Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: WEFVUbSLCDawM1GPTdPHInZzeA8ekSd00yJGIYNNESI=
Subject key identifier: 18:04:A6:4C:A1:EA:DC:32:A2:49:50:29:98:B4:F8:5E:F8:5E:8B:FC
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 01A11A878E1DDCC9CDBCBD0DB9ECC3C12862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1A92
Signing time: Thu 08 Oct 2026 08:00:53 +0000
Manifest this update: Thu 08 Oct 2026 08:00:53 +0000
Manifest next update: Fri 09 Oct 2026 08:00:53 +0000
Files and hashes: 1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: gbY8DV/FdwuezmSIHUM980gsQkkgT1xDA83gUE9L8Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:8e:1d:dc:c9:cd:bc:bd:0d:b9:ec:c3:c1:28:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Oct 8 08:00:53 2026 GMT
Not After : Oct 9 08:00:53 2026 GMT
Subject: CN=1804a64ca1eadc32a249502998b4f85ef85e8bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:64:4d:c5:3f:75:92:f3:1b:30:4e:aa:4f:
ab:a4:b5:97:2c:b6:8f:8a:42:dc:e3:a9:62:ef:fd:
3d:50:ce:86:93:e0:95:5f:13:1d:36:45:ed:a8:26:
e9:a1:67:1b:46:31:1a:c2:ee:77:a8:48:85:be:50:
f5:f9:44:d7:e9:89:fe:65:d4:60:a2:40:ec:34:9f:
5d:16:c7:4c:a9:d1:c3:37:39:62:2e:38:c6:82:ab:
dd:77:66:80:90:10:5f:24:be:40:b8:d0:01:e5:70:
86:08:cc:71:16:39:12:28:b2:8e:df:21:aa:a6:ed:
00:0e:3d:6a:b7:08:70:5f:c2:0d:44:01:0d:b9:44:
86:0c:23:5d:1e:ec:72:19:73:7d:fc:cf:c0:f4:3f:
46:61:61:8c:3e:9f:d2:f0:7e:d6:38:fe:3e:10:5e:
04:d3:fa:8e:1e:e2:71:4c:b0:47:a4:f4:84:45:15:
86:66:7e:c7:07:fe:37:73:50:90:eb:17:71:13:10:
b8:20:63:7d:8d:14:77:8e:81:80:d3:1a:ff:6f:7e:
a9:52:29:0a:15:4d:4d:80:a2:25:c7:cf:dd:61:95:
d2:2c:8f:56:78:48:ea:e1:27:13:7e:24:d3:65:da:
4e:0e:d1:d7:bc:b9:dd:98:4e:00:c1:22:5e:83:21:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:04:A6:4C:A1:EA:DC:32:A2:49:50:29:98:B4:F8:5E:F8:5E:8B:FC
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:19:8e:c1:4c:54:82:92:51:4b:b9:66:01:74:14:86:2c:97:
4f:f6:31:84:a7:dc:1e:fd:15:cb:f9:7e:d8:4a:70:49:f0:41:
74:89:80:e6:25:04:9b:ed:43:18:b4:68:d5:f2:7c:89:cb:9d:
db:fc:5d:a2:31:ac:7c:9f:eb:d8:78:62:5e:87:a0:ca:a1:93:
e1:24:5d:b5:07:60:db:fd:21:30:57:a2:0b:c0:f1:31:18:bc:
07:f7:47:15:4a:39:d1:82:7a:00:24:6b:51:e6:d2:06:7c:a2:
29:e0:02:22:46:d7:a0:b7:60:18:33:8f:c7:c6:b4:be:f1:aa:
5a:63:9f:74:cc:a6:53:15:b5:34:67:f6:7b:63:69:4d:71:88:
8b:d4:b7:9b:c5:19:29:61:c5:81:7d:9a:6b:d1:29:bd:76:64:
cb:69:c6:22:fd:a3:8b:a0:31:09:67:26:91:93:a2:d0:45:59:
09:25:ae:4a:53:9b:c0:54:68:5a:e4:70:9e:1e:73:eb:7a:0f:
0a:09:4d:2c:4c:21:d2:81:24:85:70:b2:02:9d:65:39:d5:c5:
b7:54:99:26:5a:3e:2d:9a:c1:ce:24:16:0d:24:02:de:10:c5:
bc:e4:1e:2b:fc:70:87:32:b4:9b:22:4f:57:79:8e:16:bb:50:
0d:5a:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:24:31 2026 by rpki-client