Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json)
Hash identifier: jHe5xw2XjZOYcWtsOzzEDqVnQLBh7G0BShoUqDPr+E0=
Subject key identifier: 0A:72:AB:ED:B1:D8:28:45:EA:02:C7:EB:D8:59:DF:73:E4:8A:B9:12
Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b
Certificate serial: 01A14CF44CF7EDCF6EEFB9EAC6217734DB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
Manifest number: 06D1
Signing time: Sun 18 Oct 2026 03:00:41 +0000
Manifest this update: Sun 18 Oct 2026 03:00:41 +0000
Manifest next update: Mon 19 Oct 2026 03:00:41 +0000
Files and hashes: 1: 5v9iEqqw9h8Wg3xh2Nok2-eNQQM.roa (hash: 3N4L/xDAzZWmVmC1vE/Ib8W3ZzU4rXZkkHgA9mF0qSI=)
2: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: rKF6exudys/JiF56LZdBEHaTjmNengr7XM6k7pshVjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:4c:f7:ed:cf:6e:ef:b9:ea:c6:21:77:34:db:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b
Validity
Not Before: Oct 18 03:00:41 2026 GMT
Not After : Oct 19 03:00:41 2026 GMT
Subject: CN=0a72abedb1d82845ea02c7ebd859df73e48ab912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:48:10:96:00:9b:93:ec:e0:d9:ab:58:0b:05:
ee:f8:84:36:39:44:6a:61:ca:8c:27:4d:db:c2:7e:
d3:48:b4:c5:0d:bd:a3:96:ff:e3:c8:24:ba:6b:f1:
d1:6c:a6:56:fd:f1:1c:6e:e5:3e:0b:58:3c:a8:16:
f5:05:53:d2:79:b6:82:ee:eb:c5:de:d8:65:ef:8f:
38:60:d1:db:50:e4:71:a9:34:52:83:5f:4d:e8:ae:
36:c4:0c:23:40:85:dd:8c:05:ae:00:fa:3c:2f:18:
47:2a:a5:cd:f1:d4:d9:fe:8a:8f:36:64:17:b0:92:
74:42:cb:a5:c2:2a:99:f9:35:94:9f:c1:60:00:9e:
3c:71:fa:fc:8d:e9:92:3b:e4:6e:a3:68:96:6f:e8:
75:88:7e:5a:83:0c:16:82:0c:9e:f5:56:29:e4:61:
35:f5:ab:49:6d:c1:42:ce:71:a2:26:17:ff:66:ad:
6e:03:95:d3:a3:10:a6:a9:a0:6c:0a:80:8c:a8:ad:
fd:81:4a:b4:5b:1b:50:6f:69:62:9f:5f:aa:c6:cf:
c1:d2:20:cc:26:03:55:3c:be:ef:b1:ec:c2:4f:1b:
b3:1e:86:e6:81:86:a6:11:32:a3:28:6a:e8:a0:86:
3c:85:55:ca:47:5a:fb:18:35:d0:a8:02:fc:38:db:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:72:AB:ED:B1:D8:28:45:EA:02:C7:EB:D8:59:DF:73:E4:8A:B9:12
X509v3 Authority Key Identifier:
keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:e4:b9:d0:d5:19:d0:9b:ac:5d:fc:c5:4a:29:18:c7:57:
a1:7c:26:94:a5:21:ab:7a:29:d9:af:28:a9:fc:6e:4f:e2:89:
3c:c3:dd:3c:c8:8a:23:a6:54:5e:21:39:bb:af:bc:3c:f1:58:
90:07:6e:ac:e2:a1:93:ec:11:ad:e6:70:30:f5:89:20:ad:c8:
cb:99:d4:ee:77:7b:99:31:04:23:07:3a:e6:24:47:77:1d:0f:
2d:a5:4c:3a:24:cc:4c:8d:7c:ca:bd:e3:b0:19:b9:30:dc:71:
3f:4f:14:89:43:40:37:20:c5:fe:3c:53:a7:26:60:e1:ba:4a:
e4:1e:31:e3:3d:9c:c9:46:63:99:fa:70:d3:72:5d:bf:8a:0b:
57:bb:57:9a:fa:1c:38:5c:53:38:ae:8b:13:09:d6:90:1c:bc:
6d:ee:bf:03:ff:3e:5b:e2:d5:81:f7:e1:54:bf:57:be:92:27:
7a:9a:b2:4a:f4:e4:81:9a:1c:26:7c:2b:8c:45:92:06:8a:83:
43:1b:56:91:f0:d8:09:0e:ee:c8:70:f4:24:a8:89:26:e9:e3:
31:f5:2d:b5:d9:1d:45:df:31:a0:be:e9:2e:db:1d:6a:ff:0d:
3b:e7:80:a9:48:f2:bd:c0:39:ec:e4:f9:f3:0e:3a:ac:7f:5c:
c0:96:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:13 2026 by rpki-client