Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File: BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier: /XLdG4Kv27NnYRyuWqRPebHDofvCc/upeh5V8229EbU=
Subject key identifier: CA:BF:CC:D3:7C:42:A9:06:17:8D:5C:8F:03:C2:A1:B4:86:F1:0E:62
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 01A1AA838B8EAC3967AB1DBA6E13860D6496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number: 165B
Signing time: Thu 05 Nov 2026 07:01:50 +0000
Manifest this update: Thu 05 Nov 2026 07:01:50 +0000
Manifest next update: Fri 06 Nov 2026 07:01:50 +0000
Files and hashes: 1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: KytmU+g0FrWZcyl1pjFQ5EHLap57tD+oJr3VkVpmSGM=)
2: LlG8oa0OcM6D5__vgtmHgcfqaK4.roa (hash: lJ+TEaX4SXPiPfb3rAwLTY40jdx2wogsDRxF7aOmvGk=)
3: z8l7mSU9KRY7NvwDgtk1N6bfpzg.roa (hash: UTc6qeGzgzsNu3Jv91oY0o4Hfys++8pCjFFEFQc/98o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:8b:8e:ac:39:67:ab:1d:ba:6e:13:86:0d:64:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Nov 5 07:01:50 2026 GMT
Not After : Nov 6 07:01:50 2026 GMT
Subject: CN=cabfccd37c42a906178d5c8f03c2a1b486f10e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:02:45:dd:60:d7:e9:5e:37:57:ae:43:80:
cb:8a:0a:7e:cb:6b:96:28:c5:eb:30:be:b5:e6:af:
f7:a5:64:c3:6c:b6:46:7e:68:30:32:d1:4b:a6:5c:
54:32:38:ac:05:27:4b:4f:2b:2f:9a:2a:9d:e5:11:
07:16:9a:95:34:2f:c6:11:d1:ef:bc:cb:fe:c9:b2:
ed:d6:0d:68:13:8b:a0:70:6e:82:ab:87:3c:27:47:
a2:e2:b4:2c:94:b1:8a:27:c2:f3:72:f1:95:ee:e3:
6d:b0:60:ba:61:9a:b5:0b:60:31:63:7c:32:bc:ef:
09:8a:73:b5:81:22:83:cf:38:1d:af:47:e1:13:46:
de:e0:11:ae:7f:2d:74:23:ba:65:34:47:04:dd:5d:
d2:7c:52:9e:ac:66:23:ec:9d:e1:09:9e:12:a9:77:
89:7e:c2:12:2d:e9:73:5b:ab:ed:e3:d1:c0:d0:d9:
a0:80:91:07:2f:0e:93:98:bf:48:75:48:41:9e:0a:
2c:65:a6:6c:af:ae:ab:54:a2:9c:28:1d:cf:95:59:
18:c6:23:75:fc:95:65:3f:27:1b:6d:87:ae:72:1f:
e5:79:ac:ec:d4:28:72:97:44:ff:f7:b6:8d:28:0e:
6e:cf:69:62:f9:a2:e7:7d:1f:7f:bb:96:b4:26:35:
2a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BF:CC:D3:7C:42:A9:06:17:8D:5C:8F:03:C2:A1:B4:86:F1:0E:62
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:80:5e:39:d9:64:18:90:1b:65:39:d5:a6:97:89:af:b4:
90:38:71:86:5f:73:57:2f:b9:8d:5b:6e:c1:4a:ad:20:03:1c:
48:23:b1:a7:4d:bb:f0:06:2b:89:0f:b0:26:ba:62:32:92:f0:
d2:51:f4:e4:20:1c:1d:77:6f:ff:bc:f4:86:b3:a1:ff:01:8f:
4b:82:ab:c0:3a:0b:1b:35:cd:e9:91:2d:47:9e:47:30:c2:50:
aa:ac:b8:f2:bd:a1:7a:ae:54:1c:d0:3d:16:96:c8:dd:27:42:
de:a2:b2:7e:57:53:6c:af:99:59:3f:f2:5a:b0:ed:3c:dc:27:
44:68:88:5c:20:1c:6c:30:b7:a2:3f:9c:e0:c0:dd:d9:0d:a1:
95:4e:67:0f:7a:4a:b3:cf:6b:07:be:39:65:ca:09:33:24:0b:
6f:37:17:a7:ab:c4:e6:63:10:37:58:01:d8:e8:87:36:18:6e:
53:1f:a1:a3:30:40:2b:39:bf:3e:0a:96:f9:cc:92:34:68:ef:
86:53:e6:76:d7:ff:63:7b:03:ef:7d:3a:ae:cc:bb:bc:7e:62:
e1:83:d8:50:21:0a:12:32:62:0d:26:07:43:0b:f1:20:24:fe:
0c:56:18:e8:41:14:26:27:d2:8e:cb:54:34:e7:ec:e4:ed:0b:
16:8d:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:23:38 2026 by rpki-client