Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: jjJ+VKCpt5e9uXhieDVjRXE1g0aibB67yEN73rf9x7g=
Subject key identifier: AE:5F:EB:F9:62:74:D9:71:01:41:8D:ED:00:77:55:38:1B:F8:81:42
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 01A181F515DE72EEA14252842EC1AE7F1EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 19CA
Signing time: Wed 28 Oct 2026 10:01:25 +0000
Manifest this update: Wed 28 Oct 2026 10:01:25 +0000
Manifest next update: Thu 29 Oct 2026 10:01:25 +0000
Files and hashes: 1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=)
2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: 8wmm/X1yCM/wnkIO6ZxxbtRANLbTiCz1pBXqKwzFBuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f5:15:de:72:ee:a1:42:52:84:2e:c1:ae:7f:1e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Oct 28 10:01:25 2026 GMT
Not After : Oct 29 10:01:25 2026 GMT
Subject: CN=ae5febf96274d97101418ded007755381bf88142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:06:15:f3:84:e3:52:b6:5d:cf:d4:11:a4:
92:d7:af:c1:11:15:5f:24:68:4c:4d:95:97:cf:3e:
3e:85:8c:3a:81:cb:45:ae:83:95:c0:b6:9c:01:dc:
7b:e0:25:bf:69:77:52:28:ae:54:b1:4f:b0:1e:7f:
56:d3:94:1e:03:4e:e4:eb:37:da:fd:2f:b6:d9:45:
3e:29:23:9e:2f:83:c2:ff:41:32:f0:fc:4d:c0:a3:
3f:37:e1:3c:22:80:56:c7:9e:c8:36:81:41:c6:4b:
8d:b2:9e:88:35:fc:52:30:63:9f:79:21:07:60:ac:
d9:ec:03:50:bb:58:85:50:15:85:52:26:5b:b6:1e:
ca:d6:c6:f0:48:b4:b1:73:79:c5:6b:cb:95:6a:38:
5d:ef:d1:f6:2c:78:22:7a:54:3d:55:b6:25:5c:6a:
2b:70:cf:74:7b:32:c2:45:68:fb:80:b9:58:56:3b:
e6:00:5e:3c:7b:58:09:7d:fc:f7:b6:16:d9:da:35:
96:4b:ad:f5:99:21:78:9e:ec:48:f7:a2:55:1b:07:
97:a3:09:b5:c9:93:43:5d:5b:48:e1:cb:ce:45:ec:
70:b8:06:3b:b7:b3:13:3a:82:4b:83:61:7c:99:e9:
c4:f7:f2:5a:83:ef:93:8b:f1:01:91:e5:5c:a2:28:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:EB:F9:62:74:D9:71:01:41:8D:ED:00:77:55:38:1B:F8:81:42
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e7:96:27:df:a7:66:50:a9:3e:10:6d:58:7e:91:89:29:d3:
c9:2f:ce:a2:05:d0:1a:28:5e:41:4d:1f:41:5c:f6:2a:49:3a:
17:2f:5b:c4:8c:bb:a5:80:e9:4d:fb:db:28:26:2c:4d:e9:28:
69:ae:68:53:93:07:5e:ca:4d:63:d1:c1:21:f7:34:5e:ff:58:
d1:a9:f5:55:fc:92:5c:51:02:df:b5:02:ce:85:7e:3f:81:d3:
48:7c:3b:89:af:ae:dc:74:f3:7c:2d:3b:42:14:90:d3:76:18:
11:b8:e2:f3:77:82:6c:ab:37:34:c9:b1:ec:76:3c:6a:d2:3d:
4e:9f:4b:0b:e8:71:02:12:9d:34:96:86:15:1f:c2:b5:9a:89:
aa:5c:65:44:ba:49:95:6a:25:56:35:e8:b8:74:4f:8d:92:94:
c6:d5:89:4c:3e:bb:62:69:25:d5:58:97:7b:97:97:f2:49:54:
4c:c3:da:47:46:d0:66:d4:21:b5:07:1e:f6:be:15:4b:3b:8c:
4a:18:0e:be:8e:1a:9b:36:20:10:92:46:06:74:0a:dd:41:28:
58:9d:21:45:d8:a6:f7:14:8d:69:ba:0c:97:eb:19:a0:23:f0:
e0:08:fe:48:78:02:db:03:5c:55:1e:3c:a3:ee:97:96:8f:51:
8b:f9:a6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:18 2026 by rpki-client