Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
File: bQ1tLElBrnWMSVIKy3V38jKuRiY.mft (raw, json)
Hash identifier: Vv5mF6fDhn2ccO6dTPgw08VNUvcEJ7fltX0m/+dWncc=
Subject key identifier: 84:58:B0:5D:A5:67:3B:1B:7A:0E:B2:EA:7A:30:0F:F7:AB:FB:9D:D3
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Certificate issuer: /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial: 01A03AF084E1996BFB323471A2AC8B14F286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
Manifest number: 0130
Signing time: Tue 25 Aug 2026 22:00:36 +0000
Manifest this update: Tue 25 Aug 2026 22:00:36 +0000
Manifest next update: Wed 26 Aug 2026 22:00:36 +0000
Files and hashes: 1: BBATvh4xeWeL839jiNfIKPcK8JA.roa (hash: VpG3w6G88UCXf4PVa4Xkm7ESG9W4N22rBINybDK9cYA=)
2: ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (hash: 5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=)
3: bQ1tLElBrnWMSVIKy3V38jKuRiY.crl (hash: nF2Ez30pzCTN5pkSbz8ChETe3L0FASqBgE9dxWi2A1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f0:84:e1:99:6b:fb:32:34:71:a2:ac:8b:14:f2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Validity
Not Before: Aug 25 22:00:36 2026 GMT
Not After : Aug 26 22:00:36 2026 GMT
Subject: CN=8458b05da5673b1b7a0eb2ea7a300ff7abfb9dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:7a:07:38:b5:d8:d8:d8:7f:52:86:73:10:
1d:ff:ec:94:3f:b6:43:6f:cb:10:83:9c:40:ee:99:
3f:bc:7f:26:bc:f3:29:81:23:f9:fc:3d:4d:a7:7e:
7f:ea:30:c5:3e:9c:d0:96:a2:1c:b6:46:38:43:13:
54:10:66:9a:54:1c:2c:b8:61:92:5b:d5:76:7a:20:
42:b6:47:35:77:55:1e:81:55:36:f7:4c:95:06:27:
82:be:b7:5b:72:f0:3c:ef:e5:79:42:14:82:1b:31:
69:67:e0:ad:f0:86:e8:22:0e:4b:cb:48:9e:8b:d7:
c8:a7:a8:1d:18:00:f8:73:ee:20:b6:f5:4a:a5:d0:
d4:9c:81:56:16:29:3f:44:00:ed:d8:6b:1a:17:e9:
11:4b:6b:7f:b2:ec:be:09:9d:6c:7b:b5:78:a2:3b:
33:63:c8:16:3c:e8:d4:97:bf:6d:ba:5b:ae:82:b8:
e8:15:5d:ef:4d:a8:c0:a2:24:19:ae:03:22:2b:52:
87:38:21:70:44:4a:6e:0e:9f:01:c2:d8:4b:2a:1c:
5b:90:3f:c4:55:c1:9d:52:6d:8c:af:9e:9d:42:b0:
60:f1:db:0d:4b:65:8c:bd:18:f3:80:9a:66:0d:e5:
3f:6f:aa:e1:5c:82:12:28:d8:e9:f3:c7:79:82:1f:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:B0:5D:A5:67:3B:1B:7A:0E:B2:EA:7A:30:0F:F7:AB:FB:9D:D3
X509v3 Authority Key Identifier:
keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:57:4d:14:af:3b:6b:c0:77:44:89:83:e3:cc:66:34:40:42:
d3:e0:a4:41:9d:6c:f1:83:39:78:f1:64:ba:00:7d:c6:02:98:
57:86:90:ea:09:af:6f:35:43:72:c9:ec:f9:a9:59:54:7d:6a:
7a:e9:d8:d0:26:4f:74:57:56:43:9b:5f:e5:c2:88:78:fe:36:
fa:2a:53:69:3a:cf:ef:63:8b:7d:d0:b3:f9:57:31:96:f2:09:
66:55:e0:22:3c:15:9f:2c:ab:d2:66:a9:16:79:42:f5:30:be:
1d:51:ac:20:0b:5a:1e:40:5f:ca:8a:25:5a:a8:a5:37:c0:a6:
30:1d:b5:82:8f:ef:41:5f:3f:9f:03:14:dd:bb:fd:ae:4c:18:
5c:22:34:ae:c8:cc:5d:61:87:89:66:10:9c:2d:ee:c4:14:d7:
f8:64:ff:ed:cc:0b:8b:bc:4a:f0:c4:ef:a3:90:65:ef:86:42:
aa:58:21:43:20:55:e4:25:5b:a4:df:09:f7:2f:4a:9b:ff:9b:
ed:b9:5d:29:b9:7a:a7:7b:04:05:b8:ea:a9:fa:2a:8f:8a:ea:
cb:07:35:51:1e:2d:5c:cf:e2:30:27:ac:1a:c1:0a:d6:13:e8:
fd:9d:cb:84:77:c6:6a:c7:02:71:fa:b6:68:7d:80:65:63:8a:
48:d9:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:41:53 2026 by rpki-client