Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
File: bCecf9LtlfgYXaFSKg9XxQPuxas.mft (raw, json)
Hash identifier: 89bwwVuV6dfXkmchzIVV2pao3vZLz2TVQa07yr4iZII=
Subject key identifier: 5B:B2:E6:99:2C:7A:25:BA:D0:24:16:BE:17:7E:6E:13:37:87:18:74
Authority key identifier: 6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
Certificate issuer: /CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Certificate serial: 019F90FE8409C25AACB71A5C8E58BEB36D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
Manifest number: 41
Signing time: Thu 23 Jul 2026 22:00:26 +0000
Manifest this update: Thu 23 Jul 2026 22:00:26 +0000
Manifest next update: Fri 24 Jul 2026 22:00:26 +0000
Files and hashes: 1: VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa (hash: PJAiuPsV0OJUExzoh82Xuin/NOUbTrHxFe1Pka5/k/Q=)
2: bCecf9LtlfgYXaFSKg9XxQPuxas.crl (hash: b1ghG21a2iWijkqAcjKaDEDfgAB4sIFphDw/q9kbyNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:84:09:c2:5a:ac:b7:1a:5c:8e:58:be:b3:6d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Validity
Not Before: Jul 23 22:00:26 2026 GMT
Not After : Jul 24 22:00:26 2026 GMT
Subject: CN=5bb2e6992c7a25bad02416be177e6e1337871874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:72:52:a2:3b:b5:77:ee:f4:f9:b9:6e:07:
02:2c:1d:b7:ac:ea:f2:c5:0e:24:82:4d:8e:65:a3:
2a:a6:91:28:cb:6d:de:d9:ec:26:d2:5a:af:a7:30:
54:ba:05:de:19:e6:a9:52:da:b8:c0:cf:76:27:a0:
6c:7a:84:a9:b9:63:38:c0:7e:f8:a4:75:79:74:9d:
97:51:bf:65:29:ba:94:78:9a:63:77:c5:2b:42:0b:
a5:d9:25:28:3f:70:ad:ad:65:e7:ea:81:6e:ad:73:
a6:f8:d8:c0:c2:02:f0:8d:88:04:11:b6:e5:7f:a7:
9c:7a:ce:2b:6d:04:97:39:4c:8b:fc:e5:10:7f:83:
7f:ce:39:6c:ac:21:a0:07:ea:3a:20:c9:b8:83:7c:
6a:68:ef:61:b5:5c:55:81:f1:20:9e:a2:64:3d:00:
1f:3e:d3:2f:48:04:2b:4a:68:6f:48:25:33:1c:66:
63:ac:43:45:35:fa:ec:a7:0c:80:10:6b:df:59:ab:
1c:6a:a0:c2:95:b7:d2:65:e1:e0:85:cc:8f:a0:37:
b9:3e:d7:9f:02:72:f6:62:6d:0d:d3:5f:e9:c6:54:
39:e4:af:64:16:9c:ea:61:2d:c0:96:c5:e7:e9:63:
b1:f4:16:fb:7e:5e:b5:14:50:2e:01:b3:83:02:96:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:E6:99:2C:7A:25:BA:D0:24:16:BE:17:7E:6E:13:37:87:18:74
X509v3 Authority Key Identifier:
keyid:6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a1:74:c5:8b:66:7b:5f:fb:a8:2b:84:e7:94:2a:6b:a7:08:
fb:59:c3:7b:a1:6b:8a:ef:9a:6e:82:ae:f3:2d:c4:50:ad:a2:
04:25:74:94:59:e5:57:c1:5d:f1:a2:59:00:00:fe:01:d8:4c:
7d:41:df:4e:6f:f6:17:55:da:c3:c3:02:14:c6:16:fc:a2:30:
f2:24:eb:da:10:f4:99:9f:e1:70:46:f6:fb:25:c6:31:7c:45:
cf:93:85:01:af:35:4e:07:a9:e5:b1:7d:6b:68:a0:08:7d:27:
a4:41:7b:14:3e:72:81:94:52:0b:c0:91:5b:e8:5b:51:1b:8b:
e1:ff:9b:f1:79:e7:a7:ae:09:a6:e7:69:f3:33:42:65:ca:c2:
12:ab:c0:77:13:1e:58:7c:46:6a:a2:66:ea:20:27:e2:2f:6e:
24:e2:70:b1:b6:08:f5:c9:e7:7b:e6:71:3b:08:6c:b0:0b:12:
4a:e3:0d:fd:30:fa:b5:c7:df:b1:f3:13:28:3a:9b:ec:50:f1:
e7:10:a4:e9:93:47:1b:dd:7b:0c:37:98:b9:cb:63:b7:96:e6:
d3:4d:39:94:0d:f8:e8:6b:22:fb:ee:50:d9:0f:38:1f:d0:82:
0c:0d:80:1c:37:fd:15:e8:df:90:b2:00:07:ac:5d:fa:c2:ab:
40:55:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:43 2026 by rpki-client