Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: +THgXjvRZ7IjvcIOAJdA1nV0nZp5WHKuRfCwlIs/ikc=
Subject key identifier: 26:33:F5:5D:11:BA:60:45:69:C0:53:54:FC:1A:E7:6F:FF:D9:FA:BD
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 01A0028162CB95767AF3AA3196452C440245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 23:00:28 +0000
Manifest this update: Fri 14 Aug 2026 23:00:28 +0000
Manifest next update: Sat 15 Aug 2026 23:00:28 +0000
Files and hashes: 1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: vl+4Rr9p5yAIwKMKAGRiossnDNE/bR7ICO6H+m1AORc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:62:cb:95:76:7a:f3:aa:31:96:45:2c:44:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Aug 14 23:00:28 2026 GMT
Not After : Aug 15 23:00:28 2026 GMT
Subject: CN=2633f55d11ba604569c05354fc1ae76fffd9fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:11:8b:0f:b0:3a:19:0f:4e:6f:ab:a6:98:
73:bc:74:82:7d:99:66:29:d8:cf:5f:eb:02:50:2c:
58:b4:de:41:fb:4f:9f:09:8c:1a:1f:99:53:ee:2a:
e8:26:3a:d7:04:d7:98:97:dd:80:9c:8d:90:3c:a1:
c6:52:2b:4e:05:2e:8d:eb:76:3b:68:69:66:4b:64:
50:1d:cb:e8:56:92:bc:29:cc:a7:a8:e3:32:e3:90:
8c:02:6b:07:82:0e:a3:3c:81:ea:b8:66:3c:94:54:
1d:79:00:d4:83:89:a6:78:86:89:a3:93:40:e3:4f:
f5:2a:10:64:7e:31:45:be:e2:89:24:08:0c:14:93:
10:67:ea:92:ce:b3:02:5e:36:f3:3f:6d:8f:05:2f:
ba:ed:79:7e:b6:78:df:fa:50:73:06:e4:db:7d:08:
03:e2:07:68:89:ab:c3:f5:cd:73:67:61:f7:1f:1a:
e4:87:b1:59:91:46:b6:02:56:6c:cb:f2:36:31:46:
46:d4:e0:b3:75:ac:9b:6b:3e:de:c7:91:9c:7e:db:
94:43:38:5c:e8:41:38:ac:5b:47:02:4a:82:2c:7b:
70:e7:1e:0a:8b:fa:2d:63:1d:ec:ff:8f:e2:5c:13:
76:b0:5e:0b:89:04:9b:bf:2e:0f:e7:b4:d2:5f:e2:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:33:F5:5D:11:BA:60:45:69:C0:53:54:FC:1A:E7:6F:FF:D9:FA:BD
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:19:dd:e3:6c:2f:d7:49:70:4b:15:53:6c:ef:86:13:8f:f0:
3c:ff:de:5b:5e:21:d7:af:69:8c:15:d3:c7:35:66:ed:55:12:
e3:47:9c:f1:62:68:08:1a:11:44:c9:34:42:35:57:04:b2:f6:
8d:6f:03:f9:b6:0d:bc:83:b5:52:94:f3:20:86:27:6c:93:df:
74:bb:78:b8:16:6b:ae:3b:c4:a2:74:ee:4a:63:70:07:4d:c7:
69:78:24:d3:13:d6:a6:ac:a0:93:6f:18:3b:a1:ee:af:55:fb:
73:c5:19:a8:f8:c2:f8:f7:ff:a1:2b:c7:a0:52:12:73:4f:d5:
2f:86:a7:fb:cd:e8:16:12:65:24:7c:2b:26:ec:52:42:04:28:
1a:6f:5a:53:3f:8a:5d:c8:30:54:50:da:6a:58:7f:1b:3f:9f:
c8:c9:55:2f:54:c6:f5:92:e3:ba:7e:a6:4b:3d:3a:a6:b1:ad:
d3:bb:04:7f:b1:69:8c:f6:25:bd:c6:d9:da:72:7e:e3:50:eb:
66:56:d5:c0:ba:4f:d4:b4:fe:f1:c8:9f:8c:eb:cd:10:f9:cc:
e1:0f:a5:d1:99:14:01:d7:d1:c8:d7:3d:d3:80:67:4e:d7:a6:
2e:fd:e7:cd:55:fe:c0:70:f1:cd:b2:06:b8:2d:b8:12:54:4d:
2d:70:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:48:21 2026 by rpki-client