Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
File: bQ1tLElBrnWMSVIKy3V38jKuRiY.mft (raw, json)
Hash identifier: gUDmMI2shM2gsnsEN6avVBEvp6QBwW2bkAdcFkoyS+w=
Subject key identifier: F9:41:A4:9A:16:24:D4:80:77:0D:1C:4A:0A:9A:FF:AA:88:07:7C:4E
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Certificate issuer: /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial: 019E29CC9490940ACA31F9B75F8B17508CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
Manifest number: 1E
Signing time: Fri 15 May 2026 04:02:13 +0000
Manifest this update: Fri 15 May 2026 04:02:13 +0000
Manifest next update: Sat 16 May 2026 04:02:13 +0000
Files and hashes: 1: BBATvh4xeWeL839jiNfIKPcK8JA.roa (hash: VpG3w6G88UCXf4PVa4Xkm7ESG9W4N22rBINybDK9cYA=)
2: ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (hash: 5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=)
3: bQ1tLElBrnWMSVIKy3V38jKuRiY.crl (hash: N7/jp4UW7rKXrhv4g0+GHfL6erOwUQN2XTWlSWFc6qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:94:90:94:0a:ca:31:f9:b7:5f:8b:17:50:8c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Validity
Not Before: May 15 04:02:13 2026 GMT
Not After : May 16 04:02:13 2026 GMT
Subject: CN=f941a49a1624d480770d1c4a0a9affaa88077c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:04:a2:51:f9:1d:c8:ae:fe:25:71:e1:89:
1c:76:16:37:30:93:da:b7:09:cd:78:0b:ef:6c:c0:
70:0b:5b:42:72:cb:10:09:53:c9:94:23:60:61:53:
f9:c7:53:6c:f1:df:d5:c2:66:0a:29:1c:76:22:3e:
44:a8:99:16:59:99:77:72:a7:81:65:68:bb:d0:8c:
aa:ad:19:85:55:e8:77:b5:25:13:6a:a6:52:4a:a1:
1e:70:81:9c:68:30:f7:64:61:fd:79:7a:19:4a:b2:
4c:0c:7e:32:1c:f9:09:b1:be:9d:f9:86:de:70:6f:
e4:c5:06:61:68:b8:44:c0:f1:06:19:69:aa:cb:18:
8a:98:cd:a3:8e:83:73:3c:7d:50:78:b4:6f:d3:0c:
bc:c4:be:95:c1:53:77:6f:62:5d:02:59:50:9d:84:
b9:35:0a:db:29:28:aa:ad:6e:e2:8c:8d:8e:36:4b:
2c:ce:a2:4d:8b:0d:02:5c:7f:9c:a3:c2:d5:70:49:
16:79:71:8e:b1:fe:e3:ff:99:99:54:08:ef:ef:ad:
27:5f:75:77:e3:d3:05:3a:fa:1e:98:35:fb:f1:c4:
96:a7:ad:e4:24:e1:f7:34:6f:49:91:75:da:c7:72:
b5:b6:2a:ab:58:84:48:58:37:99:7b:bd:e3:04:ce:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:41:A4:9A:16:24:D4:80:77:0D:1C:4A:0A:9A:FF:AA:88:07:7C:4E
X509v3 Authority Key Identifier:
keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8d:46:f1:83:26:06:74:dd:75:d5:25:d8:95:17:50:4c:f6:
88:ee:95:5d:84:a0:98:a9:77:e6:0d:89:3e:6a:13:74:0e:c0:
ac:26:e9:e0:37:2c:57:0e:8b:2c:a4:3c:1a:a7:35:c6:d3:ac:
8e:8d:3b:de:98:ca:12:99:af:4d:ee:16:b2:38:53:41:d4:e8:
34:16:69:50:90:3b:34:61:a8:fe:c9:65:15:eb:c0:58:d8:6c:
75:49:6b:cb:06:a9:40:7b:1d:43:9f:36:bb:f7:64:2f:43:cd:
fc:c1:67:b9:33:53:45:c1:5a:b3:08:da:b0:ad:62:27:8f:a7:
f7:68:77:b2:e3:7b:9f:b1:f5:83:5d:f6:09:ed:a2:2a:08:25:
0e:4b:ee:03:56:07:a8:ff:50:75:0e:c0:2e:cf:10:d4:5b:94:
f7:c0:f7:4d:8e:bd:e7:03:16:bf:94:10:93:a5:33:1f:4d:32:
33:db:50:3d:b9:2c:04:93:d1:d2:74:a7:8b:02:64:3e:c3:53:
72:fd:4d:6f:a4:a5:cf:13:a1:bf:ce:ba:8c:c1:fb:eb:da:91:
2a:24:87:13:60:d8:1b:03:8f:eb:e1:9f:cf:55:ed:5c:35:ce:
0c:ad:44:58:ff:83:3c:cb:cf:b8:d3:ed:ab:13:96:1d:cf:d3:
4b:4a:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:35 2026 by rpki-client