Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: AwWN7MMYCcdyMz62EMxBIfAQcXzMMpU9D19Gk39/6Ok=
Subject key identifier: F9:77:5E:41:EA:E1:3A:F9:7D:79:8F:AD:8F:E8:04:D0:13:73:10:FD
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 01A1016D18D0A325C603EDFDA9B103ED7BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 11:01:29 +0000
Manifest this update: Sat 03 Oct 2026 11:01:29 +0000
Manifest next update: Sun 04 Oct 2026 11:01:29 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: Pic8Tcll5TE+OqJiFrchf/dxRUL/mSYxlLdHsZJuTIo=)
2: OdGR8q1DrtzqKp7QM4_79Vzq8kI.asa (hash: zT68GbPzl5dNyGUc+5uD6uYA3pHmfcM0MnvrZ31HnjA=)
3: iuE68_Zu0uK275nJpb_6tInq2NE.roa (hash: vi8Q6eX9dc3jErUuvQfc1dJyq7p1p41pFgY91fJ0bdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:6d:18:d0:a3:25:c6:03:ed:fd:a9:b1:03:ed:7b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Oct 3 11:01:29 2026 GMT
Not After : Oct 4 11:01:29 2026 GMT
Subject: CN=f9775e41eae13af97d798fad8fe804d0137310fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:95:b7:32:6b:dd:2f:7b:50:db:1b:0c:af:
4e:18:34:db:b9:1a:80:f0:c0:d5:11:f1:dc:0a:d0:
00:19:f0:4e:54:87:6d:8c:d2:13:c0:62:50:04:10:
ee:a0:e5:62:d7:82:6e:68:f3:7e:c5:ce:01:6b:07:
5e:32:8d:3a:a5:00:92:7a:58:d9:0a:d0:41:78:74:
4f:f8:48:d7:85:36:a4:bb:94:89:b2:1b:1a:32:61:
a7:ae:c7:59:fe:71:31:13:fd:c4:20:50:09:e4:c0:
d8:91:f8:93:64:5a:7d:e5:96:10:83:22:ba:0b:7c:
69:91:ac:84:8e:8c:c3:1f:45:ea:ef:ed:dc:73:39:
07:48:8c:b5:04:c1:89:cc:bb:72:c3:ed:60:10:d5:
bc:3d:25:65:cc:35:7c:bd:35:79:76:df:d5:50:c7:
b7:c1:16:91:af:c9:d6:fd:14:ab:bb:0c:8c:1e:c2:
50:9c:36:c3:22:a5:c0:89:bc:6d:57:d9:6d:95:cc:
6e:3f:53:ae:53:78:18:1b:c7:f0:fa:e8:89:0e:f9:
c3:e5:9c:7c:3d:92:63:16:12:5b:41:d5:80:6b:4a:
19:08:d7:bb:b7:17:cb:ba:97:7f:6c:c6:09:ff:8c:
b1:7d:f0:19:c0:54:f5:20:aa:58:a5:86:22:0f:19:
1e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:5E:41:EA:E1:3A:F9:7D:79:8F:AD:8F:E8:04:D0:13:73:10:FD
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:29:44:93:44:53:49:88:07:74:a4:8c:21:58:c9:ba:2b:62:
6b:8a:e7:7e:5a:d0:dc:d9:08:cd:a3:7d:e2:16:55:8a:18:06:
a9:30:9d:49:d0:b8:47:92:f7:14:ad:fe:6f:98:9d:5a:e9:dc:
58:01:09:59:f3:b5:a9:31:47:ff:df:8e:88:33:48:9d:ea:4d:
14:4a:be:97:42:d7:3c:f7:c7:0b:4d:24:2d:c6:02:2b:5d:84:
43:30:00:71:9b:b9:a2:9b:01:34:82:09:31:c4:c0:5e:f1:60:
ef:1c:bc:7f:7c:f1:e3:b6:bb:99:97:91:e6:6a:27:fa:a0:17:
f4:bf:7b:0c:da:5f:33:db:6c:08:14:31:44:2f:de:2c:1f:fc:
bb:cf:0d:93:4d:ae:0b:b9:7a:d9:57:b9:5d:87:ef:ae:71:7e:
8f:f7:28:cf:a9:de:72:db:3e:5d:3f:56:55:ee:85:f3:38:65:
dc:fd:bf:93:de:4f:6f:07:f2:23:fe:a5:89:94:d4:1e:d9:80:
d4:df:7d:11:b8:f7:d5:7c:be:bb:57:2a:27:48:82:d1:a0:f9:
58:92:99:97:bf:8a:28:d6:c9:04:8e:0e:e8:26:55:fd:a0:f8:
82:86:06:d2:5d:86:1a:42:c6:4e:ca:7e:4b:a4:36:76:97:f2:
f4:b2:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:50:53 2026 by rpki-client