Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
File: bQ1tLElBrnWMSVIKy3V38jKuRiY.mft (raw, json)
Hash identifier: IhClGDLg3F3pLfM5+KBcLtFcelFtFaZXqyMVd1e415k=
Subject key identifier: B5:A9:EB:E6:99:20:09:FF:34:93:E8:EA:E0:26:32:BF:7F:D6:9A:84
Authority key identifier: 6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
Certificate issuer: /CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Certificate serial: 019F118953940B3B37A7A31DF5FA96DDD038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
Manifest number: 96
Signing time: Mon 29 Jun 2026 04:00:40 +0000
Manifest this update: Mon 29 Jun 2026 04:00:40 +0000
Manifest next update: Tue 30 Jun 2026 04:00:40 +0000
Files and hashes: 1: BBATvh4xeWeL839jiNfIKPcK8JA.roa (hash: VpG3w6G88UCXf4PVa4Xkm7ESG9W4N22rBINybDK9cYA=)
2: ZX2PC7n9FpYBcWk09qPmiC6rgvc.asa (hash: 5PdLvmsqynNg1mo/LmJzEG+jpYb1TOtwWSIIPr7wmkQ=)
3: bQ1tLElBrnWMSVIKy3V38jKuRiY.crl (hash: p/f0uX2uuOFd5P0RdF4Ma5tmEpapASSIB+i75VtFnco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:53:94:0b:3b:37:a7:a3:1d:f5:fa:96:dd:d0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6d2c4941ae758c49520acb7577f232ae4626
Validity
Not Before: Jun 29 04:00:40 2026 GMT
Not After : Jun 30 04:00:40 2026 GMT
Subject: CN=b5a9ebe6992009ff3493e8eae02632bf7fd69a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:c3:3b:7d:dd:dd:a5:d1:80:74:a7:08:ae:
ae:27:2d:14:5d:b3:f5:58:2e:59:07:f1:3e:c5:c6:
e9:d6:60:60:12:5e:60:cc:7f:c8:1b:05:b5:cc:d3:
32:eb:25:bb:8f:11:58:88:5a:ff:7c:9b:bb:ee:4e:
da:c6:55:31:79:7a:c6:cd:2b:5d:ec:a4:f2:0d:79:
78:6e:0c:85:8a:ce:f1:3d:f1:20:8f:cb:8f:3f:68:
2c:b3:71:2b:00:51:3f:e6:24:b2:ac:72:d8:f1:d2:
2c:5c:59:07:69:d3:6c:09:af:70:2a:3d:83:da:ed:
a4:90:8f:c9:c9:5f:dd:30:d0:4e:72:b9:b0:87:21:
1e:0d:b6:b8:f0:59:91:85:35:f1:94:f9:1e:43:a5:
7f:50:f2:c3:a9:32:a7:aa:11:5f:49:7c:86:cd:00:
a1:35:cd:d9:26:41:7a:1b:ef:c4:aa:c8:11:19:74:
b1:8b:7c:3c:fd:fc:2e:fc:1e:7b:33:36:af:63:46:
bd:8d:08:f6:d8:d0:f4:f5:30:cb:12:e6:28:d2:88:
0e:6f:da:e8:cf:4c:46:ec:f3:77:b3:87:fb:83:72:
b7:4a:ee:3a:5f:02:46:4f:9f:cf:b6:d7:75:88:c8:
bf:49:16:ad:bf:e4:e4:e6:95:dd:ce:29:b5:f7:12:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:EB:E6:99:20:09:FF:34:93:E8:EA:E0:26:32:BF:7F:D6:9A:84
X509v3 Authority Key Identifier:
keyid:6D:0D:6D:2C:49:41:AE:75:8C:49:52:0A:CB:75:77:F2:32:AE:46:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1tLElBrnWMSVIKy3V38jKuRiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f3271e-2f59-43e2-81e7-c6b028fad956/1/bQ1tLElBrnWMSVIKy3V38jKuRiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:12:22:cd:26:37:0a:a8:6b:c7:d4:71:32:8f:c2:ec:96:
aa:52:43:ba:7d:4e:e5:38:bb:6f:99:0c:86:e3:c2:38:19:8b:
00:69:d2:c5:7a:11:6e:bd:7c:93:52:17:d3:d3:5e:5e:b2:97:
e6:a8:62:a0:70:d8:29:3a:51:1c:3e:e4:b8:2c:fb:60:91:42:
70:ba:9a:fe:a9:0e:c2:c8:62:85:d5:84:0f:5d:92:bb:b3:e2:
62:25:49:be:44:d1:bb:bb:c5:1c:5c:5f:43:ab:3a:e6:c2:a5:
1b:68:a5:f3:d1:be:fa:99:78:ee:4f:b2:cc:08:c8:05:16:59:
71:c1:0a:56:a6:67:49:90:76:07:25:84:1b:b7:f1:ce:76:74:
19:96:ed:82:f9:20:f6:d6:2d:04:d2:17:d0:ff:18:22:41:59:
40:2c:13:a1:a7:55:89:fe:ab:61:8c:58:30:a1:6a:90:af:f2:
a7:c3:f3:a9:3b:73:20:a2:7c:5d:cb:e7:e2:5e:08:23:d1:c9:
69:fa:1c:77:3a:f9:2a:fc:9b:10:18:a1:0b:33:12:d2:93:af:
d9:f5:64:9d:bf:32:2b:a3:22:99:19:0a:22:45:db:85:7f:9a:
46:6d:52:60:26:8f:99:02:e2:7f:2a:21:dc:b8:37:0e:f0:fb:
32:8a:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:06 2026 by rpki-client