Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
File: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft (raw, json)
Hash identifier: frZSSPai1oLK9vDDUHmRAQAcxt0/XS5y/lKLkhNIDGY=
Subject key identifier: CE:41:18:07:44:4F:E3:6B:56:84:EA:6A:42:73:4D:AE:85:D1:E2:A5
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Certificate issuer: /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial: 01A08A8CE5307BFBB1850FAADE9AF9E16399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:24 +0000
Manifest this update: Thu 10 Sep 2026 09:01:24 +0000
Manifest next update: Fri 11 Sep 2026 09:01:24 +0000
Files and hashes: 1: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (hash: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=)
2: Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl (hash: URuVXD/Ex+1dwaVU5kTj9+lYHaVfSigh4OUG5+ifjgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:e5:30:7b:fb:b1:85:0f:aa:de:9a:f9:e1:63:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Validity
Not Before: Sep 10 09:01:24 2026 GMT
Not After : Sep 11 09:01:24 2026 GMT
Subject: CN=ce411807444fe36b5684ea6a42734dae85d1e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:cb:15:d8:00:bc:93:3e:ac:2f:db:9f:fa:
d0:1a:ac:dc:f0:da:8d:9f:94:b3:e6:55:88:b5:15:
9a:ea:ec:81:71:f6:be:2d:28:38:0b:9e:9b:71:2e:
d2:f6:c3:5a:0d:07:58:8b:8a:ef:77:ba:f8:18:f4:
d1:26:4f:13:ef:89:25:bc:b3:6c:f8:18:c3:99:05:
c3:37:a2:76:23:70:23:60:c6:f2:5b:f4:58:08:7c:
73:29:48:77:84:56:5e:ea:e1:04:de:97:60:c3:bb:
c7:ae:b5:f0:4d:f6:d9:1b:58:db:c9:74:61:0b:2a:
c8:d8:1e:e8:9a:55:43:77:ea:cf:7b:d1:a2:78:ba:
f8:f6:22:86:91:d5:bf:89:9f:f3:2d:11:a6:aa:7d:
8d:c5:60:fa:f5:a7:82:a4:ce:c8:b7:73:75:5d:41:
66:ac:85:05:1d:4b:b7:cf:8a:75:a0:86:ae:8c:8c:
0c:10:6e:2a:de:7f:b3:2d:ca:7f:39:2c:03:b9:9c:
c0:09:89:fd:18:ed:08:26:16:71:3b:a7:ac:fc:72:
e3:53:2d:f7:51:00:45:1e:96:9b:cc:b1:48:7a:00:
b1:62:f7:91:4a:fa:80:82:8f:bd:76:9d:a6:4b:76:
52:d4:3d:14:1f:f1:ed:5a:d6:ca:fd:ac:75:ea:f5:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:18:07:44:4F:E3:6B:56:84:EA:6A:42:73:4D:AE:85:D1:E2:A5
X509v3 Authority Key Identifier:
keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:15:81:75:ec:5c:1c:10:a2:61:52:12:07:76:c1:1b:ff:94:
56:51:a3:66:72:d8:31:74:59:bd:f7:a8:72:24:23:c0:1a:35:
fc:70:59:22:a7:ae:b8:26:9e:a1:ee:24:bb:5e:3f:de:4c:b9:
1f:af:80:ea:6d:37:a7:9c:94:c8:9c:94:e2:a3:dd:4e:19:f3:
6d:9a:61:73:d6:63:b4:ce:5c:f1:ed:6e:37:0d:cc:e2:a5:7a:
4e:ed:a5:44:a3:62:dc:a0:9c:f7:bc:6e:92:ed:7b:86:54:6d:
75:fe:14:f2:7f:7c:69:6a:60:eb:f4:0e:df:39:2f:80:ff:5d:
1b:fc:e3:01:b3:c1:89:d4:39:b4:4f:94:5a:f2:6a:40:68:12:
61:73:33:4a:31:db:a8:e0:a5:2a:5e:ce:ac:87:34:d6:7b:91:
72:7e:f7:9d:61:d5:56:ba:6f:80:d1:56:14:21:5b:8c:47:94:
0c:63:16:cf:23:22:85:b4:26:43:b0:bf:ff:19:bd:01:49:21:
6f:17:ac:c0:14:7d:95:19:3e:3d:1e:72:d6:86:b5:af:51:c2:
27:bd:e6:f2:bc:09:5f:32:f9:ac:f2:c0:c2:51:83:e6:06:cd:
af:a9:a6:51:58:5b:96:9a:4a:53:ac:7a:4e:b2:5c:7c:e4:98:
22:0f:f1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:00:47 2026 by rpki-client