Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 8oli870Z0inq7jqj7xZEfU7jHIYmGh9acNgYL5oUkuo=
Subject key identifier: 7C:95:0C:67:B8:40:04:36:13:6B:1B:C1:2B:E9:24:E9:48:DB:D7:0C
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 01A00281DDC7EE4D73FA8C4E6D0C1F18CC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1A0E
Signing time: Fri 14 Aug 2026 23:01:00 +0000
Manifest this update: Fri 14 Aug 2026 23:01:00 +0000
Manifest next update: Sat 15 Aug 2026 23:01:00 +0000
Files and hashes: 1: 9U2gzAHMQAtRK1gQNHxjr09eebA.asa (hash: AXuT5FLBEMvZmsQmdwNr+acvh8DbWZJW923I5JZgo+o=)
2: SnthKeN0QNsYJSCvNCIW3QkdzO4.roa (hash: pm2CDsGetmBd20fFZ1+ibNzTRJyqdNoHhgU1ZBjBaHg=)
3: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: tvPOxzeq1TRnA/YbSjZu5pU0UgovTeSpaVxoTc5wvaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:dd:c7:ee:4d:73:fa:8c:4e:6d:0c:1f:18:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Aug 14 23:01:00 2026 GMT
Not After : Aug 15 23:01:00 2026 GMT
Subject: CN=7c950c67b8400436136b1bc12be924e948dbd70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:c2:9f:f6:d6:6e:f2:a3:80:3d:12:d7:46:
18:7e:ed:14:a6:0b:84:d8:61:b6:f5:dc:46:24:b0:
9b:32:6e:02:fa:4f:d9:cc:56:84:ab:d3:dc:a4:d1:
38:84:b6:04:34:00:b7:13:c1:2a:0e:ee:22:88:f7:
dd:95:4a:bf:61:ae:e3:4d:b8:03:52:a2:78:eb:6f:
73:17:37:84:90:1a:6a:1e:64:79:14:38:3f:a3:9a:
a3:d6:4a:0c:78:0b:b0:4d:0c:94:9f:29:4a:61:17:
47:9d:1b:54:14:ca:27:f6:9e:e5:a2:3d:da:5f:67:
1e:bb:af:61:ce:e3:7e:74:d2:36:68:a4:04:63:6a:
17:20:4a:48:dc:e9:40:25:0e:78:3d:da:e4:e3:4e:
26:88:86:0d:ee:8c:ac:fb:fe:fa:77:ec:ef:ff:08:
c8:01:13:61:ad:c7:9d:aa:09:27:05:58:dd:d7:d1:
84:63:e2:e4:41:38:e4:84:76:44:6d:b4:45:59:05:
dd:07:81:33:3a:c0:05:2e:62:b8:0c:90:8b:d3:32:
35:e4:7d:0f:78:7c:79:c6:3a:71:84:e2:5b:02:f2:
24:09:ef:c7:e3:1e:2c:67:5c:8f:74:99:d4:7c:75:
90:e7:7d:33:af:18:49:6b:16:aa:a8:30:a8:98:28:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:95:0C:67:B8:40:04:36:13:6B:1B:C1:2B:E9:24:E9:48:DB:D7:0C
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fc:60:21:6c:64:7b:be:76:29:ee:1b:8c:83:6b:c4:f5:37:
fe:34:69:38:cb:6c:21:ef:c6:9f:d1:e1:a1:bd:0f:a7:e3:36:
e9:38:dc:63:c4:c1:f3:89:66:5a:ed:2e:92:ce:69:8f:5a:2b:
61:04:09:07:68:7e:37:c2:cd:f4:ab:0d:c7:66:2e:6b:68:4f:
9c:e0:02:34:d3:65:f5:4b:02:e9:68:4f:15:87:77:e0:f4:43:
72:67:18:45:15:88:36:75:42:f4:7b:0c:70:a4:6b:b8:1e:a3:
b1:04:0c:7e:bc:f3:18:76:f4:3e:42:d1:37:b0:14:41:2f:5b:
61:a0:22:a0:b6:6a:b1:39:1e:f6:7c:11:fa:1a:c7:88:74:a7:
3f:9d:61:27:a2:6a:0c:4a:ad:00:14:46:65:58:3f:43:c3:f6:
69:e6:54:88:ed:4d:16:16:a1:db:b9:13:01:da:4f:ce:ca:9d:
4a:b2:62:5d:bc:c2:22:44:a9:12:51:c1:c4:41:5a:48:a7:3a:
85:7c:c9:11:67:89:71:55:c4:37:e6:26:50:7c:00:bf:9a:8c:
74:30:3a:94:04:cc:b7:3c:ed:e1:e0:b1:26:33:1b:90:b4:07:
ed:e4:c4:b2:6c:f2:74:1e:1d:a5:7c:a7:36:a8:94:19:e4:89:
7d:b8:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:54 2026 by rpki-client