Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: +fBpGIIB47qBO9LMYj7Rcy9RI3OECBw7+DOVWdQ3fMk=
Subject key identifier: 74:C4:34:EF:22:77:4C:A2:58:B1:CA:06:1F:58:0D:F9:5C:07:C8:61
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01A08A8CA20D75CF66F353482A5EDB2AA127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 09:01:07 +0000
Manifest this update: Thu 10 Sep 2026 09:01:07 +0000
Manifest next update: Fri 11 Sep 2026 09:01:07 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: HjqPmbAtYkrtPWSsoSqAkMJkHgFsjzUw0w1uN7I+3R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:a2:0d:75:cf:66:f3:53:48:2a:5e:db:2a:a1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Sep 10 09:01:07 2026 GMT
Not After : Sep 11 09:01:07 2026 GMT
Subject: CN=74c434ef22774ca258b1ca061f580df95c07c861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:b9:0d:c6:cf:09:f8:03:ca:d2:e0:c9:c6:
26:2a:13:71:a1:77:d9:cf:93:3f:35:38:23:f8:06:
40:89:8e:d4:34:ea:1e:24:df:35:c2:16:21:ac:56:
74:0f:75:0f:63:6a:bc:4d:1b:00:e2:2a:b0:39:1f:
73:ba:d6:66:b0:c8:ec:63:19:74:3e:19:ac:5a:21:
1b:b8:e5:e5:53:c6:bb:e3:02:65:6b:1a:87:a1:af:
a2:e3:97:b2:01:9c:fe:41:b9:6f:c2:94:21:9b:62:
c6:0d:af:82:e6:ca:d7:09:53:12:5f:43:09:4a:d5:
97:5d:bf:ab:12:b6:a4:6e:df:1d:36:a2:d8:85:25:
d6:50:19:54:80:5f:b1:9c:4e:59:51:cb:95:a6:0c:
a2:d2:38:7b:0c:68:d2:0e:92:f1:53:18:5b:d9:9a:
f4:8f:a2:b0:37:63:00:42:57:cf:fc:2b:f7:8d:1f:
7c:ab:3e:57:f7:53:fc:c4:f2:e7:f4:1d:05:04:91:
28:18:9a:06:e9:ed:e3:90:9a:8c:e1:9b:be:63:ea:
17:37:ab:52:e0:a2:2a:5d:ce:bb:22:fe:19:df:32:
a8:f9:7f:67:01:7a:57:f1:b0:cd:2c:c6:ba:04:39:
7e:35:2a:e3:b6:af:d6:38:49:fe:c0:77:ff:7d:c4:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:34:EF:22:77:4C:A2:58:B1:CA:06:1F:58:0D:F9:5C:07:C8:61
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:37:66:fe:46:5a:50:66:89:1b:cd:73:cb:a3:ee:67:2e:cf:
a1:db:93:fd:07:d3:f7:dc:57:0c:97:c8:e5:6b:90:e7:83:06:
8b:2d:ab:5f:78:05:ff:e7:f1:72:da:24:14:92:43:01:5d:23:
c7:5f:0d:63:8a:4e:50:d2:cf:35:9c:de:f1:22:b6:04:d8:c1:
f2:93:63:82:b9:53:77:92:c0:2b:58:0b:92:58:d0:ae:e9:be:
01:5f:13:03:6b:db:e1:10:b0:59:24:c8:00:85:92:c0:e2:df:
91:79:42:ac:5a:f8:f3:c1:e2:fe:03:43:dd:ea:30:af:9d:d3:
5c:3e:c6:c6:f2:1a:10:cc:56:4a:97:6b:ad:f3:35:63:be:6d:
0f:a9:1d:7b:fe:e0:ce:06:1e:2f:a2:22:db:89:92:6b:1c:49:
2b:8b:9b:cd:60:9a:db:d6:73:39:e4:e6:31:fe:a2:5b:2d:96:
6a:3d:02:25:a6:1c:5b:70:73:08:52:84:41:c8:cc:63:74:c2:
f2:77:6b:3f:0f:5d:7f:7c:15:86:c7:26:38:b6:b6:9c:d0:fc:
f5:be:c7:ed:23:da:69:f5:fb:1c:bf:97:5d:43:20:16:91:fd:
22:2f:b8:8d:43:2b:db:9a:ee:fe:cc:ca:0b:3e:16:cd:0a:80:
d5:f7:48:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:26:49 2026 by rpki-client