Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: xxwHNWMcKxMyFtgK5VsIDRdManOPGSOBOiJTn7RNyDE=
Subject key identifier: F8:20:BF:09:EA:62:83:4F:BD:18:3A:8A:55:F2:8C:AB:14:67:6A:5B
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 01A14FF5BFF9F74296BE25EE1E2E90FB9327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0C5C
Signing time: Sun 18 Oct 2026 17:01:07 +0000
Manifest this update: Sun 18 Oct 2026 17:01:07 +0000
Manifest next update: Mon 19 Oct 2026 17:01:07 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: mdEjsNpjCzSlrL20M3zfabBVtTrabo+qdY01nih/CVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:f5:bf:f9:f7:42:96:be:25:ee:1e:2e:90:fb:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Oct 18 17:01:07 2026 GMT
Not After : Oct 19 17:01:07 2026 GMT
Subject: CN=f820bf09ea62834fbd183a8a55f28cab14676a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:93:55:f9:f8:37:37:b5:00:de:35:40:1e:
1f:59:dd:88:82:35:1e:de:e5:8d:d9:2d:9f:16:9e:
75:a5:43:05:63:23:17:c2:af:47:ce:fa:1d:6a:1e:
2b:c5:6a:2f:3e:4c:b1:0a:50:60:ab:10:74:92:9a:
a5:24:4f:95:79:47:54:40:b1:05:27:1b:5d:33:95:
67:81:92:83:c3:9d:3b:f6:c7:c6:ed:11:35:ff:00:
d6:47:f3:c9:de:63:d5:46:c9:e7:09:12:56:d7:b2:
73:ae:bc:6a:f6:3c:71:58:0c:4f:e4:3a:ee:29:c1:
0e:70:81:54:65:36:cb:c5:88:99:ae:02:e4:10:95:
35:62:5b:8c:9f:f4:87:75:76:3c:c0:a4:7e:06:97:
43:b7:62:33:6f:a0:ca:68:92:0d:b3:8f:c2:c7:05:
52:90:56:c8:f9:a9:de:d6:83:c3:d0:ba:be:f3:a5:
af:44:84:02:ae:bd:1f:26:90:f9:92:a2:3d:84:96:
9a:b1:eb:75:c1:b4:4b:10:d4:d1:c4:19:b2:9b:8b:
54:07:1e:c6:ad:33:e2:da:c2:43:21:1d:2e:77:b4:
36:15:02:1a:7a:ae:73:6c:40:22:d9:8e:32:be:c7:
9c:ed:e2:48:01:ed:7d:61:46:b5:67:5d:f4:77:25:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:BF:09:EA:62:83:4F:BD:18:3A:8A:55:F2:8C:AB:14:67:6A:5B
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f0:9c:84:c6:e0:b1:84:61:8f:f8:13:22:d2:56:7c:f1:af:
d1:72:20:a2:87:fc:ae:6b:84:82:ed:b3:70:63:b9:0b:ab:30:
a9:53:f2:12:7f:1d:e5:93:29:fd:cb:b2:a1:6e:b2:95:40:36:
d0:b4:d0:ce:ed:d4:7d:2e:63:db:37:dd:ce:1a:92:4d:e3:18:
01:4f:9b:6b:26:9a:52:52:76:7e:87:8c:35:1a:aa:16:70:8b:
64:5a:2b:d8:b8:6b:3f:f4:ce:50:04:02:5f:3b:e4:86:84:c6:
64:a6:65:bb:62:e8:1d:a4:d9:49:c7:00:72:25:97:f8:c4:af:
58:7d:99:c8:d7:0c:8a:ce:62:d1:bd:ba:99:a7:81:08:e4:82:
14:1d:72:66:11:81:61:5f:a0:81:bf:0e:40:ce:90:14:94:cb:
d9:9e:ff:c0:0c:c1:ec:bd:62:e4:6b:34:29:81:a2:3c:5d:53:
8e:74:c3:ef:c4:69:92:0d:2a:57:74:c6:5a:f3:89:9f:de:5c:
32:7a:10:54:0b:5d:3d:f0:26:bf:dc:c2:8b:76:8f:e9:05:ca:
89:9b:16:3e:d1:c2:8b:f8:d2:b2:f1:87:fb:1a:15:e1:ec:62:
34:67:e7:f3:ad:d2:7a:1d:6a:be:01:81:e8:2d:fb:98:5a:4a:
38:f9:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:50:05 2026 by rpki-client