Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: dV40FjbSSbIaJybdKlIqCui3+licMbq1jkPNMDPisv8=
Subject key identifier: FF:0B:D8:EA:42:A7:3D:2C:DC:1C:2F:38:50:5E:84:EF:2D:C8:A2:13
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 01A116AA8856F34417861AA7A8093FA109EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0C88
Signing time: Wed 07 Oct 2026 14:00:36 +0000
Manifest this update: Wed 07 Oct 2026 14:00:36 +0000
Manifest next update: Thu 08 Oct 2026 14:00:36 +0000
Files and hashes: 1: Z15H2A8imrxH1p9HbxhPoKAu68A.roa (hash: css+XRNCUvk1FMrslfWIDxr5xIpejly6r5FZavKRPZE=)
2: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: vvfiaEaQ+sFZQ7HI/9e+1Pf5q3Plu1ezxdwac6ByJSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:aa:88:56:f3:44:17:86:1a:a7:a8:09:3f:a1:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Oct 7 14:00:36 2026 GMT
Not After : Oct 8 14:00:36 2026 GMT
Subject: CN=ff0bd8ea42a73d2cdc1c2f38505e84ef2dc8a213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:bb:7c:d4:53:3c:65:74:92:ad:1e:e5:ef:
61:8a:6c:f9:45:8a:fd:bf:06:e7:b5:83:d8:94:b5:
4f:65:cf:2b:18:5a:cd:aa:f2:e1:42:4e:f4:39:96:
94:7b:32:c2:73:9c:91:c3:d1:de:c1:d2:86:a5:78:
5c:ec:ae:48:1e:7c:a0:16:ae:a9:d2:7f:89:41:6d:
df:c2:58:70:be:84:41:a2:ab:ce:84:79:6b:42:7c:
88:d1:12:85:25:14:0d:f4:54:3d:07:13:10:15:3c:
fd:d0:a9:ed:e2:01:22:68:a1:b5:4a:dd:73:36:c3:
0b:c9:55:8a:eb:61:06:ff:82:6c:ba:4b:51:70:c4:
ee:c5:2b:0c:c5:c3:0e:6d:a3:c2:f1:e3:9a:1a:d2:
81:25:ca:5b:a2:17:62:d4:8c:14:fc:2f:3e:03:59:
ec:84:e7:f8:f8:ab:14:1a:2a:5c:35:33:d6:cd:30:
58:70:1f:da:0c:53:c0:ed:26:bc:0f:a4:71:0c:c3:
97:7e:f5:96:45:c4:3c:9c:c6:85:72:ed:9c:70:3f:
fa:32:80:45:48:26:2c:99:3a:8c:17:e9:b5:01:17:
e6:39:38:a0:83:0f:01:69:1a:11:86:9f:d3:76:c6:
b1:cb:e5:e2:61:e4:f8:e6:24:25:a9:fa:81:b2:fe:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0B:D8:EA:42:A7:3D:2C:DC:1C:2F:38:50:5E:84:EF:2D:C8:A2:13
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:41:c0:21:62:7b:26:91:d2:c8:46:7a:f1:25:30:f3:6d:00:
33:ba:63:5f:9b:c6:fe:e0:be:bd:ea:14:f9:08:bb:58:3f:d8:
f9:db:b1:2c:c7:e6:42:bc:46:ed:d1:86:b3:12:71:b6:b2:67:
d0:24:0c:d6:39:b4:91:c4:91:9f:4a:a0:11:9a:92:3f:fe:b2:
56:4d:c1:8a:b2:50:00:87:32:81:f7:f4:61:48:5b:c1:0c:1d:
9b:06:99:4c:2a:1d:cd:64:94:6e:62:bd:9a:fb:08:c4:e9:c5:
0d:cf:c6:7d:b6:3d:88:c9:04:d2:77:1f:32:46:d9:22:ee:a4:
68:82:b4:4f:e1:b6:c6:d0:3d:84:8d:ab:a0:58:46:7f:a2:67:
e3:12:c8:69:b9:d2:54:cf:af:0d:e8:45:0e:f8:c7:da:67:40:
09:fd:fe:79:e9:72:27:0f:1f:34:66:4e:e8:3e:95:b5:24:e5:
32:d7:40:5d:b1:e8:e7:6a:5f:58:50:b2:bf:00:50:03:90:8d:
a0:72:a6:67:54:71:ea:c1:93:94:64:3f:91:c7:62:0c:a3:12:
16:1e:2b:bc:b7:7e:56:72:f5:ea:41:ab:36:f8:63:db:10:19:
c7:45:98:a4:6e:bd:0a:3c:96:b1:61:d0:3c:c8:f0:ef:8e:d2:
63:46:48:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:26:06 2026 by rpki-client