Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: U41c0ZdKWDOE6IuVOWp0SX7kah+9Kpp/FhUWNQGgXaU=
Subject key identifier: 32:41:CD:73:DB:D6:0D:90:C9:FB:5C:E6:E9:E6:6B:F1:10:3B:CE:C5
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 01A15E1F145BAB81CAEADA05AC7FAEFDA858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1AC2
Signing time: Wed 21 Oct 2026 11:00:57 +0000
Manifest this update: Wed 21 Oct 2026 11:00:57 +0000
Manifest next update: Thu 22 Oct 2026 11:00:57 +0000
Files and hashes: 1: 9U2gzAHMQAtRK1gQNHxjr09eebA.asa (hash: AXuT5FLBEMvZmsQmdwNr+acvh8DbWZJW923I5JZgo+o=)
2: SnthKeN0QNsYJSCvNCIW3QkdzO4.roa (hash: pm2CDsGetmBd20fFZ1+ibNzTRJyqdNoHhgU1ZBjBaHg=)
3: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: ZznUu5+2gsFMtpNkAj2b8rHNHmOUSYrJ/NahpJuCK3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:1f:14:5b:ab:81:ca:ea:da:05:ac:7f:ae:fd:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Oct 21 11:00:57 2026 GMT
Not After : Oct 22 11:00:57 2026 GMT
Subject: CN=3241cd73dbd60d90c9fb5ce6e9e66bf1103bcec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:b3:41:35:3f:d9:2a:b4:54:69:6a:e7:a7:
23:5c:2b:f2:f5:b9:32:b3:e3:93:05:89:af:65:20:
a2:ac:bb:b4:6c:47:c4:01:bd:b1:ac:89:a7:72:3c:
b7:ec:75:dc:3d:27:59:50:55:b5:94:32:fa:35:1b:
8f:99:61:48:93:f5:6f:18:aa:ad:46:a9:46:a1:fe:
5d:75:05:1a:49:de:8f:7f:94:4d:49:f4:ba:f5:f2:
b9:5f:f3:ec:bc:9e:9c:0b:a5:b9:70:08:8d:18:9c:
89:d1:24:de:13:e3:ec:ef:7e:77:f4:46:4a:26:e5:
f6:a1:b4:ed:12:6c:10:b6:65:fc:25:cd:a6:18:41:
cf:f9:2f:6b:46:36:ce:8d:50:0d:53:52:13:c9:c3:
2a:0a:c9:20:d4:42:0b:62:af:66:65:cd:c6:51:8a:
70:79:c3:05:74:3b:eb:88:1a:7c:73:80:5b:6d:3e:
c7:4a:ef:48:ce:dc:23:bf:dc:f0:f8:a0:eb:48:9d:
af:66:d3:02:9c:b2:6d:70:ec:d3:fa:0d:0a:b7:57:
8d:53:db:24:aa:89:3f:25:4b:03:e4:bc:ae:e3:01:
72:14:f0:c8:34:fe:eb:99:b2:89:c1:ed:63:fe:de:
89:cb:65:94:3d:24:8f:c7:17:f2:f1:76:9d:c1:93:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:CD:73:DB:D6:0D:90:C9:FB:5C:E6:E9:E6:6B:F1:10:3B:CE:C5
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:77:77:1e:ec:76:2e:8b:91:4b:c7:b7:17:58:0b:ad:5b:39:
9c:9d:1f:7b:97:92:84:fc:e4:46:d6:7b:77:2a:12:92:8b:9d:
e2:b2:bb:b0:a3:03:f2:28:66:2c:1c:75:6f:4c:d6:64:4b:84:
8d:21:96:e6:14:a2:4f:bd:0b:9e:66:44:64:6e:87:ae:3c:46:
ad:74:fa:c1:6a:35:eb:89:b5:16:0e:67:85:89:d7:92:75:52:
e3:6f:ca:f1:c9:91:35:f2:ee:c2:f5:5e:21:f0:71:21:8c:b8:
5a:a7:e9:c4:da:24:e4:ea:58:37:71:ce:8f:c5:9c:4d:d7:96:
ef:6f:08:e9:4d:f4:d8:c8:af:d7:59:04:0c:29:06:c2:08:fa:
00:47:b5:6d:26:ab:30:3e:c9:00:7b:e2:03:57:0c:eb:ef:00:
36:7c:ae:40:36:bd:a3:be:7b:b8:94:e8:07:1a:91:81:6f:79:
64:60:64:86:be:de:5a:e0:24:3d:d1:e9:9c:7b:9e:0e:90:12:
77:1e:bf:96:e5:a5:c7:c9:0c:50:fb:5f:69:98:9b:0c:3b:73:
a1:29:e5:ac:00:10:09:58:c7:3a:c9:f9:88:e7:be:44:64:f6:
d9:87:60:fc:59:c0:cc:83:9d:d7:49:a2:f7:0c:ab:cc:f4:a0:
6a:cf:02:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFeHxRbq4HK6toFrH+u/ahYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjYxMDIxMTEwMDU3WhcNMjYxMDIyMTEwMDU3WjAzMTEwLwYDVQQD
EygzMjQxY2Q3M2RiZDYwZDkwYzlmYjVjZTZlOWU2NmJmMTEwM2JjZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3guzQTU/2Sq0VGlq56cjXCvy9bky
s+OTBYmvZSCirLu0bEfEAb2xrImncjy37HXcPSdZUFW1lDL6NRuPmWFIk/VvGKqt
RqlGof5ddQUaSd6Pf5RNSfS69fK5X/PsvJ6cC6W5cAiNGJyJ0STeE+Ps73539EZK
JuX2obTtEmwQtmX8Jc2mGEHP+S9rRjbOjVANU1ITycMqCskg1EILYq9mZc3GUYpw
ecMFdDvriBp8c4BbbT7HSu9Iztwjv9zw+KDrSJ2vZtMCnLJtcOzT+g0Kt1eNU9sk
qok/JUsD5Lyu4wFyFPDINP7rmbKJwe1j/t6Jy2WUPSSPxxfy8XadwZMobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJBzXPb1g2Qyftc5unma/EQO87FMB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyXd3Hux2
LouRS8e3F1gLrVs5nJ0fe5eShPzkRtZ7dyoSkoud4rK7sKMD8ihmLBx1b0zWZEuE
jSGW5hSiT70LnmZEZG6HrjxGrXT6wWo164m1Fg5nhYnXknVS42/K8cmRNfLuwvVe
IfBxIYy4WqfpxNok5OpYN3HOj8WcTdeW728I6U302Miv11kEDCkGwgj6AEe1bSar
MD7JAHviA1cM6+8ANnyuQDa9o757uJToBxqRgW95ZGBkhr7eWuAkPdHpnHueDpAS
dx6/luWlx8kMUPtfaZibDDtzoSnlrAAQCVjHOsn5iOe+RGT22Ydg/FnAzIOd10mi
9wyrzPSgas8CeQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:37 2026 by rpki-client