Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: EGO3zXZXGjzx5tUiLjZpPne3cmlgiLuBvakloOhzFSU=
Subject key identifier: 1A:63:00:EA:94:EE:5C:28:64:26:32:41:1D:C4:6E:00:B1:61:1F:A1
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 019F18679D2F11AF5D1470A9E9CD322A73C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 16CB
Signing time: Tue 30 Jun 2026 12:01:11 +0000
Manifest this update: Tue 30 Jun 2026 12:01:11 +0000
Manifest next update: Wed 01 Jul 2026 12:01:11 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: dmddv+0wfdUrPkmC46NU7qjLEXjW1EP6Nd6iz4QC6Tg=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:9d:2f:11:af:5d:14:70:a9:e9:cd:32:2a:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Jun 30 12:01:11 2026 GMT
Not After : Jul 1 12:01:11 2026 GMT
Subject: CN=1a6300ea94ee5c28642632411dc46e00b1611fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:fd:d9:96:02:d2:a3:14:b2:41:15:96:14:
38:c7:75:9e:e9:26:4a:61:02:1b:4f:ac:bc:a7:51:
90:b7:77:8b:a1:1e:79:6a:64:d1:f8:b3:0f:91:b4:
b7:fd:8d:4f:15:1a:e4:18:2b:58:98:15:80:6b:7e:
c4:09:58:80:03:6d:0a:6c:a9:86:34:ec:47:91:be:
5f:03:ac:48:97:3a:0d:52:8c:a3:ce:ad:3d:ae:76:
8f:a7:a4:b2:5b:f0:fe:9a:55:65:4e:ed:0e:5a:67:
23:5c:18:2b:ea:75:d4:3b:53:95:12:30:f2:36:eb:
25:2a:dc:2e:50:dc:b2:0a:20:1f:32:97:b0:bb:61:
1c:ea:c6:3a:d6:f9:19:d8:f2:0a:09:0f:19:ee:80:
df:4c:5a:8f:b3:73:ba:43:72:5e:54:20:e7:a7:0b:
3d:ff:ce:ff:e3:dc:b7:47:ab:be:64:f5:57:2a:2c:
31:38:a7:93:03:12:bd:1b:bb:c5:43:d8:27:2a:91:
f4:3d:53:28:11:dd:2c:62:35:55:2f:6c:c6:d8:d6:
53:aa:d9:e2:de:7f:72:fd:63:87:d0:8e:06:82:c9:
53:e9:27:10:c7:0c:5c:37:e2:48:45:fe:97:53:10:
0a:3d:e9:c9:38:1d:c3:7a:46:59:75:fe:46:c0:5b:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:63:00:EA:94:EE:5C:28:64:26:32:41:1D:C4:6E:00:B1:61:1F:A1
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:21:75:fe:a8:51:18:f2:34:23:57:8a:7f:43:0c:00:09:12:
d6:fb:99:66:98:e1:10:55:b0:2e:a7:2a:73:f5:0b:f0:e9:c5:
5c:45:8c:da:f3:16:5b:73:a6:09:70:1a:12:22:b3:b4:68:8f:
39:3d:41:bc:b1:14:82:f0:8c:b5:81:0b:09:00:9d:ca:6b:dd:
c6:9b:5d:1e:3a:34:e8:29:6c:f8:01:84:de:3e:36:a0:3e:8e:
92:79:cf:e8:ae:0a:2f:b2:18:68:dd:b6:12:b7:98:c4:63:f9:
51:a8:98:ed:41:0d:70:83:3a:1c:0b:a0:20:9b:02:97:e4:da:
08:88:ff:29:1c:1a:a8:e2:97:d8:97:e0:7a:c1:d9:cc:05:8f:
b1:43:40:b5:f9:a9:ae:59:0f:3f:59:19:d3:88:db:15:5d:d9:
1d:13:e6:b6:74:e8:cb:6f:60:41:b9:2b:30:4c:c5:5e:25:b6:
2c:fa:8f:89:93:d9:6c:d0:bb:ef:e6:98:96:ae:1f:6e:35:aa:
3f:e1:a6:e0:aa:84:ca:92:21:28:52:00:4a:27:c4:67:aa:eb:
06:46:a2:f0:50:07:04:40:6d:37:b8:66:d4:60:16:d4:3b:c7:
4e:85:2c:97:85:a6:2a:6d:b7:3c:73:e6:c9:de:cc:c3:43:7f:
71:86:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:49 2026 by rpki-client