Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: +ZOb4PmMmhMTsrMEXR+4A0DbtABjzBma5Y0MkdPKuHI=
Subject key identifier: DA:07:DF:5B:0C:40:8B:51:64:1F:EB:12:53:48:7F:42:D1:58:3A:5B
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 01A0021436E79A9D8BCFD6E9C102A6298D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 1744
Signing time: Fri 14 Aug 2026 21:01:14 +0000
Manifest this update: Fri 14 Aug 2026 21:01:14 +0000
Manifest next update: Sat 15 Aug 2026 21:01:14 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: z4BxnUaIAm2fSkmRJsXsVV/ZvzE8+eaMypdhQD2r5Fc=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:36:e7:9a:9d:8b:cf:d6:e9:c1:02:a6:29:8d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Aug 14 21:01:14 2026 GMT
Not After : Aug 15 21:01:14 2026 GMT
Subject: CN=da07df5b0c408b51641feb1253487f42d1583a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:f6:24:e2:67:24:66:e7:41:81:b9:6a:01:
c7:ab:99:11:f5:ef:f8:a0:50:d5:f5:6c:e9:61:70:
5d:6f:0b:09:84:e3:26:c9:70:55:67:37:37:63:ab:
49:0b:f9:6f:6d:86:b8:2b:81:08:54:bf:e2:a3:5b:
de:93:0a:0a:60:7d:e1:96:f2:83:58:8a:91:1e:7f:
47:16:06:50:88:cf:cb:7c:5f:eb:17:b6:16:c5:ca:
c1:b7:37:14:65:74:72:42:c8:a6:79:83:1d:9d:73:
21:5b:18:cd:83:45:8d:a2:15:7f:a6:08:8c:6e:38:
5a:9c:2d:c6:84:01:9f:64:23:80:ee:1e:f7:ca:40:
4a:cc:43:7f:6d:cd:01:67:fe:91:e8:6a:6b:36:8c:
f7:a8:f8:b6:f9:78:5c:c7:a6:f3:49:97:d6:da:c0:
90:47:40:88:9d:e4:df:8a:fc:4a:3c:16:dc:fd:21:
be:27:be:6a:2f:b0:d5:30:c5:1e:a9:2e:98:21:4a:
f3:5c:e6:8e:96:a5:ed:69:15:d9:85:f5:e4:36:18:
42:7d:ff:37:32:21:d0:a4:c1:2f:c7:27:9f:bc:6e:
b7:31:54:62:e8:7b:26:08:04:12:12:e4:f8:b7:03:
bb:9f:00:bc:d4:7f:3a:bf:1d:29:8d:f0:c3:53:fd:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:07:DF:5B:0C:40:8B:51:64:1F:EB:12:53:48:7F:42:D1:58:3A:5B
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e1:ba:7b:fd:1f:06:a0:87:0b:10:2b:1a:96:47:ce:0a:52:
4e:10:dc:f1:34:de:ec:9d:33:55:98:83:88:31:7c:6a:3d:f1:
61:41:58:4f:ed:a3:6b:3a:3f:aa:c2:86:e6:dc:b0:fb:46:e6:
91:1f:b3:e7:d7:aa:14:9b:de:65:58:d0:00:aa:f4:b4:f3:a8:
8f:d3:0e:c2:b5:38:33:3c:a9:12:c5:ea:4a:68:79:7a:25:60:
d3:b3:9a:5c:7a:c2:5e:5a:fd:1f:fd:61:12:a2:a0:e3:a0:10:
8c:29:59:dc:8a:d7:ec:e7:e6:35:fe:27:12:d1:6d:35:2e:7b:
5a:89:16:06:22:d3:a4:39:a1:52:61:15:4e:1f:7e:43:27:90:
3e:40:c1:c1:03:e1:21:42:e2:52:37:1d:31:ee:11:16:3d:06:
93:e4:2b:8b:26:33:d9:0c:32:3a:e4:d1:fc:ad:7c:21:51:22:
d5:9f:79:a7:4e:3c:e6:d3:db:b9:c8:6c:10:df:19:df:fe:86:
e2:0a:94:a4:78:f4:13:9c:27:5a:e4:96:fb:41:94:40:f0:0d:
fc:10:3d:dc:72:e3:a4:a5:4a:43:03:81:29:9a:5d:66:b4:73:
a9:bb:fe:e0:c6:cf:8f:9f:ac:0b:82:71:57:9e:b6:3e:53:cd:
b9:18:0b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:46 2026 by rpki-client