Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: SxJSp2YA0KSGJrw84mtz3T4nzQgmREsGu8HhtM5xBho=
Subject key identifier: 01:55:31:97:AE:1B:93:D4:49:AA:0E:97:31:DA:E0:48:EB:A1:50:EC
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019F91DB2163A13EB848C67619BA0BAD6F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0B35
Signing time: Fri 24 Jul 2026 02:01:24 +0000
Manifest this update: Fri 24 Jul 2026 02:01:24 +0000
Manifest next update: Sat 25 Jul 2026 02:01:24 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: hnHkIj97B3DT9u6XNBwz5DKePol8448M6iGbVbTns7E=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:21:63:a1:3e:b8:48:c6:76:19:ba:0b:ad:6f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jul 24 02:01:24 2026 GMT
Not After : Jul 25 02:01:24 2026 GMT
Subject: CN=01553197ae1b93d449aa0e9731dae048eba150ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:0a:83:a1:80:bb:61:ce:b3:cd:e9:96:d4:
ab:a0:92:a8:5f:ac:31:39:b2:6a:72:08:bb:92:7b:
47:15:f8:cc:8a:c7:73:94:ab:ae:de:d3:b3:b0:9a:
6e:e2:92:64:8b:26:37:1f:17:81:36:6e:47:d1:a5:
e7:f0:bd:60:e0:e9:c0:74:8b:45:7b:0f:b3:01:80:
4c:87:90:49:16:f9:5d:b2:05:62:4d:dd:d5:83:4d:
02:b2:99:4c:6b:73:2d:b3:49:ef:ef:01:83:d2:da:
76:cf:ca:0f:1e:f0:e2:fa:a2:cf:be:65:ef:17:9c:
77:d2:8f:95:e3:27:54:4f:a9:6a:92:cf:36:ea:10:
69:80:51:47:e8:42:d9:e1:ed:b7:0c:f1:87:21:42:
5a:26:d3:6a:94:95:71:9a:d7:43:4a:fe:cb:a7:f6:
11:ef:95:47:5e:45:63:18:bd:04:5b:3c:13:33:36:
6a:4e:39:2a:d3:df:af:6c:3e:f5:5f:91:81:06:91:
a0:b7:5d:75:17:46:5b:07:be:1b:be:f3:3e:31:e2:
ed:2d:b4:bb:0e:64:a0:3b:e1:96:6b:cc:b1:68:96:
44:66:d6:00:c8:88:39:8d:3e:9d:13:33:c8:3c:15:
97:c2:60:e4:52:f2:c7:4f:aa:12:d5:cd:50:0d:82:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:55:31:97:AE:1B:93:D4:49:AA:0E:97:31:DA:E0:48:EB:A1:50:EC
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:50:2f:ba:b9:ad:a0:b1:7e:da:fe:f7:0c:af:3c:fb:3d:
e9:33:4e:ab:a9:eb:42:e7:b2:5d:e1:e3:ba:69:d1:b6:c9:99:
f0:5c:3c:14:70:c5:c4:d9:f4:4a:50:44:16:71:18:3c:ba:ed:
8e:da:a7:95:d2:83:6c:78:75:d0:4d:44:da:60:65:67:f7:4d:
36:ae:cd:05:a6:ca:78:f0:34:a1:d7:a8:20:44:3c:16:93:58:
32:04:f7:3c:e1:7d:80:33:69:65:6e:a8:c4:1d:d9:76:00:6d:
cb:3a:60:bf:b2:aa:f9:30:b0:62:03:19:1b:a4:05:0a:29:3d:
f4:a9:1b:1c:29:a0:5a:8d:36:ca:ae:37:b7:8b:ad:5f:0a:04:
b1:74:66:02:58:16:9d:05:ba:bf:19:7b:d9:6b:b9:09:51:c0:
37:27:6f:91:fe:74:36:72:cc:61:18:91:b2:59:a3:8a:5d:5f:
51:48:73:a5:2f:3f:bd:73:d6:09:66:33:15:03:20:88:31:50:
8b:db:fa:2f:37:39:2b:cb:5a:66:e6:50:b9:bd:36:90:12:bb:
d3:1e:b3:64:a7:4b:1f:94:c7:36:60:33:37:2f:a4:0a:37:3f:
51:71:dc:8c:f8:81:26:e7:1f:a1:88:e9:5b:74:d7:70:7b:d0:
ce:8f:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:04:29 2026 by rpki-client