Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: ymyZ8XWQMi9w98kjwu9YVT1L/mf3+Qixv3y8zeF3jFA=
Subject key identifier: 62:6E:35:D7:E6:BC:5D:84:15:4A:56:15:68:B2:10:35:42:B4:5B:E9
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 01A17DE11F50EB3C4CECFB4602A567EF5F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0F46
Signing time: Tue 27 Oct 2026 15:01:07 +0000
Manifest this update: Tue 27 Oct 2026 15:01:07 +0000
Manifest next update: Wed 28 Oct 2026 15:01:07 +0000
Files and hashes: 1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: /DIaTQLZp0q6EX1scVX06CYLp5KsQdFTbBC6ihiDGFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:1f:50:eb:3c:4c:ec:fb:46:02:a5:67:ef:5f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Oct 27 15:01:07 2026 GMT
Not After : Oct 28 15:01:07 2026 GMT
Subject: CN=626e35d7e6bc5d84154a561568b2103542b45be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:4e:7c:1a:92:1c:92:13:8a:cd:3c:26:47:
fd:22:a3:31:78:73:c6:24:bd:ee:83:9b:e5:c1:a8:
27:b8:ac:a4:9c:64:b3:e0:de:78:23:48:87:3f:64:
d5:15:72:b2:c2:3d:2a:3c:76:e6:93:9e:32:0c:5a:
bb:a3:ec:e1:8d:ca:86:e6:ad:4a:2d:e4:61:8e:9b:
9b:28:3c:e2:e2:bc:95:51:da:d2:e6:d6:f6:45:c1:
a7:c6:42:01:62:44:3f:0f:d9:72:66:98:a9:2c:c1:
58:82:87:a2:17:9b:06:0a:38:d1:78:c8:f5:c1:15:
eb:5a:fe:ff:25:2b:5f:c2:e2:96:4f:4b:1a:3a:ce:
20:81:bb:86:ce:f9:07:1b:20:7c:64:13:9c:0f:ac:
c2:11:1f:cc:bb:0e:96:7d:cb:45:a8:df:42:9b:2a:
fc:d1:e7:21:88:b5:cc:88:40:a8:db:f2:9e:58:d1:
55:0f:50:d8:d6:47:4e:ed:6a:7f:aa:94:8b:43:cb:
fd:a0:69:70:f7:f7:c6:d8:f9:60:e6:98:04:d4:05:
5e:54:bf:4f:bf:02:e4:b9:d8:20:22:62:b7:00:d3:
32:a3:6f:82:47:13:95:71:84:28:10:63:94:2f:8b:
45:ac:b2:2d:33:48:24:fd:f3:ff:f6:44:75:e1:24:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6E:35:D7:E6:BC:5D:84:15:4A:56:15:68:B2:10:35:42:B4:5B:E9
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9e:54:58:54:f4:9f:a9:a0:b4:7f:02:ac:70:5a:ab:3c:9a:
f5:9a:26:ee:90:b3:e8:74:b7:83:cf:37:45:08:4b:61:01:94:
28:3f:b9:cf:a5:28:df:6b:99:17:18:58:17:dc:36:46:03:ab:
e5:43:a0:e9:53:4a:64:e0:da:f9:5b:91:f1:69:31:20:8b:e3:
3c:24:35:aa:d4:be:8f:02:42:8a:6d:93:0d:12:d2:b8:45:07:
95:b1:f2:bf:fd:58:67:62:41:25:d9:45:b1:7e:9f:4e:e9:0a:
a0:b2:07:e7:be:8d:a1:ca:d2:c9:93:72:cc:fc:ca:82:fa:4a:
cd:e2:e4:7a:8d:84:98:9b:17:fa:1c:1b:fe:c6:06:20:01:ea:
ae:18:d0:e3:ab:f3:99:2f:a1:e8:d1:cf:12:eb:af:f7:02:75:
0f:ab:c1:b9:a6:33:4b:15:2a:d8:04:ac:b8:54:fa:87:e8:44:
4f:79:9d:47:40:c3:31:13:ca:26:0a:e7:0c:50:21:42:d6:f3:
7c:21:f5:4b:6a:69:5d:46:83:6b:8b:d2:44:ef:23:7c:93:ef:
01:0b:f4:79:1f:1e:3c:85:a1:af:be:95:d1:49:08:76:7f:be:
ec:d7:52:7d:8a:b9:ab:95:cf:9e:d1:33:a5:cd:5a:a5:0c:ca:
19:40:f1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:24:46 2026 by rpki-client