Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: 3mHaoaBMpBP8/E0bnyvqiyti2xgnfJYLNnLCecFPHko=
Subject key identifier: CF:3D:25:10:9A:A9:87:66:C9:74:8C:E8:C0:3E:F3:A0:00:CF:05:EA
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019F11F804F82A0958E9A9F684F7DCF82626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 16A8
Signing time: Mon 29 Jun 2026 06:01:34 +0000
Manifest this update: Mon 29 Jun 2026 06:01:34 +0000
Manifest next update: Tue 30 Jun 2026 06:01:34 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: ZjoNXtOZwNB9VtuxWsU5svcSJK61xKhXkFxg75z/xiA=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:04:f8:2a:09:58:e9:a9:f6:84:f7:dc:f8:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Jun 29 06:01:34 2026 GMT
Not After : Jun 30 06:01:34 2026 GMT
Subject: CN=cf3d25109aa98766c9748ce8c03ef3a000cf05ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:84:41:95:dd:14:c9:d8:5e:94:34:e3:ca:
6d:a3:f1:76:09:cd:12:f6:c2:1d:23:20:c0:8c:9c:
48:a5:e2:53:2f:e5:51:9e:e7:33:a9:93:2b:61:8a:
6a:eb:3a:9e:0a:0b:b4:de:7c:79:8b:18:c7:2f:1d:
a9:52:39:54:80:fa:3c:a9:12:45:f0:c7:d1:be:d4:
68:dc:46:e3:d7:39:70:d4:32:f7:00:86:03:cb:4e:
7d:c9:1e:23:72:b6:b2:28:dd:96:c9:4c:5b:2d:53:
8e:88:d7:ad:ab:22:93:8e:85:f7:1e:76:62:a0:3a:
36:e3:e0:ba:08:0d:f9:d1:34:e3:05:e7:33:a7:35:
6d:d8:07:60:39:ea:0e:dc:d0:ea:ce:ae:ab:e6:02:
e1:fe:83:12:48:78:34:4b:7c:ec:ed:dd:d3:82:b3:
93:04:10:e7:98:35:96:43:22:62:6a:10:19:b6:d6:
ba:06:b4:e6:c0:9c:4b:a4:f9:2c:6d:aa:b9:0a:9a:
95:93:ab:22:77:b0:0d:43:2f:d9:04:c1:f2:db:fa:
02:ae:48:40:e2:20:4d:ae:31:89:81:12:d2:26:2f:
32:d9:21:99:2d:09:68:26:c8:2c:65:1d:16:ea:23:
ee:cc:f5:44:a8:95:79:3a:c7:ad:b0:74:77:f2:3e:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:25:10:9A:A9:87:66:C9:74:8C:E8:C0:3E:F3:A0:00:CF:05:EA
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f0:05:ac:93:c1:3c:8a:13:a1:92:4a:f0:d5:de:ce:f3:f5:
14:6d:b9:d4:7d:bd:f5:3e:24:62:a6:ed:6b:66:bd:2b:a8:36:
32:cf:1a:4f:d1:ac:8a:1a:ce:da:ec:d7:a8:7d:d9:2f:d4:31:
d6:81:d9:65:1f:8b:10:41:43:fb:28:b1:ab:1a:43:9e:ee:23:
83:10:94:b8:2f:c3:16:72:6c:6d:d1:81:bf:9b:b9:38:50:73:
08:c2:0b:1a:71:60:94:67:d2:22:f5:18:e4:8e:6f:12:e5:1a:
ee:cc:10:e0:bc:f7:f4:aa:a8:83:70:e3:28:b5:93:e0:67:d7:
be:d5:0f:72:eb:92:8e:b2:ba:b6:95:aa:a0:c8:11:c7:f9:99:
3c:bc:8d:f4:15:71:c2:89:f6:47:ab:3b:19:13:b3:8a:fb:13:
b3:ee:c3:85:b8:a7:1c:3b:87:68:8d:d2:6f:5f:02:d9:f4:32:
b0:10:d9:8e:17:3e:9c:da:c8:93:50:e8:a3:d9:10:f5:6b:fc:
ca:ac:0a:b0:30:9c:39:a1:52:98:23:54:fa:4e:1f:72:30:16:
57:dc:92:58:11:1a:3a:5c:a2:e8:7a:ff:2d:25:10:17:48:d3:
1f:58:10:48:31:81:bd:5a:1d:ce:7f:65:55:b0:f2:44:f4:62:
25:e6:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:30:32 2026 by rpki-client