Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: cObfluv+dfYD6yK4UKz+u3x1aGdtdwGW3PQW62d5lLg=
Subject key identifier: 5A:1D:48:8E:0E:7C:60:51:3C:6A:EC:D2:78:AB:73:EB:2B:F1:F1:7B
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019F122E1EA1E40E7ABFDD35EE4A2F71778C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 12F1
Signing time: Mon 29 Jun 2026 07:00:40 +0000
Manifest this update: Mon 29 Jun 2026 07:00:40 +0000
Manifest next update: Tue 30 Jun 2026 07:00:40 +0000
Files and hashes: 1: FT6hKDdOscZGglIPmnTSBT_NdEw.roa (hash: XuMv35p4+01j1k8oQho1O4/aKo7qUhSStQREoa1ANMI=)
2: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: 6jSl992MnfRN+aUFNxdqABPlCnUo+VLat3qebXlwj8E=)
3: saGe65xuOQseP3c8kU3JX4FXHXE.roa (hash: /UkorSrGGemFtdnd/VIVCcjbVQGt7/xFaIltioMhlUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:1e:a1:e4:0e:7a:bf:dd:35:ee:4a:2f:71:77:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jun 29 07:00:40 2026 GMT
Not After : Jun 30 07:00:40 2026 GMT
Subject: CN=5a1d488e0e7c60513c6aecd278ab73eb2bf1f17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:d0:b3:80:c8:63:39:bf:fc:cd:47:fe:b2:
45:0a:3c:29:a9:dd:85:13:1f:52:68:0a:5c:9b:99:
21:5c:2b:69:98:82:00:81:5f:a5:33:69:53:fb:9f:
54:13:84:b2:32:7c:6e:81:dd:3a:8a:51:b9:fa:8a:
7a:42:43:87:14:88:32:2f:e0:a7:bf:00:82:ff:2c:
3f:eb:f3:f8:a5:8d:79:fe:65:05:ae:9c:13:07:c6:
df:96:15:9f:be:7a:83:19:a8:66:9e:48:50:26:d6:
ac:37:df:86:4c:52:97:a8:94:a8:d5:0d:d3:2a:e2:
e9:6a:c9:09:fb:66:d5:e5:4e:58:27:41:57:96:c4:
09:0a:98:45:10:5f:a2:94:98:0b:f0:17:fa:d6:a8:
8f:37:d9:95:49:05:31:30:56:aa:0d:17:cd:00:4b:
78:e7:40:6e:21:10:8d:d1:ce:81:76:34:78:6d:b8:
fb:52:1a:72:38:94:93:75:8c:76:78:85:dc:57:86:
b6:ee:26:51:5e:b5:dd:8d:b6:a6:a7:1f:f6:f2:e2:
e8:c7:7a:c0:bd:b9:ff:cb:03:22:4b:18:af:1c:ee:
cb:d9:37:5e:d4:ea:2f:74:c1:bf:9a:e3:64:bf:e1:
94:32:31:27:de:82:fd:8a:dc:d0:04:3c:9e:34:b9:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:48:8E:0E:7C:60:51:3C:6A:EC:D2:78:AB:73:EB:2B:F1:F1:7B
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:04:dc:a2:da:e7:e0:aa:6d:3c:9a:03:80:56:61:64:54:28:
0b:99:f5:c0:47:04:7e:fc:f3:a2:fe:bd:1f:f1:81:50:50:ff:
dd:72:59:ff:44:18:1d:00:37:71:86:e3:94:68:25:de:76:88:
7f:d2:8b:f3:3b:4f:a6:cf:c9:77:0b:ad:90:5c:d4:2b:c7:f4:
b3:ba:eb:b6:cc:84:ef:05:46:50:02:ed:16:c7:64:fb:f9:38:
f9:71:3e:5b:eb:f5:4a:1b:47:31:82:b2:05:ca:da:10:c3:7c:
87:58:92:fc:74:d0:a7:16:e8:65:0a:c9:83:86:9c:6a:6b:6f:
fd:51:b8:fc:b9:ed:89:c4:55:cf:b4:ce:d9:08:4a:ac:74:48:
15:3a:24:fc:64:fc:4d:e1:b7:5a:65:30:78:7f:fd:0f:76:b5:
12:95:7d:0d:03:be:f5:c7:a9:ff:6f:a7:2a:c4:4b:fb:ec:7d:
a8:8e:84:7a:ca:59:78:1e:df:99:64:de:cc:36:46:43:b9:68:
12:4f:97:f3:44:c0:c1:45:8b:63:7b:31:92:e2:ac:02:37:b2:
b4:25:14:83:3a:2e:97:21:41:57:c1:54:1d:bb:c9:5c:33:a0:
f1:30:2d:b6:7d:dd:17:00:3f:a6:a2:00:c2:0d:ae:58:c8:df:
89:c2:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:34:15 2026 by rpki-client