Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: EUC75u7LLhmj0ofDp5JqyALEKoHvN4mYnTaOG95nFxw=
Subject key identifier: 91:82:C1:89:64:28:BD:3A:71:C4:E3:79:CB:28:D6:B6:7B:82:5E:46
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01A17FCF7DBBB287FCE57C46B846DE7221CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1AC6
Signing time: Wed 28 Oct 2026 00:01:06 +0000
Manifest this update: Wed 28 Oct 2026 00:01:06 +0000
Manifest next update: Thu 29 Oct 2026 00:01:06 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: wtvLavUA9VvVrnW1IhRFiXQKFSeVcdnSEvJ0oBFn1q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:7d:bb:b2:87:fc:e5:7c:46:b8:46:de:72:21:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Oct 28 00:01:06 2026 GMT
Not After : Oct 29 00:01:06 2026 GMT
Subject: CN=9182c1896428bd3a71c4e379cb28d6b67b825e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:77:08:72:ca:9b:8b:6c:19:9f:10:9f:f9:6f:
ca:99:32:25:66:91:39:1d:cd:66:19:32:2e:c2:a9:
31:9e:b9:6d:b2:ed:29:a2:60:ce:70:29:2d:41:b8:
2a:90:3d:3b:6d:56:d5:7b:5e:9e:52:cd:a1:42:9f:
ff:7e:a8:45:da:81:ba:57:09:c6:5a:9b:ff:ff:aa:
e5:74:f7:30:0c:a0:59:2a:aa:da:99:8d:7a:51:22:
9c:05:23:29:ba:b7:f6:b6:60:a1:a2:ee:3e:7e:c0:
e3:8a:4f:62:41:ec:31:8f:82:a4:49:24:4d:bb:87:
db:5e:b7:b9:8d:b9:06:76:93:2d:a7:d7:9c:ab:fa:
f5:f8:48:64:72:12:80:36:2d:da:91:4c:bc:a2:e5:
b9:3b:6f:92:ef:19:91:38:7c:7c:17:be:45:48:82:
c8:89:70:b5:a1:45:4f:c0:55:ba:e9:5f:bd:2d:14:
f4:53:ad:41:dd:99:7a:aa:09:6e:09:26:69:5e:bd:
da:7e:7b:fe:05:70:1d:e9:20:1d:0a:4f:81:2c:dd:
c5:ec:22:88:f0:ca:3c:38:9b:5a:0d:0b:e6:cc:71:
ac:53:ed:cd:dc:41:df:18:41:34:20:11:25:13:d8:
e4:42:0b:8e:32:8a:f3:8e:5a:72:ee:f7:73:b8:fa:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:C1:89:64:28:BD:3A:71:C4:E3:79:CB:28:D6:B6:7B:82:5E:46
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:13:d2:b1:8d:37:48:2e:28:92:3b:7a:e7:61:cd:9e:9a:53:
5d:de:0e:01:cb:50:d7:5d:e4:65:80:b3:ca:c9:91:99:f0:26:
2d:79:07:49:34:b4:a5:08:e9:06:a1:89:2e:6b:44:6f:83:15:
05:64:38:ac:a6:b0:c5:7f:d9:89:30:f8:e2:e4:82:08:18:02:
d9:7d:72:3c:6a:8e:73:6c:02:2e:20:12:5f:83:bd:9c:c7:e6:
60:bf:72:c9:cf:bc:10:0a:36:ed:87:75:69:27:3f:0d:31:4b:
12:54:c0:97:d9:4b:5f:81:3d:c3:dc:e9:a9:fc:d1:79:ae:fd:
0a:86:76:45:69:72:6b:9d:5f:d6:78:8c:71:ed:0b:cb:15:d8:
41:d6:3c:6e:88:6a:8f:1d:e1:5c:29:2c:af:9c:e3:dd:d0:d7:
e5:ae:0d:69:0e:04:91:40:6e:8b:f3:2c:32:7e:02:36:69:6d:
57:e4:64:66:f0:9f:25:b2:18:90:36:8f:78:07:74:c6:15:0a:
e6:0a:c5:8a:c9:b8:96:ab:dd:bb:92:b4:c4:12:4b:26:c8:d4:
ec:d6:5b:c4:c6:da:b7:76:59:d5:23:6f:bd:be:d3:08:15:85:
2a:1f:0d:57:30:92:b6:14:76:21:33:a3:67:f1:81:1b:99:ac:
ec:6f:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:06 2026 by rpki-client