Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: 6YxsduHT/8HBVCo+Wqm2MgzbAFBGwUBFgjDPHcYyAe8=
Subject key identifier: 05:A5:A0:86:D1:A0:CE:C8:B5:93:9E:25:12:1F:0E:F7:85:B0:70:69
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 01A08A8D2144474A91E1EF472E0A207149E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0EC8
Signing time: Thu 10 Sep 2026 09:01:39 +0000
Manifest this update: Thu 10 Sep 2026 09:01:39 +0000
Manifest next update: Fri 11 Sep 2026 09:01:39 +0000
Files and hashes: 1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: Tyzhma7NzIVYXGFRYivjqOejsUDsH/h9IjLa5ciJ3EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:21:44:47:4a:91:e1:ef:47:2e:0a:20:71:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Sep 10 09:01:39 2026 GMT
Not After : Sep 11 09:01:39 2026 GMT
Subject: CN=05a5a086d1a0cec8b5939e25121f0ef785b07069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:99:65:78:7e:a4:33:c6:e2:d2:aa:fb:fa:
d9:b1:d9:43:72:ad:8a:47:58:db:32:a7:0f:6e:6d:
5f:bd:d3:58:66:2c:02:90:6b:5d:18:8c:12:ae:18:
49:92:e1:e7:e3:bf:08:7d:ba:88:52:20:15:1c:11:
c5:6d:3e:4d:8b:33:8c:0a:e1:fa:62:fb:3b:a5:66:
d3:31:34:e1:76:12:8b:ca:f8:bc:71:6b:a8:0d:2a:
69:a0:9b:93:8f:a9:88:03:e5:4c:e1:54:8b:84:7c:
1a:51:b9:57:48:7b:ac:d7:56:79:47:99:93:f8:a5:
78:25:93:8b:2f:ac:e3:44:03:1f:f4:32:c3:a2:f1:
31:12:f5:6a:f2:77:d8:a5:b7:86:f9:2f:92:cb:8a:
6d:c5:c2:f9:52:7b:25:d0:7f:8c:14:59:0a:89:52:
a2:e8:1c:6e:45:e8:91:c7:b1:b0:25:08:d9:98:5c:
37:1b:1c:3c:8d:52:f2:1b:7a:2d:0b:67:14:d4:dc:
cd:b1:06:72:fa:e0:b3:3b:1d:43:18:d5:cf:70:f7:
da:fa:76:68:0f:2d:4c:5b:93:d0:77:ae:d6:07:6c:
7c:57:41:42:de:50:46:34:5d:66:ce:ac:08:4d:82:
92:96:1e:69:4a:bb:97:17:4c:59:e1:8d:54:64:87:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:A0:86:D1:A0:CE:C8:B5:93:9E:25:12:1F:0E:F7:85:B0:70:69
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4a:e0:a6:ee:4b:3d:5a:fc:f4:c3:a4:a0:e6:98:4b:15:48:
7b:26:dd:69:d7:c8:e1:ed:1c:9e:48:3c:26:a3:93:94:fa:0d:
52:68:fe:5a:50:7e:93:12:ae:57:e7:6b:df:e3:15:4c:db:23:
18:a2:a1:a1:a2:7a:39:52:31:2f:a9:6b:a7:92:5b:f4:66:e3:
c4:3f:52:a9:60:66:6a:6e:b5:7b:cd:01:06:23:83:62:19:bb:
bc:a8:98:ba:62:59:6c:69:4a:41:0a:c6:29:ae:a4:17:93:6b:
b0:60:96:66:3b:2e:62:87:fd:01:00:ff:e3:f2:c7:63:22:6b:
af:fb:80:21:0d:02:25:08:42:19:37:02:ea:89:08:98:3d:a6:
85:bc:4f:fd:fd:7e:15:03:29:07:9f:69:6b:15:9f:b0:6d:ef:
56:e0:b3:33:de:02:b5:df:b6:c7:b1:eb:a5:17:6c:87:af:f0:
c2:d8:2f:3e:dd:f1:91:1e:f8:78:22:b5:cf:2f:6d:17:31:52:
fe:ea:aa:47:3b:6c:ce:41:d0:2d:41:5e:1c:b3:2f:ac:4f:91:
5c:d8:02:54:05:36:6e:1b:bb:d2:69:18:75:68:43:73:f5:aa:
17:99:dc:ce:68:08:d1:e2:7c:f4:4b:ce:3a:01:9a:68:02:c8:
c0:34:a0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:57:27 2026 by rpki-client