Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
File: bCecf9LtlfgYXaFSKg9XxQPuxas.mft (raw, json)
Hash identifier: VP1nIr0ELPeMBSEOfuqiXmqOU3uZ0NB09P3WXBHPQ7Y=
Subject key identifier: 3C:8F:00:E8:0E:91:96:3E:EB:67:C7:D9:89:52:D9:F2:FD:FB:C8:D2
Authority key identifier: 6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
Certificate issuer: /CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Certificate serial: 01A0F079F93AE21B18C3E08E3FAB4C5D3FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 04:02:00 +0000
Manifest this update: Wed 30 Sep 2026 04:02:00 +0000
Manifest next update: Thu 01 Oct 2026 04:02:00 +0000
Files and hashes: 1: VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa (hash: PJAiuPsV0OJUExzoh82Xuin/NOUbTrHxFe1Pka5/k/Q=)
2: bCecf9LtlfgYXaFSKg9XxQPuxas.crl (hash: La9n9sOZrsZHmZz5R8ATaprM6cucHrXUxcMVEKItAI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:79:f9:3a:e2:1b:18:c3:e0:8e:3f:ab:4c:5d:3f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Validity
Not Before: Sep 30 04:02:00 2026 GMT
Not After : Oct 1 04:02:00 2026 GMT
Subject: CN=3c8f00e80e91963eeb67c7d98952d9f2fdfbc8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:e7:99:1d:38:7d:f2:9a:77:39:e0:52:1a:
bc:1e:71:dc:62:9d:45:7b:c4:93:77:de:92:8e:67:
85:91:35:30:92:00:54:12:34:f8:fa:7c:4a:04:eb:
c3:17:bf:e2:b0:98:7f:8f:92:0f:c9:d7:a7:da:f1:
60:be:28:de:d2:17:a7:ac:90:0d:96:94:fe:11:36:
ed:dc:4e:1b:b8:ee:64:d2:0a:3a:50:89:64:c3:cd:
65:04:63:3a:e0:48:84:5b:aa:6a:5d:1c:af:3d:1f:
31:b5:05:77:c5:3a:93:39:a2:fe:20:0f:3e:27:c8:
58:4c:c1:38:c1:a1:6e:2d:0a:b6:67:cb:33:2d:c2:
7e:87:f1:15:3f:6d:a0:35:c9:31:c1:cc:1c:79:65:
db:93:f9:2a:06:00:73:ff:77:26:9c:60:94:f1:74:
f1:2d:49:e6:92:64:2d:1d:c7:0d:f2:f6:80:fe:3f:
04:d0:d9:4d:79:be:b2:53:c6:b6:56:29:f6:c5:0b:
2a:a6:87:39:da:04:3e:46:7c:8d:77:10:62:a3:90:
a1:9d:85:08:49:2c:7e:7b:b5:65:4f:6c:ad:c4:ec:
0d:e4:f6:26:13:56:5b:41:16:df:dc:18:78:62:f6:
08:cb:da:92:46:24:ed:df:4f:e6:0e:a5:d5:49:72:
47:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8F:00:E8:0E:91:96:3E:EB:67:C7:D9:89:52:D9:F2:FD:FB:C8:D2
X509v3 Authority Key Identifier:
keyid:6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c7:e9:ac:3e:ed:3d:3b:3f:dd:26:e7:e2:e6:b5:f4:ec:0f:
10:c0:02:b6:55:b0:7e:20:b5:11:17:8f:ca:ae:25:48:20:60:
c9:9b:90:b5:88:ba:b1:74:49:77:b6:4c:a5:58:b3:fc:b6:e7:
81:06:b9:22:46:2c:78:d3:4e:b3:62:35:34:3d:67:12:0f:6d:
56:ad:f7:62:12:8d:42:e2:23:75:70:91:07:74:46:fc:a6:53:
b8:be:3e:c2:e2:b3:a1:96:99:a8:29:a2:5d:90:6f:95:e7:cd:
30:84:fc:b8:e7:7e:74:bb:a2:eb:68:c6:7c:9a:3b:47:c7:80:
09:14:6f:4a:d0:6e:98:c7:a2:0f:3b:0a:1a:80:57:02:ab:96:
70:4f:03:f3:77:b6:34:64:36:a1:8c:ba:e5:55:b7:14:e4:8f:
ed:7f:a4:c3:18:68:f9:09:1b:fb:5d:ee:59:46:fe:d0:8c:fa:
fc:38:86:f2:d8:cd:66:28:3c:8f:80:4f:ae:21:3d:8e:d0:d7:
74:7c:97:ca:1f:60:d3:42:af:41:c9:d8:a0:6a:ed:08:a3:c4:
43:5c:35:e9:7a:8b:d3:db:62:da:29:a0:64:4d:4b:b0:ab:0e:
13:03:19:40:0e:bc:9f:c7:28:d1:f1:54:13:f7:2a:23:20:85:
03:a7:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:53 2026 by rpki-client