Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: ZjYgNKjKHu+YNl+lZAveqBN0FyyQ0JfdWghsZAbKu+o=
Subject key identifier: 15:4A:BE:29:CB:9C:7D:BB:C1:56:BA:C1:EB:AC:1D:63:90:1A:E2:72
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 01A13CDC1FBA71F01390FABDA680211471A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 17E7
Signing time: Thu 15 Oct 2026 00:00:21 +0000
Manifest this update: Thu 15 Oct 2026 00:00:21 +0000
Manifest next update: Fri 16 Oct 2026 00:00:21 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: 3GgB+K2DD4JT5YixGUFmAahsSxdox7QVRo9xlNyGqrI=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:1f:ba:71:f0:13:90:fa:bd:a6:80:21:14:71:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Oct 15 00:00:21 2026 GMT
Not After : Oct 16 00:00:21 2026 GMT
Subject: CN=154abe29cb9c7dbbc156bac1ebac1d63901ae272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:94:fa:98:2f:00:c6:de:59:ff:52:24:02:
93:63:12:50:88:2b:95:e6:9a:e5:6d:e4:01:89:d6:
8b:f5:f7:52:43:21:9a:0b:d2:e5:27:2c:7a:12:39:
81:22:e1:b5:2d:c6:c6:b7:84:53:7a:00:13:6c:28:
49:41:4d:75:dd:5b:e5:3f:59:17:12:0b:6a:77:52:
33:ea:ac:2f:89:d2:b3:6a:f3:4f:c1:d5:c3:a1:a3:
d1:83:ab:dd:36:4d:5e:67:dc:e9:81:ae:de:fb:54:
cc:74:86:87:83:17:57:bf:8b:87:52:84:56:f8:f0:
56:f8:e0:f1:44:b4:b2:67:90:82:69:b4:bb:ee:35:
e4:00:b0:b8:08:60:d4:01:52:14:b4:6b:e2:1a:90:
bb:25:19:7c:d3:19:dc:01:a7:2c:37:d6:b8:c9:91:
79:61:63:7d:28:8c:af:e4:2a:24:a9:bc:5d:81:8f:
e9:d9:45:d2:8a:85:ba:a9:01:dd:01:9a:c9:d8:9d:
88:a6:ee:4d:b3:d1:e9:43:3e:13:95:94:94:b7:cb:
6d:31:5c:b5:e1:57:b8:a7:eb:13:7a:89:da:ff:4e:
00:57:bf:d2:15:82:2a:0c:df:7c:32:78:aa:29:fc:
fe:8f:04:30:e1:58:72:85:1c:0e:7e:c3:dc:79:18:
e7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:BE:29:CB:9C:7D:BB:C1:56:BA:C1:EB:AC:1D:63:90:1A:E2:72
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b5:15:07:c1:1b:6b:6f:fe:ae:84:5c:9a:4a:b0:01:58:d3:
cc:98:ac:05:45:c6:6a:fc:70:59:bf:d5:35:45:f3:b1:06:f5:
10:f3:eb:86:6b:c7:ca:54:1f:96:30:a3:e5:a1:e5:85:9b:fd:
41:12:21:19:b7:e9:85:cc:9e:49:b6:9e:66:22:c7:a1:a5:b2:
f1:d9:22:3f:93:ca:c7:b7:13:e0:d3:ad:d7:58:07:28:f1:a3:
a9:6f:72:bd:80:75:9b:46:77:98:d9:e4:32:96:79:ad:b4:c3:
c4:27:d7:58:7f:11:8c:07:f5:44:d1:40:2a:bf:27:3b:f5:53:
72:26:d8:af:8e:29:35:77:63:a2:72:9f:bc:15:b9:01:01:5b:
68:b6:48:87:d6:e5:54:50:a8:40:fb:b0:79:16:ef:23:40:dc:
92:2f:a6:7d:05:c8:17:d8:47:99:2c:a3:9d:a6:be:50:a1:3e:
76:63:0b:b2:66:2a:58:e4:9d:85:49:84:54:99:2a:aa:db:6f:
68:53:43:aa:1b:fd:2c:ca:ff:f1:24:9c:00:03:45:83:18:79:
a9:9a:e0:b7:59:27:eb:e8:6d:46:58:fa:2e:2f:ac:37:84:11:
a5:87:4a:b4:55:48:fe:8d:93:47:97:21:04:a1:26:2a:a0:8e:
2c:20:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:37:23 2026 by rpki-client