2:2e:34:0b:8e:f1:07:51:18:c4:51:c4:05:
57:0a:4e:e1:fa:7f:55:bf:df:22:9e:03:ae:0d:86:c7:1d:ec:
a7:3e:47:8e:91:e1:69:61:6e:a7:0b:0f:20:67:b4:b3:92:01:
30:9d:2c:c2:77:a6:8f:fc:d7:b8:9e:90:12:3d:9b:2f:33:be:
9c:e9:7b:39:fd:c3:36:e3:fd:a4:85:6d:70:ce:5f:cc:02:b7:
bf:17:d3:1e:4f:61:3c:c4:13:2b:47:95:6c:8d:20:c3:22:d1:
a2:c1:45:c2:0d:76:cc:0f:fe:52:eb:1b:2a:33:9f:ac:6a:34:
2c:4b:b5:8a:b3:14:7d:5e:98:27:7b:26:74:19:5e:97:7c:2a:
6e:a6:80:c5:68:9a:d9:2b:81:75:1a:2d:9f:7b:42:bd:89:55:
ac:0a:3a:74:e9:02:56:9b:a4:dc:e6:46:43:9c:97:6b:b2:d9:
8a:c3:b0:12:de:01:aa:66:b0:a0:9e:1f:16:8a:d0:88:2c:b8:
f6:09:d6:09:1a:37:b7:f9:c6:b5:cf:bb:fd:aa:41:45:86:5a:
19:e6:ea:87:ce:38:1a:12:68:70:a6:51:07:48:9e:88:a6:11:
03:6a:11:a7:13:cf:e1:65:8b:a9:4e:28:1e:d4:95:bc:e9:31:
14:c9:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:33:29 2026 by rpki-client