Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: NS0GrJ/ev81e3hzsTR6PMotxxzoaBXoXrWJpZMVxrrc=
Subject key identifier: 85:CE:75:80:9C:A7:34:F6:FD:BF:F1:C0:30:52:B9:37:9A:A8:E3:CB
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 019F848CD9AE6C0FBBF6A105FB38DD7622CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: B2
Signing time: Tue 21 Jul 2026 12:00:50 +0000
Manifest this update: Tue 21 Jul 2026 12:00:50 +0000
Manifest next update: Wed 22 Jul 2026 12:00:50 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: 4UD03mMOOq3EpFKU56rUVQJmB04/T7n2TAvlBqyRZao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:d9:ae:6c:0f:bb:f6:a1:05:fb:38:dd:76:22:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Jul 21 12:00:50 2026 GMT
Not After : Jul 22 12:00:50 2026 GMT
Subject: CN=85ce75809ca734f6fdbff1c03052b9379aa8e3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:2c:89:26:30:71:23:bd:53:47:e9:09:6c:
c1:a6:61:e7:2b:86:00:15:f6:e9:c9:57:5b:cd:0b:
2f:31:4a:eb:c4:1c:94:c6:f6:0f:a1:1e:de:48:47:
1e:a3:55:73:2c:0d:e7:cf:52:1c:ae:23:f9:2a:a7:
71:94:94:26:0a:e1:a7:b5:92:cc:38:db:55:51:fe:
64:70:31:aa:0b:ca:45:cf:9e:1e:25:89:82:a1:cf:
22:53:f1:e9:d7:f9:6f:3c:90:7a:ff:55:78:73:ca:
82:af:5c:c6:3e:a3:39:b2:14:01:50:87:d4:3e:d6:
fe:97:1c:51:ec:1f:6b:3e:9b:07:df:89:0c:89:bd:
88:9b:c8:e7:16:6d:df:61:13:12:bc:ef:4d:c0:90:
56:2f:cc:68:74:78:81:2e:9a:1a:67:9f:07:27:8e:
ad:cd:eb:7a:3e:cc:ee:f4:2f:f2:17:74:5a:b1:d4:
4c:f3:db:43:9e:4d:9f:42:c5:d9:98:36:3b:a7:3d:
2a:e7:5a:5b:4d:c0:dc:20:78:21:3b:32:53:22:7f:
a3:3f:1c:54:fc:21:3d:06:26:73:4e:98:e4:7a:03:
6a:ef:f4:24:96:68:ba:e2:bf:df:a7:b8:7e:ed:5b:
81:cc:fe:39:d6:8d:3b:63:1c:12:9e:e5:29:bb:e8:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:75:80:9C:A7:34:F6:FD:BF:F1:C0:30:52:B9:37:9A:A8:E3:CB
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:6a:3a:d5:2b:a8:e1:8a:b3:51:1e:cb:ad:de:e9:ac:7e:
0e:33:06:2d:c4:8b:ca:45:fc:53:43:be:47:47:3b:36:e5:76:
f4:e9:fe:35:a9:46:0f:21:93:07:f8:37:3d:ed:cd:6b:63:fb:
bc:7d:a4:ca:25:32:02:d0:f9:be:d6:92:d3:7e:8f:08:c8:7c:
11:59:f6:08:40:90:fc:91:48:b2:17:e1:7e:23:9d:e4:09:05:
07:e6:f1:01:1f:7f:07:b9:59:02:17:a0:70:0e:d0:63:1b:62:
9b:da:fa:e1:f5:f6:fc:2c:21:e6:95:2f:8e:e8:2e:cc:33:72:
89:a4:6a:08:18:f7:bb:06:16:b1:5d:b8:12:bc:5c:cb:d3:3c:
d2:b3:1b:58:3f:2f:db:db:e3:2b:41:07:22:cd:f0:de:b9:01:
b3:2f:f1:33:76:65:fb:b5:9a:20:4f:08:7a:0e:22:34:e3:33:
18:6a:90:8d:af:06:6e:68:14:56:b6:eb:7b:16:b2:92:33:c8:
d4:9f:74:91:3b:e1:de:9c:7a:c5:45:a0:f7:74:06:78:32:c3:
c4:90:08:6a:45:ae:f4:90:34:74:bb:41:69:ab:26:95:48:2b:
fb:da:f2:5e:85:af:df:93:ca:f8:d6:c2:7d:13:c9:75:f2:59:
f5:e2:a9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:05 2026 by rpki-client