Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: sCeBzYiXywVJoiLT5zfQZNcDvDlA+QGd0IYFZp2sIvs=
Subject key identifier: 8D:4E:C9:6B:6A:63:B0:E8:11:03:FB:E4:90:A5:7C:C0:BC:2D:DE:51
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 019F45AE895CB8DAEF2AB5681704D6E863C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 11A6
Signing time: Thu 09 Jul 2026 07:01:34 +0000
Manifest this update: Thu 09 Jul 2026 07:01:34 +0000
Manifest next update: Fri 10 Jul 2026 07:01:34 +0000
Files and hashes: 1: 0fPiuwb4X2weC-gKDNJaEbSPHqw.roa (hash: S57h9JaZkZt0GA+n+fixlPL0kJI1rFB4fls5bIvI/yg=)
2: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=)
3: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=)
4: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: CofuRGkNG/hcMCVqNv/N29iyA0+I2Al64/koc4z+7jw=)
6: jDxSBMWSjohu5v628YkiKBdFRCw.roa (hash: y62O2BZCFUd+VdwqqDL8Xt8x+VuksK9H256l1hzQejU=)
7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=)
8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:ae:89:5c:b8:da:ef:2a:b5:68:17:04:d6:e8:63:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jul 9 07:01:34 2026 GMT
Not After : Jul 10 07:01:34 2026 GMT
Subject: CN=8d4ec96b6a63b0e81103fbe490a57cc0bc2dde51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:31:f3:7f:e9:2b:37:03:94:bc:08:ac:ba:
75:a5:2e:cc:a3:f5:ba:29:48:96:04:61:3c:8e:17:
43:97:63:f0:8b:58:e3:c7:3f:b6:03:4d:56:29:35:
68:71:47:72:a1:ab:27:96:3a:68:34:64:1a:49:e3:
62:4c:73:fb:0d:cb:e1:17:7c:ca:c0:6d:8e:c0:d3:
00:73:e1:14:af:04:38:24:30:e3:c3:32:43:d2:41:
bf:17:eb:01:14:00:59:32:5e:57:ed:0a:9d:ac:fc:
16:77:1a:54:7c:9b:08:e3:79:b7:69:26:26:81:4b:
d1:bd:95:d1:b4:74:01:d0:6b:df:73:dd:2b:6f:21:
d3:43:b4:54:1d:10:a9:aa:04:10:77:79:93:b3:e9:
2f:d0:fb:7b:04:e2:34:0b:a6:0f:f2:e9:66:3f:51:
64:34:f3:85:96:89:46:c7:61:8f:1d:dd:d8:e3:38:
dc:dd:df:b3:4f:c9:0f:41:83:0a:e8:61:c8:28:0d:
aa:4e:4a:f4:69:ce:38:03:ed:1c:33:0b:30:4e:17:
3b:30:fe:8b:93:17:27:c5:a0:6f:4f:05:c4:79:d9:
dd:8d:1d:82:a1:08:03:9d:90:e7:01:aa:4e:74:52:
41:39:27:65:65:c5:c4:af:81:1c:c2:cd:27:4c:51:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:C9:6B:6A:63:B0:E8:11:03:FB:E4:90:A5:7C:C0:BC:2D:DE:51
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3a:82:84:68:57:98:af:4f:bd:88:09:c6:81:f9:79:c3:c5:
8c:3e:f6:56:64:bb:9a:21:28:5f:1e:59:44:1d:83:85:19:29:
92:67:c7:8e:b2:8d:a5:88:a4:33:cf:0d:19:a8:ef:b5:cc:65:
84:48:ce:5f:fb:fb:e2:9a:c9:49:f5:ed:ce:37:eb:ed:02:85:
3b:d2:87:e9:e0:51:75:42:98:e7:10:97:63:81:52:d5:70:e3:
03:a2:d3:6c:74:84:0c:8a:5a:0f:0d:54:fe:f2:22:a0:a7:b3:
47:d0:0a:73:94:d7:b8:17:bc:20:5f:ac:f3:8d:7a:42:0f:14:
9a:88:57:1e:c5:56:a8:51:10:5d:01:c9:dc:19:bb:bf:9f:21:
15:77:96:e7:4a:6b:06:ba:aa:a6:24:ef:2d:6a:81:00:2f:69:
a8:76:51:eb:ff:b8:29:8a:e8:04:82:76:2d:af:9d:fa:d1:74:
e6:f6:31:1b:33:b5:92:6e:10:1f:0e:f9:eb:db:f9:69:05:28:
1d:07:00:37:bd:e4:bb:0e:5a:f0:fb:c0:2d:c4:21:b0:65:a9:
12:24:51:c0:36:9f:13:b9:f9:7b:66:30:bc:98:19:1d:ba:7c:
7c:67:ec:ab:48:3b:fa:3e:84:2e:72:f7:59:00:f6:d2:aa:2a:
95:ce:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 16:49:26 2026 by rpki-client