Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: /WC6PiWZimYqq0FXsrkltmcGn0FZ8h+FxOkZxmtlOH0=
Subject key identifier: FA:F8:7B:A6:0B:96:F3:A9:A1:66:0D:B9:5F:B5:B0:7D:F7:E1:25:2D
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019F1265CDC25B7FF5D74A1FE3F8C4E08898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1990
Signing time: Mon 29 Jun 2026 08:01:29 +0000
Manifest this update: Mon 29 Jun 2026 08:01:29 +0000
Manifest next update: Tue 30 Jun 2026 08:01:29 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: hYsJwTEs4X4+ibAmJNIdX6yDW3lIFjln8KZQg8Om3fs=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:cd:c2:5b:7f:f5:d7:4a:1f:e3:f8:c4:e0:88:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jun 29 08:01:29 2026 GMT
Not After : Jun 30 08:01:29 2026 GMT
Subject: CN=faf87ba60b96f3a9a1660db95fb5b07df7e1252d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:76:09:0e:4b:a8:80:d7:fa:60:85:ed:cf:
17:e7:c9:9a:e3:cd:f9:87:d9:c2:da:25:1c:e7:73:
6f:d7:3e:7b:ec:a6:8b:d0:41:b9:c0:a2:7f:69:16:
9d:75:06:2e:04:4c:2f:80:93:8d:fa:e7:cc:a9:25:
f4:1c:3b:61:bc:7a:09:da:4f:1c:55:bb:9d:12:bf:
9c:fa:65:2c:fb:85:da:00:6a:4f:51:ea:b8:cb:8a:
bf:43:b6:a1:f7:6b:1b:12:b9:3e:c2:af:c2:c5:66:
10:20:f3:80:d0:f9:99:7e:27:5d:5f:48:2e:a8:90:
d5:b9:65:94:64:a2:2c:e3:ed:de:c8:ba:3f:bf:03:
cb:74:4c:19:9a:88:15:89:8d:d4:c1:c4:c5:49:93:
ed:07:83:db:db:2a:24:7c:4c:f2:7a:b2:59:97:dc:
72:3a:61:63:aa:3b:e4:28:f9:6d:8f:ae:e9:a0:1b:
2d:e9:6f:90:8a:b8:ec:fc:26:e8:95:ba:31:92:94:
53:10:7e:60:df:68:ea:02:39:7b:d2:14:73:4f:2e:
62:46:dc:d5:e4:b0:fd:0d:11:cf:39:96:9e:58:3d:
7c:56:ea:22:bf:d7:69:f3:26:1d:f0:de:47:79:3b:
3f:81:eb:04:24:03:87:d4:bf:ef:a5:08:d9:9f:09:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:7B:A6:0B:96:F3:A9:A1:66:0D:B9:5F:B5:B0:7D:F7:E1:25:2D
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:03:fc:47:07:a2:2c:ca:e4:3f:d0:fa:c6:4a:e4:85:f9:
49:e1:0b:89:56:8f:d6:86:f1:6b:a6:69:e1:98:20:1f:bd:0a:
f6:9d:b0:84:c0:db:c4:99:db:df:c6:e5:fa:f0:e1:c3:ce:fc:
ed:be:af:6c:58:56:b2:67:65:dd:d1:08:8f:3e:be:fb:7a:ec:
82:04:32:e8:a2:88:48:7e:07:df:0f:59:a4:4d:2c:27:2c:db:
b8:be:7a:5a:f3:ee:52:3c:bc:ab:7c:75:e7:78:4c:1f:da:8f:
15:1f:ca:46:3d:76:14:b1:5c:df:0c:b5:b0:bd:2d:ce:be:bd:
39:3f:42:15:e7:f4:2d:93:9b:c5:77:b2:23:27:76:3e:9c:95:
25:ee:8d:e0:eb:24:f9:b4:3e:72:f1:c7:9e:87:12:95:d8:b0:
20:b5:75:66:29:26:a2:73:3b:60:60:13:47:5e:e4:7d:c5:3b:
da:54:22:12:47:d9:fa:7c:18:f2:9c:99:18:1e:ec:1a:f1:29:
2f:23:ab:82:ad:13:18:fe:f2:21:c7:b0:e8:d8:d3:83:d6:e1:
05:c9:9c:6d:63:81:e8:76:1e:6d:92:7d:52:e8:30:97:cf:6e:
82:a0:cd:6b:56:6a:68:c8:8e:11:f7:8e:d8:96:3a:04:dd:2b:
d5:b0:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:49 2026 by rpki-client