Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier: S/DK3FIZDDU+UgMli4Z8a0l38sn8CmNPjRlgq/lp0z8=
Subject key identifier: 22:4F:38:9C:10:BD:55:A5:AD:53:90:29:6A:19:09:E2:68:5A:A9:89
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial: 01A17CCF1555300DB6C94E1B96F661758ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number: 0EFD
Signing time: Tue 27 Oct 2026 10:01:48 +0000
Manifest this update: Tue 27 Oct 2026 10:01:48 +0000
Manifest next update: Wed 28 Oct 2026 10:01:48 +0000
Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: utYg0n3M7VNkWvs1/D0ikQy9LSl19uc80wVJ6n9FAiQ=)
2: dBhLlFM2M2mv1uZaicw5rDd3FHE.roa (hash: lGG5JBypXkrAJMqqEu1PRsT0MklsGOxRDMpecpiLJ74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:15:55:30:0d:b6:c9:4e:1b:96:f6:61:75:8e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Validity
Not Before: Oct 27 10:01:48 2026 GMT
Not After : Oct 28 10:01:48 2026 GMT
Subject: CN=224f389c10bd55a5ad5390296a1909e2685aa989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:c3:62:29:b9:5b:9d:9a:85:ae:44:2a:0d:
66:23:e6:9d:57:8f:0d:7a:83:d7:e9:f4:89:99:9e:
7f:fc:68:4e:b8:f0:6d:0a:ac:bf:07:2c:23:b7:c8:
23:64:e2:e7:fd:59:56:5f:67:2b:82:0c:8c:42:af:
1c:4f:ff:a0:de:95:d3:d9:4f:fc:4c:df:fe:2b:2b:
f0:92:aa:94:59:fb:86:12:d3:7b:ae:b4:43:4e:ea:
5b:b5:93:1b:33:43:f1:d1:d4:3b:27:5a:02:17:f6:
42:7a:c2:f0:d8:26:db:8e:e7:ba:46:97:d2:9c:a9:
87:ea:d9:f8:2e:e8:9e:dc:ff:c0:4c:56:8b:01:77:
fd:45:4b:6f:b4:81:59:c5:a4:cc:23:ad:1b:a6:fb:
71:eb:48:b7:67:ae:42:1a:b0:af:4b:70:26:c6:d0:
e1:3e:84:cd:a8:10:40:bb:5f:5c:ca:9b:9d:c0:98:
62:bb:87:75:25:a0:dc:03:64:24:75:13:4f:ec:a0:
53:84:d6:9a:39:14:96:00:9c:9f:61:af:02:f3:23:
30:1a:83:5a:f9:5a:23:1a:df:c7:47:2f:88:76:78:
eb:6d:b8:70:d6:56:34:06:26:e9:fc:5d:61:d8:f4:
e4:db:0a:6a:1e:ec:79:2c:36:6d:bd:3e:44:12:5a:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:38:9C:10:BD:55:A5:AD:53:90:29:6A:19:09:E2:68:5A:A9:89
X509v3 Authority Key Identifier:
keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:78:b7:86:6f:d0:c8:9a:e4:6b:de:0a:52:00:a7:8b:89:d4:
63:95:5a:cd:53:3f:1b:f9:23:ea:1d:9a:6f:9b:a6:f5:1b:4b:
00:d9:f4:b4:15:6f:df:3c:47:bc:34:2b:0c:fa:48:ff:a0:d3:
ab:ab:1d:62:c3:49:3e:66:48:16:85:bc:c3:c6:9f:3d:d0:ba:
ff:03:36:35:71:46:1e:9d:e6:c8:e3:cd:b5:11:32:dd:f1:4c:
ef:0d:ce:18:54:c0:74:37:8a:67:60:5e:f2:83:43:66:27:15:
38:f2:c2:1b:fd:70:42:39:51:aa:f7:c7:c9:dd:17:06:31:04:
e3:0a:c8:bf:f6:ba:1f:38:e6:e8:38:30:a9:20:51:ca:9a:fa:
12:6f:21:f1:c3:92:51:30:79:e3:a7:3e:2d:d3:52:a2:a7:15:
b1:35:40:cb:b7:51:ed:88:a8:15:49:2b:81:74:50:f1:3f:8a:
b7:f6:27:37:ea:ff:8a:77:80:43:69:88:d6:5a:cd:b8:ef:d0:
9f:1f:b6:3f:18:d0:cb:26:a6:b9:a0:31:9a:ff:87:af:f9:c0:
2a:69:45:c9:dc:01:02:50:40:62:86:5e:6c:4a:d4:cb:7c:79:
ee:c6:51:b4:f3:8d:bc:ac:65:09:9b:34:72:48:a8:7b:64:bd:
ed:87:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:12:44 2026 by rpki-client