Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier: NacPR8d+NjaMNK1rofN0XuxdmmVgPYsr0VmDO+FdqjM=
Subject key identifier: 5A:8D:A0:A3:92:70:8A:47:BB:CB:0D:84:BF:8A:FD:8B:BE:4D:5D:3C
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 01A1611FD75F7CED6D25778C088A1A420378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number: 1ABA
Signing time: Thu 22 Oct 2026 01:00:39 +0000
Manifest this update: Thu 22 Oct 2026 01:00:39 +0000
Manifest next update: Fri 23 Oct 2026 01:00:39 +0000
Files and hashes: 1: 14WxdiCVm4rnXK9-tDL_PXH0l8E.roa (hash: hqaflv4B62LQIs49QinUGmrt4sGWk2w+n2txj5z2H8I=)
2: 8QavD1xGOGIsFORO8QpTl9ze2qk.roa (hash: CP8EcYyC8MJCP4Qe6fiDSKdEQwvcsEiCEc0QZK7hpC4=)
3: E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa (hash: 3KMhjTFJ+WQEHP63JQ46+UXmsQRLh8CZFZ+BiwZhaII=)
4: LaR2tR9VELkIqYB1KayofzhugrQ.roa (hash: IhBsr0UP82ELR6sQ5NhU1p2TkFx8sUm8QDTn1ahLei0=)
5: _NPYi_tgDVixqRihfPCnzEyteiA.roa (hash: a/DOqggraEPPchKDiC0Upq/MDsgJ2XWYLDm3YdovFlo=)
6: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: QKSh9yhRWPgT9FIq/0H4X9gqlozzwuhV3PDXM0fzbDo=)
7: wswbiWhFN53OcrlAurii4-C90OY.roa (hash: FaPWRVidTojhM8z9Dp/5f4Ru4RTG3RuxDK7oQeJK2nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:1f:d7:5f:7c:ed:6d:25:77:8c:08:8a:1a:42:03:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Oct 22 01:00:39 2026 GMT
Not After : Oct 23 01:00:39 2026 GMT
Subject: CN=5a8da0a392708a47bbcb0d84bf8afd8bbe4d5d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:73:52:95:be:3e:a8:6d:07:92:4e:25:41:
06:0b:49:19:f0:f2:97:c7:48:02:b2:97:8b:a9:fa:
ca:7f:3d:94:31:53:d2:52:2d:45:65:9d:8b:ff:df:
93:e1:2a:4d:a1:48:e6:5e:f0:bf:4b:6f:78:cc:63:
bd:77:bf:e4:4d:19:b0:cc:90:7d:4c:ae:f3:01:2b:
a1:50:97:f8:54:92:b1:17:b7:3c:58:b1:23:de:d3:
cd:83:48:7a:36:e6:2e:f1:4b:32:f2:be:63:8c:ab:
7b:8e:a3:9e:f1:a5:24:97:3a:8d:49:1c:16:a6:d2:
c8:3e:8a:6e:08:38:82:d8:44:51:21:3b:28:5b:13:
f9:9a:21:dd:e6:ac:bf:0d:18:8d:27:c1:17:8d:bf:
03:80:62:d8:58:f5:aa:37:80:fa:c8:04:1f:cf:75:
8b:47:2b:5c:5e:84:81:6a:73:be:82:6b:fd:94:0d:
35:21:ba:e9:d7:7b:94:b2:b8:ed:90:12:22:fc:62:
f8:5b:a0:1a:1f:52:1a:04:ab:e1:db:c5:62:d2:81:
78:33:5f:15:35:77:6b:d8:5f:b5:2e:f1:29:c2:05:
44:75:4e:42:01:dc:6e:e5:12:74:55:16:ac:38:4b:
c4:e8:53:62:0c:b4:6d:85:fc:5d:e4:87:25:9e:4a:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:A0:A3:92:70:8A:47:BB:CB:0D:84:BF:8A:FD:8B:BE:4D:5D:3C
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bc:87:75:0d:be:97:6a:70:1f:28:60:26:66:7b:81:78:84:
f2:5f:b3:29:ba:43:e2:c9:38:9f:4a:51:37:25:c5:b8:7a:59:
d8:2c:5b:20:2f:c3:4a:6c:09:cc:97:d0:81:34:7e:9a:c7:0c:
2d:8f:4f:50:07:e6:b8:43:45:0b:16:e9:22:d1:74:bf:4d:22:
7e:7e:b8:ff:93:d1:f9:56:9b:bc:b1:d3:c1:89:24:8f:3e:ba:
52:90:ea:42:5f:82:ef:ee:07:8a:4c:c3:7c:6b:07:cd:20:c3:
f6:3f:93:b7:d4:ac:53:fd:a4:00:7c:70:0a:ea:4c:b1:6c:58:
5c:16:4b:44:e9:36:b4:31:7a:24:89:42:3f:08:41:40:f3:2b:
4b:42:e7:ee:03:a5:b2:2e:07:c1:55:6a:a7:67:68:57:aa:60:
86:f3:f4:2e:3d:f3:8d:89:2b:08:18:33:ea:49:02:08:ed:7f:
6b:54:07:b5:1b:30:a9:89:a0:36:e2:f1:46:94:42:04:a2:34:
09:70:b8:cc:5a:5d:ae:8c:bf:6b:d1:65:d7:87:90:8f:a7:c8:
2f:23:a7:4c:ee:f2:30:a7:8d:3c:15:a5:20:3f:4c:82:a6:73:
73:eb:c8:29:9a:91:58:f0:f2:31:8e:58:08:f6:ff:86:2d:9d:
da:17:47:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:50:09 2026 by rpki-client