Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: zGN8cvlb1gFrvF7tURD8iAmMZ1W2NdL/TK7JeZx1Ltc=
Subject key identifier: 26:B4:F2:45:51:7A:31:FC:EE:5E:05:BD:91:3B:F6:90:42:8F:62:8B
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 01A172EF1E18910A5C00EDABF0349E6813D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: 01B2
Signing time: Sun 25 Oct 2026 12:00:35 +0000
Manifest this update: Sun 25 Oct 2026 12:00:35 +0000
Manifest next update: Mon 26 Oct 2026 12:00:35 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: eB9zccDmdbMHUvJqQVKBqL61bDkacNWDDtts1x3q/8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ef:1e:18:91:0a:5c:00:ed:ab:f0:34:9e:68:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Oct 25 12:00:35 2026 GMT
Not After : Oct 26 12:00:35 2026 GMT
Subject: CN=26b4f245517a31fcee5e05bd913bf690428f628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:c1:4d:71:49:10:39:81:02:a8:e0:c5:af:
22:e5:25:55:cf:06:35:75:c3:8d:a1:54:5c:e3:b1:
cc:b0:45:9b:4a:2b:86:6f:2f:9b:f7:7e:4d:db:54:
c0:69:74:15:0d:db:8e:09:9f:39:92:87:88:b7:cf:
5e:9a:58:b7:f9:ae:0b:26:da:4e:66:db:10:68:79:
ba:8e:25:e6:ca:df:a1:69:6f:d8:e1:c8:93:d9:6e:
5f:44:bd:80:b4:7e:13:02:6b:89:66:9f:f5:45:08:
79:ee:88:57:23:43:f8:30:35:4f:47:ed:fb:78:0e:
6b:29:f0:ad:11:0b:8c:b5:e1:ec:e7:d6:2e:dc:28:
2b:62:9e:40:b0:52:55:77:f6:90:1f:9e:bb:99:3b:
9b:19:2b:8d:c4:bb:63:c7:a7:89:44:a6:a1:af:25:
03:d8:66:ba:57:5b:c4:88:87:54:f9:fe:f8:b6:1f:
8d:d8:66:8a:38:6d:2e:dc:8c:ff:94:b8:ff:69:6a:
30:d6:8a:11:4e:d0:23:cb:3f:6c:44:95:ad:08:0f:
96:43:5f:0f:c1:32:55:9e:8b:b1:3a:de:f9:cb:23:
a9:ff:a5:66:3e:4c:2b:83:d5:0a:33:a5:23:84:b2:
ed:55:88:63:71:14:19:08:96:b2:e3:9a:ef:fd:00:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B4:F2:45:51:7A:31:FC:EE:5E:05:BD:91:3B:F6:90:42:8F:62:8B
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:37:f0:2e:f3:2b:c8:ac:cd:8b:3a:e7:bb:48:b9:03:5d:c0:
73:d3:e7:b2:62:ab:fe:0c:d2:e0:23:ce:21:19:6d:43:54:dd:
aa:51:4d:50:ea:58:eb:e2:ca:fb:4f:e3:8a:2c:ae:8f:33:40:
81:b0:00:f0:b9:22:be:d7:f6:81:5e:be:56:02:8c:c4:42:52:
46:c1:12:95:83:87:48:fa:93:0e:9d:f8:51:5d:9d:6f:19:92:
5c:bb:cf:20:35:87:5f:6e:f1:a1:3f:de:59:ae:9b:72:c8:2e:
91:df:b9:a0:ad:a5:2b:e1:4f:ad:ca:96:2e:d4:54:88:81:a9:
54:ed:d0:9c:41:51:c9:1e:b0:09:b9:3e:d6:6e:27:45:5f:3c:
36:95:88:e9:41:d9:d5:28:e1:cb:b5:fc:00:77:7a:db:4e:b2:
07:36:e8:05:17:4a:13:6c:28:c0:9a:45:45:94:80:90:7f:a0:
5a:7b:37:b9:51:ee:e0:4e:11:8d:9b:4f:b5:eb:e4:bb:f1:0f:
0f:ce:d5:ed:a7:6f:3b:9c:33:43:6b:02:a4:be:6b:a3:e9:eb:
3f:fc:3a:56:83:92:f7:7d:97:df:a6:20:4e:76:65:99:0f:b7:
04:25:c4:6c:72:4a:71:28:c1:43:d6:af:9e:da:39:4d:b4:0d:
45:80:70:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFy7x4YkQpcAO2r8DSeaBPWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzA5MjMyMWQ3N2I2ZTVkY2I3Y2E1MDVkNzQzYTIzODAw
OGQ0ZjIwHhcNMjYxMDI1MTIwMDM1WhcNMjYxMDI2MTIwMDM1WjAzMTEwLwYDVQQD
EygyNmI0ZjI0NTUxN2EzMWZjZWU1ZTA1YmQ5MTNiZjY5MDQyOGY2MjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq/BTXFJEDmBAqjgxa8i5SVVzwY1
dcONoVRc47HMsEWbSiuGby+b935N21TAaXQVDduOCZ85koeIt89emli3+a4LJtpO
ZtsQaHm6jiXmyt+haW/Y4ciT2W5fRL2AtH4TAmuJZp/1RQh57ohXI0P4MDVPR+37
eA5rKfCtEQuMteHs59Yu3CgrYp5AsFJVd/aQH567mTubGSuNxLtjx6eJRKahryUD
2Ga6V1vEiIdU+f74th+N2GaKOG0u3Iz/lLj/aWow1ooRTtAjyz9sRJWtCA+WQ18P
wTJVnouxOt75yyOp/6VmPkwrg9UKM6UjhLLtVYhjcRQZCJay45rv/QBTyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa08kVRejH87l4FvZE79pBCj2KLMB8GA1UdIwQY
MBaAFG1wkjIdd7bl3LfKUF10OiOACNTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhDU01oMTN0dVhjdDhwUVhYUTZJNEFJMVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYmYxM2UtZTI1Yi00OTdhLWJlNTUt
Mzg0N2Y0ZjI0ZWE3LzEvYlhDU01oMTN0dVhjdDhwUVhYUTZJNEFJMVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mYmYxM2UtZTI1Yi00OTdhLWJlNTUtMzg0N2Y0ZjI0ZWE3
LzEvYlhDU01oMTN0dVhjdDhwUVhYUTZJNEFJMVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojfwLvMr
yKzNizrnu0i5A13Ac9PnsmKr/gzS4CPOIRltQ1TdqlFNUOpY6+LK+0/jiiyujzNA
gbAA8Lkivtf2gV6+VgKMxEJSRsESlYOHSPqTDp34UV2dbxmSXLvPIDWHX27xoT/e
Wa6bcsgukd+5oK2lK+FPrcqWLtRUiIGpVO3QnEFRyR6wCbk+1m4nRV88NpWI6UHZ
1Sjhy7X8AHd6206yBzboBRdKE2wowJpFRZSAkH+gWns3uVHu4E4RjZtPtevku/EP
D87V7advO5wzQ2sCpL5ro+nrP/w6VoOS932X36YgTnZlmQ+3BCXEbHJKcSjBQ9av
nto5TbQNRYBwmw==
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:45:57 2026 by rpki-client