Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: IlQrQJTjiT1DL4yUC4qnl4KdYOH+wJRqJk2PGcFcgAE=
Subject key identifier: CC:5B:32:49:15:56:EC:3D:7D:70:45:A4:DE:43:DB:08:67:29:DB:A1
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 019E8948B2EF87DE6FE3ADDF2389BE7A1CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0AEC
Signing time: Tue 02 Jun 2026 17:01:43 +0000
Manifest this update: Tue 02 Jun 2026 17:01:43 +0000
Manifest next update: Wed 03 Jun 2026 17:01:43 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: 333o2tBZ6z7wCECdYCSvUzK0oG+rh9SzK4aWIGHWl84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:48:b2:ef:87:de:6f:e3:ad:df:23:89:be:7a:1c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Jun 2 17:01:43 2026 GMT
Not After : Jun 3 17:01:43 2026 GMT
Subject: CN=cc5b32491556ec3d7d7045a4de43db086729dba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:72:39:ab:80:7d:51:d9:b0:c3:2c:48:e0:
9d:84:d6:eb:8a:58:43:c1:a1:4c:01:a3:06:bc:4e:
7c:5f:64:65:ae:3b:ef:b3:17:0b:b8:12:66:bb:9a:
cc:9a:9a:79:d3:c0:07:c6:b3:5d:57:41:db:39:c5:
a0:45:7d:3d:be:45:c9:10:56:71:14:81:70:0f:85:
65:56:63:9e:33:98:20:38:23:95:e0:55:79:e5:21:
c4:fa:d3:1e:91:a4:2a:3c:5c:f5:2b:4e:2a:63:83:
f2:27:c6:f0:44:03:ae:52:d6:1d:14:7f:59:86:46:
5e:da:ef:ac:97:a2:f0:df:50:05:aa:62:c6:0e:3b:
f9:08:79:f9:86:8e:03:17:18:c5:c7:2a:81:dd:17:
02:c5:97:c4:2d:bb:df:f3:8f:fb:87:56:c4:91:4b:
6b:58:42:a9:4a:26:2e:ac:f4:45:bf:ac:49:29:83:
01:b4:ce:93:dc:1b:c0:2e:32:1c:6c:13:ce:a4:69:
94:91:e3:94:3d:17:aa:bf:87:83:15:07:29:c4:3f:
9e:46:a6:a1:c8:ef:16:46:9a:8d:8f:27:8f:fa:7d:
59:cb:9d:0c:3b:a7:6b:49:9f:0f:27:83:5b:3f:aa:
f3:fb:8f:a5:79:51:20:10:2f:2b:ed:37:7a:0a:89:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5B:32:49:15:56:EC:3D:7D:70:45:A4:DE:43:DB:08:67:29:DB:A1
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:8a:2b:1f:f0:d5:a1:db:27:ba:74:f9:7f:2c:de:e8:8c:
58:e4:7c:0e:37:fb:22:5a:a6:4e:01:7a:0d:a2:ee:34:2f:3b:
76:41:1c:dc:63:74:02:42:f3:98:75:41:a3:dd:b8:1f:3e:47:
d7:40:df:09:33:e2:d4:d3:44:e4:a3:b9:3b:06:18:14:22:a3:
49:d5:f0:7e:5c:0b:02:63:d4:b9:5f:2b:b9:dd:75:89:43:75:
95:62:a7:b9:54:88:2e:54:37:f5:db:de:a8:88:bd:d1:ae:2e:
79:c0:9d:70:df:9c:e1:dc:0f:1c:26:d0:b8:83:a0:fa:0c:4d:
f6:f2:1a:7e:4e:38:03:be:0c:e8:3e:f5:f1:a5:11:37:a9:0d:
07:d5:8a:3c:74:55:4c:fe:d5:a0:b8:72:12:30:1e:ce:cc:82:
ee:df:37:f8:76:a3:08:90:0c:49:93:2a:3d:b5:09:0d:c9:b9:
b2:ab:be:3b:62:07:37:40:44:0e:6a:8b:65:c8:9d:3c:53:fe:
67:1e:32:ee:fa:94:83:ce:42:da:5b:2e:e6:9f:f0:ff:04:18:
85:ca:d6:44:74:56:33:cd:b6:d8:6a:bc:22:39:99:a0:7e:c7:
37:c7:f6:ac:6e:58:45:df:14:99:da:d0:0e:2a:d1:81:08:12:
57:fe:0c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:40 2026 by rpki-client