Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: OIXKy7RnWcZuDeLOn57Znj4Z2dRjajAIuKwWEYo2ASg=
Subject key identifier: 18:81:D4:F0:41:76:4E:9C:F8:20:11:DD:30:0F:BF:7E:DC:07:BE:32
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 019E9138283FA23D7007D1E525FCD3014A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: 34
Signing time: Thu 04 Jun 2026 06:00:37 +0000
Manifest this update: Thu 04 Jun 2026 06:00:37 +0000
Manifest next update: Fri 05 Jun 2026 06:00:37 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: LKFwoGukVnQDPNhhNmlpIeDJsEiisAvgZRjRMlDpVqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:38:28:3f:a2:3d:70:07:d1:e5:25:fc:d3:01:4a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Jun 4 06:00:37 2026 GMT
Not After : Jun 5 06:00:37 2026 GMT
Subject: CN=1881d4f041764e9cf82011dd300fbf7edc07be32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:b2:01:39:aa:20:a0:5a:83:aa:6b:b1:a5:
0c:50:12:e2:ec:fc:07:ff:44:43:0a:f0:37:17:34:
50:af:d1:56:71:81:12:ff:8d:9e:54:ae:b2:ab:ae:
d4:cf:c7:26:d4:1e:f6:d9:56:85:80:a6:e3:81:d9:
97:d9:f0:7b:83:cf:4f:02:5b:a8:ca:67:29:ed:47:
79:42:16:59:e2:c5:e6:2b:8d:6a:9d:6c:6e:fa:5a:
7f:cb:06:a3:6d:67:09:57:ad:d9:b8:95:18:07:71:
e2:d9:f3:46:19:d6:81:17:6b:25:e9:34:f0:71:36:
6f:b3:e2:a0:45:b1:16:a4:b5:06:20:15:55:66:73:
31:09:22:37:c8:62:34:f4:9b:db:a3:e1:d6:08:fc:
96:de:bd:8e:47:b7:e2:70:13:45:9e:99:d0:cf:25:
25:da:50:5b:f7:9b:df:8a:10:cb:5d:48:b0:0c:f7:
8b:d2:d0:d6:8e:7f:ea:f7:ca:ab:15:d0:79:9a:db:
a7:f4:7f:6d:b6:97:ff:2e:7b:20:48:a1:19:0f:c8:
a9:eb:8c:a7:88:fa:62:70:21:ad:b2:15:f4:18:8b:
63:f0:2a:b8:98:65:68:4e:89:7a:cb:23:c6:d0:2e:
c9:64:a9:2d:fa:b7:ee:4c:d5:89:37:b6:6c:65:0e:
52:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:81:D4:F0:41:76:4E:9C:F8:20:11:DD:30:0F:BF:7E:DC:07:BE:32
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:9b:e1:f1:b0:96:15:46:74:dc:2c:7a:27:6f:de:67:7f:
21:07:47:00:80:9b:a8:92:bd:b6:86:98:63:76:3b:20:9a:f4:
2d:e6:42:e8:f7:3b:93:cc:ee:c7:a2:01:19:d2:36:6f:25:cd:
df:bf:9a:0c:87:f4:1b:38:54:30:e6:e1:40:6f:ba:37:2c:72:
99:4b:18:8c:8a:04:fd:90:0e:71:5e:ee:ce:f9:e8:6c:8a:8e:
2f:31:e6:6e:53:1e:79:ef:d3:b0:5c:bb:84:17:bc:40:3b:67:
40:68:ba:db:dd:ef:03:dd:29:bc:25:7e:68:79:9c:fb:0d:59:
4e:cc:c4:a8:64:e0:7c:61:b9:eb:fa:d8:b3:7f:60:f2:de:4a:
be:41:db:a4:ca:e6:d8:e6:33:37:25:b5:05:99:c5:db:97:1f:
f2:c1:a4:b9:39:28:5a:a1:c3:62:12:af:84:ff:91:e8:73:06:
76:a9:a3:e5:ca:6d:5f:57:72:0d:7f:00:46:53:1c:a2:12:bf:
1d:9c:88:da:63:2d:b6:9b:64:33:54:84:94:c0:b2:93:1c:27:
67:e0:c2:d6:b1:a0:ea:71:3a:ae:d5:5a:9e:04:1d:dc:9a:92:
99:80:9a:7f:c5:67:fe:f3:7b:66:57:23:0c:51:6e:15:c4:ca:
95:39:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:17:51 2026 by rpki-client