Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier: mhul6Y+cCtl1TuAtznV18goMzrSQgs44gci5eEdx180=
Subject key identifier: 22:16:49:E2:D7:55:98:A9:FB:6E:74:AB:37:70:2A:B9:9D:22:F1:3F
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 01A089E7548FB087937DFA5982DDC60994B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 06:00:34 +0000
Manifest this update: Thu 10 Sep 2026 06:00:34 +0000
Manifest next update: Fri 11 Sep 2026 06:00:34 +0000
Files and hashes: 1: BKA_pskraOwHcChlhz1zzkoM_tQ.roa (hash: 4fcprLVa8yLO38Zivt4EsuXS/oNoQPPcjI0Cc2hnyvI=)
2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: +C9xrHz76vGYpbcVKqVrakf3tVu9+/m8I63mwIR+MjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:54:8f:b0:87:93:7d:fa:59:82:dd:c6:09:94:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Sep 10 06:00:34 2026 GMT
Not After : Sep 11 06:00:34 2026 GMT
Subject: CN=221649e2d75598a9fb6e74ab37702ab99d22f13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:f4:a1:ae:02:eb:f2:ea:16:55:74:ec:0e:
1e:5e:46:b9:8f:b8:9e:b1:9e:e1:e0:2b:be:59:0d:
d0:45:15:d3:ea:fc:dd:7d:47:15:d0:5f:41:27:b1:
83:0f:33:30:85:40:8f:78:76:49:7f:35:1a:c5:d5:
54:26:1f:eb:f4:a2:66:04:ae:0c:26:fd:3a:6c:e5:
4a:77:e9:53:a1:80:af:3d:e2:93:67:69:47:72:c0:
7b:a0:03:12:04:d9:e2:52:29:aa:bd:21:8d:d8:90:
ef:50:8e:76:0b:a8:9c:05:2e:ab:65:a8:16:c2:21:
2a:46:57:0c:ea:90:c1:55:8d:54:e2:25:19:bc:85:
aa:f5:0f:51:1a:f1:39:ce:43:4a:19:8e:62:3c:df:
2d:bf:71:9d:2c:0f:ab:93:47:fb:08:45:f4:99:ce:
be:8d:57:1e:13:03:97:af:e2:59:42:f0:79:62:f7:
cd:5b:db:09:1c:d9:c1:50:0e:12:96:be:46:4d:58:
d2:7b:77:7e:46:4b:7b:a2:4d:97:8c:34:bc:9f:b0:
ea:77:c3:14:3b:33:26:7b:00:36:71:ac:32:e1:a1:
a2:30:41:de:ce:4d:ce:be:0a:65:24:ae:9d:bf:59:
4d:90:cd:b3:ca:7b:08:9f:2d:a3:18:92:6c:f2:03:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:49:E2:D7:55:98:A9:FB:6E:74:AB:37:70:2A:B9:9D:22:F1:3F
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fc:c0:c0:03:50:43:ae:a2:13:48:e5:98:ca:41:6a:d2:2b:
17:ad:76:42:54:8c:1c:36:29:44:00:0f:94:50:85:ad:8d:99:
79:1a:44:50:b6:49:0a:cd:6e:d6:8c:a1:67:3e:2c:33:a2:67:
f0:e7:fc:8b:46:ee:8e:85:37:a8:58:1a:3b:98:1e:10:2d:b2:
54:9e:af:49:58:d5:a6:68:0a:2b:ba:04:86:de:75:1f:2a:9f:
80:49:27:40:15:bc:ee:6c:b8:8d:b9:13:39:26:72:3f:87:d8:
00:f0:66:1a:ca:04:42:4e:5f:71:2d:fe:72:2e:b2:4c:41:c7:
12:b2:a8:01:25:d0:02:21:bc:85:0c:32:d4:26:d2:45:19:3d:
80:dc:47:2d:17:1b:18:aa:b0:76:e3:fc:ad:84:ea:cf:62:c3:
3b:1a:e4:17:48:01:42:64:eb:37:a0:cf:ba:48:c8:27:9a:ae:
4e:b2:ed:fe:15:17:11:e2:83:5c:b6:10:4b:dd:ff:02:b8:25:
f7:04:e7:47:a3:81:ef:f0:1d:bc:fe:f0:fc:8d:71:96:cd:a8:
ff:19:f0:a7:8e:0d:e9:55:57:9b:a1:5e:67:d3:fb:c8:fa:f4:
f9:05:8a:3d:74:33:91:dc:00:d8:cd:e8:f6:62:4e:c9:4c:d8:
4e:b0:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:14 2026 by rpki-client