Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: xco64YX4+xDjmzfJbRu7/N2QWR0/XVzONEYW3z5oBwE=
Subject key identifier: A0:A7:14:24:40:64:41:7B:2A:C6:CD:C0:9A:C4:FD:08:67:AB:40:2F
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 01A05AB2B58A87090C2FECCF294C4BD260B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0BDD
Signing time: Tue 01 Sep 2026 02:00:56 +0000
Manifest this update: Tue 01 Sep 2026 02:00:56 +0000
Manifest next update: Wed 02 Sep 2026 02:00:56 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: 3KgNRPUWbYeFL0H2xcjA7YTLbcF+eLENiRBDFN2DYRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:b2:b5:8a:87:09:0c:2f:ec:cf:29:4c:4b:d2:60:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Sep 1 02:00:56 2026 GMT
Not After : Sep 2 02:00:56 2026 GMT
Subject: CN=a0a714244064417b2ac6cdc09ac4fd0867ab402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:70:29:a7:b9:19:b9:dc:9b:c8:f5:3a:d1:3a:
f6:01:17:7b:70:86:fe:e4:e0:fd:0b:49:0e:3c:00:
84:1f:0d:d5:52:e9:b7:52:0f:2b:6d:59:2d:83:7a:
b9:cc:7b:59:9e:65:4c:96:00:ce:f1:c7:0d:ae:63:
1e:04:35:13:74:0b:81:a8:44:8e:07:cc:a2:32:37:
c9:92:c5:c6:c8:b2:58:79:7d:a3:b3:b3:6d:b9:5a:
25:39:cf:01:61:48:87:bb:cf:a9:40:7d:c1:a5:2b:
1a:db:ba:ce:6d:e1:e5:0f:10:a4:46:1b:96:21:a7:
ff:1a:8a:0f:a4:59:09:ca:96:e6:b7:9b:b9:d1:82:
95:2e:1a:5b:27:f3:c8:8e:55:e4:ae:3b:ff:96:bb:
77:96:66:35:f6:0a:4e:9f:8d:6e:5d:d7:b9:e7:6a:
3e:93:66:1d:d3:c3:d3:37:e9:91:e1:91:77:8c:e9:
35:f4:92:68:a3:ef:ca:f3:26:60:86:d4:59:2a:a0:
a0:f0:5b:a4:99:d5:af:4c:9d:5c:a7:70:ac:4f:05:
c4:3b:72:73:17:9b:4c:98:26:4b:96:2d:24:92:79:
9e:f8:cf:e1:89:a1:0f:c3:c8:84:8b:56:05:da:99:
12:9b:19:89:06:73:46:9d:4e:1b:51:ac:f5:e5:dd:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A7:14:24:40:64:41:7B:2A:C6:CD:C0:9A:C4:FD:08:67:AB:40:2F
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:28:b3:72:2a:b6:33:a7:87:ed:65:e3:e6:7c:72:e6:56:a6:
80:23:51:67:8c:cd:00:27:de:35:e3:7d:b2:c4:a2:1e:57:d8:
e6:d9:0a:b2:f6:12:a4:11:1e:64:9b:cd:39:a4:a6:7d:9a:b2:
88:6c:e8:39:73:5a:c5:eb:d3:22:e0:f3:0a:e1:c9:2e:b4:a1:
f5:0e:b9:5c:ff:75:e7:78:b2:ee:90:9d:1f:93:8a:ca:b2:ba:
f3:17:73:f3:4e:fe:18:f2:1f:2e:66:c3:11:de:0a:54:52:9f:
7d:d2:c1:45:f6:e2:5a:ae:71:7b:26:ec:e9:ce:61:89:e2:f2:
e0:26:4b:be:7c:f5:cb:fd:94:65:b7:fa:9a:db:9f:18:eb:b0:
7e:34:03:d0:c7:37:f6:c5:f8:20:75:63:b2:5f:22:25:6e:98:
0b:08:77:fd:5d:f5:f6:50:b4:5c:87:f1:0b:5d:f7:13:75:a8:
50:da:71:1c:38:bf:91:43:e9:66:3e:11:44:60:e1:85:23:a2:
79:ff:9b:89:b4:f3:c3:69:20:f9:93:59:0d:05:3c:d7:5a:b1:
fa:24:7e:4a:5b:cd:50:0c:96:a0:58:76:98:b2:1d:15:8f:4f:
88:08:b6:cb:dd:ff:36:e9:0b:46:3c:d4:13:5c:3b:53:18:4c:
6c:92:20:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:14 2026 by rpki-client