Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
File: bQ1tLElBrnWMSVIKy3V38jKuRiY.mft (raw, json)
Hash identifier: VM9En+XZWuxomPcu+peB6MCZEU9efVNxqYNin+7ittk=
Subject key identifier: 89:DD:74:FC:0F:D5:E0:E3:76:CB:01:0B:5A:3A:4B:B0:79:76:7E:92
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Certificate issuer: /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial: 01A03CDEE392CF7F52A0197AC7D8833CB39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
Manifest number: 0131
Signing time: Wed 26 Aug 2026 07:00:35 +0000
Manifest this update: Wed 26 Aug 2026 07:00:35 +0000
Manifest next update: Thu 27 Aug 2026 07:00:35 +0000
Files and hashes: 1: BBATvh4xeWeL839jiNfIKPcK8JA.roa (hash: VpG3w6G88UCXf4PVa4Xkm7ESG9W4N22rBINybDK9cYA=)
2: ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (hash: 5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=)
3: bQ1tLElBrnWMSVIKy3V38jKuRiY.crl (hash: vzUZdxgpQm5leIkOv3Nt3e2ag2txsjL+9VqiJ/xy3z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:de:e3:92:cf:7f:52:a0:19:7a:c7:d8:83:3c:b3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Validity
Not Before: Aug 26 07:00:35 2026 GMT
Not After : Aug 27 07:00:35 2026 GMT
Subject: CN=89dd74fc0fd5e0e376cb010b5a3a4bb079767e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:f3:c5:7c:ba:bd:08:70:1a:33:9a:f8:8f:
db:a5:df:9b:f3:35:15:4f:95:b5:90:f3:04:64:1f:
49:bc:98:aa:d9:9a:17:f0:f7:b9:e2:a3:75:f1:bb:
58:3f:48:af:fe:6f:8d:43:96:d5:61:11:5a:91:5e:
82:14:04:4a:d5:e3:c9:27:6f:34:55:da:58:c2:65:
3f:65:36:a0:a4:2f:44:dc:ba:6a:40:fa:f5:9c:35:
1b:96:e8:45:67:ec:4b:cd:f9:1d:b4:d5:a0:6a:df:
59:07:3f:69:f9:bd:d5:08:77:d4:da:50:da:c9:91:
ff:a6:c2:48:af:04:0c:ea:9a:62:d4:28:41:c7:8a:
10:ee:cd:bf:38:2c:59:f3:47:20:c0:62:62:34:dc:
3a:38:83:ae:ff:5b:08:2a:3f:6e:dc:65:68:5a:6c:
5b:b3:15:44:df:81:4a:0c:fd:02:96:3f:fc:8d:c7:
d9:e7:d1:d8:19:d0:7e:00:92:43:ff:ec:d8:6f:14:
b3:e9:bc:88:62:84:ce:83:d6:78:60:9b:d5:4b:68:
b7:66:01:66:02:f3:0c:61:74:79:1f:2b:59:7b:e7:
20:99:67:46:3a:85:f3:b8:d5:b6:2e:73:1f:cb:67:
f4:07:0c:e4:c6:61:7f:9e:8d:78:19:c8:ec:cd:12:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DD:74:FC:0F:D5:E0:E3:76:CB:01:0B:5A:3A:4B:B0:79:76:7E:92
X509v3 Authority Key Identifier:
keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:b9:ae:ca:ed:12:c7:48:c7:38:b2:20:6c:f7:c8:a5:f1:
1f:7b:14:7a:67:b8:a2:57:e4:8e:8f:87:15:81:50:3b:3c:b0:
08:1e:a8:53:6b:ab:3e:64:0d:eb:4c:a2:d7:d2:74:03:a5:56:
80:7f:d1:0b:fc:4d:3b:ce:8e:0c:b9:9b:27:69:8a:14:37:e3:
81:e5:54:85:ad:a2:91:12:78:14:62:7e:10:ce:31:d8:09:fc:
c9:9c:92:04:96:e1:d8:1e:4b:3b:13:2c:b1:79:2a:32:33:cb:
55:ca:1c:f9:f0:1d:06:d8:42:2c:ae:73:71:85:73:21:6e:fd:
cc:fb:29:c2:b3:99:0d:16:4d:39:2f:e0:5e:c3:4a:4e:02:7a:
2e:05:50:f3:15:79:b1:50:5a:f4:a7:28:69:88:3a:9c:81:4b:
95:04:6b:d8:66:7a:8e:67:a7:07:1e:0b:91:59:1d:e0:6e:90:
d1:b5:05:f2:ae:15:c4:fd:8d:8e:55:f3:34:65:c7:8f:e4:da:
68:f1:24:2e:d5:f3:11:1b:bd:07:55:2d:2e:92:98:d6:a7:89:
93:88:0d:6f:08:8b:a2:96:19:e5:37:cf:8a:a6:7b:1a:36:fc:
dd:55:d5:d5:59:f3:f7:72:27:ea:89:4e:48:a3:25:b8:72:5b:
ad:5a:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:10 2026 by rpki-client