Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
File: _-BD2zfqJckthc5lp20aTlE2JKo.mft (raw, json)
Hash identifier: 8+l5tLHJFYDYyPt+juevI3o94FbUZDxc3meBaep2M1s=
Subject key identifier: 10:50:9F:60:E6:77:5A:EA:D0:8F:4A:83:04:A5:87:1B:2C:9C:87:56
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 01A1178636EC0969167193542033CF023D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
Manifest number: 010A
Signing time: Wed 07 Oct 2026 18:00:34 +0000
Manifest this update: Wed 07 Oct 2026 18:00:34 +0000
Manifest next update: Thu 08 Oct 2026 18:00:34 +0000
Files and hashes: 1: 9StrTLCfqGV3R6lUHBbjcUPbtgE.roa (hash: hKyGuDQdq7Wwmsr9xKC9vViQNuynbDmlDvA0XQY2P9E=)
2: Qagt2LqaMAntgU09nCJSjOteJGI.roa (hash: hVVNYLozOrGf2eg6nP90ee7AH3HGnRwNnmP01BLSjaQ=)
3: _-BD2zfqJckthc5lp20aTlE2JKo.crl (hash: EbCFwT7U1iF02DSzaGUUJgDhGDRlb4F9qEa5M6wl2bM=)
4: jGolEufnyPDfW166GsYrvcDadWI.roa (hash: MhUSPPX1/ZIFQ+uQDE4vWXmxQ4zd9lEULvZBslHM2Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:36:ec:09:69:16:71:93:54:20:33:cf:02:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Oct 7 18:00:34 2026 GMT
Not After : Oct 8 18:00:34 2026 GMT
Subject: CN=10509f60e6775aead08f4a8304a5871b2c9c8756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:b6:7a:d1:0d:f8:b5:9f:b1:f8:47:62:e3:
b7:d2:68:57:ed:e7:84:26:7c:00:bc:d5:3a:6d:b7:
8a:04:14:ac:ed:a6:1c:0a:e4:f4:d8:42:ed:c8:94:
d8:96:41:79:78:fd:4b:88:5f:52:4a:3a:5b:97:b3:
e1:55:1e:00:d3:00:9e:1d:46:4e:8d:85:ca:39:0a:
18:0b:80:25:45:04:96:0e:a4:65:4e:27:03:44:54:
a1:dd:50:70:45:74:c8:47:6d:a3:4b:9f:ef:d6:32:
f9:f5:cb:d8:a1:96:db:c2:bb:20:1d:49:7e:cb:d8:
19:d0:c6:99:29:ef:7b:2c:56:7b:31:88:13:d0:83:
4e:c8:6a:4c:7c:60:8e:f5:9c:1d:91:d4:f5:6b:25:
95:00:c4:de:fd:9a:25:ad:e0:d6:56:17:a6:02:11:
fd:5d:dd:78:21:60:8d:d5:77:fe:64:43:7e:5d:c0:
92:eb:bd:43:a8:11:08:dc:83:8e:07:05:2e:df:f4:
21:e1:c1:4a:11:45:e2:09:4f:de:59:ce:e3:b8:cb:
dd:36:b5:9f:dd:1e:a0:c6:12:b0:4c:20:67:1e:4d:
cc:e0:84:f8:bf:48:38:4f:27:5c:11:fc:ae:67:12:
49:cb:95:fb:76:03:1e:f6:c2:27:48:ea:26:1f:3d:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:50:9F:60:E6:77:5A:EA:D0:8F:4A:83:04:A5:87:1B:2C:9C:87:56
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e2:6c:52:2e:23:ba:8d:7b:b0:79:36:3a:14:53:83:cf:e0:
69:9c:e2:f1:9a:be:2d:76:07:fd:2e:cb:c8:81:9a:2b:62:71:
90:2b:c2:1a:64:47:c4:9d:b7:32:d2:bf:92:74:8d:14:d5:31:
2b:d8:3b:03:0c:ff:2c:37:9e:07:d9:68:29:a4:03:c1:e7:72:
46:79:61:b8:1e:61:fd:d7:e4:13:8b:e9:ac:56:e2:80:0a:27:
42:54:fb:ed:23:37:b2:ec:a5:44:e4:75:2e:b5:85:0a:4c:4b:
4d:52:64:ea:49:ce:51:3c:07:a2:a6:6c:f8:bc:f9:42:bc:3f:
6a:87:ae:25:a6:56:3f:67:43:40:f3:e8:d8:2c:e4:db:d4:03:
59:c2:ce:90:47:ba:a2:ed:a9:64:f2:62:65:80:00:79:ac:c6:
53:f9:e4:1a:20:d0:f8:79:1a:f4:e2:77:7c:75:71:6a:2f:a7:
2b:aa:f3:af:89:84:29:ca:76:d5:f2:5c:d5:8c:f9:e3:12:23:
dd:66:3a:52:11:51:ba:ee:ce:bb:20:18:5b:78:07:e3:30:1d:
e8:78:92:72:10:0a:7b:1d:50:ca:8c:5a:07:69:cd:d3:b5:79:
3e:27:02:ba:fc:1b:f4:9e:4b:97:b0:c7:05:f1:0f:80:56:b9:
a6:73:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:26:28 2026 by rpki-client