Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.mft
File: bM5r1eu-5htShsa9-g9HQak5WVs.mft (raw, json)
Hash identifier: kqxWFQ1E+RaX9K0G8offNX7b5EifQlUH5Q2SttOxG5k=
Subject key identifier: CE:92:D4:12:65:66:8B:CB:AE:9A:FD:89:80:A6:88:7F:77:10:A7:AA
Authority key identifier: 6C:CE:6B:D5:EB:BE:E6:1B:52:86:C6:BD:FA:0F:47:41:A9:39:59:5B
Certificate issuer: /CN=6cce6bd5ebbee61b5286c6bdfa0f4741a939595b
Certificate serial: 01A17B849FCFA6B6B4A6C2A6C67C2F393A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM5r1eu-5htShsa9-g9HQak5WVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.mft
Manifest number: 4C
Signing time: Tue 27 Oct 2026 04:00:51 +0000
Manifest this update: Tue 27 Oct 2026 04:00:51 +0000
Manifest next update: Wed 28 Oct 2026 04:00:51 +0000
Files and hashes: 1: bM5r1eu-5htShsa9-g9HQak5WVs.crl (hash: 89itWPqq/9PYCwma/zrjTo2SVCwDQEQCHOTKCTWkyV8=)
2: jX662fY9jlqaT9uZG8QQHpkgchs.roa (hash: 6v0o0Bi1FCZ1H1g65saK2X6mdzev6P+1j47pTU86t5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM5r1eu-5htShsa9-g9HQak5WVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:9f:cf:a6:b6:b4:a6:c2:a6:c6:7c:2f:39:3a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cce6bd5ebbee61b5286c6bdfa0f4741a939595b
Validity
Not Before: Oct 27 04:00:51 2026 GMT
Not After : Oct 28 04:00:51 2026 GMT
Subject: CN=ce92d41265668bcbae9afd8980a6887f7710a7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:3e:61:83:b3:a1:4e:f9:65:b6:35:93:6c:
a6:7f:c6:4b:26:94:13:31:31:80:88:43:3e:ec:32:
b2:07:5b:87:5c:02:60:42:e0:e2:d4:9d:0e:5a:ce:
29:4c:1b:7e:e2:43:c8:bc:48:df:b4:20:f7:7e:1f:
10:9f:ec:1f:e1:1b:d6:13:8a:8f:7f:38:fe:e1:89:
a7:78:02:46:14:e4:d1:20:c7:de:b9:2f:2f:f8:9d:
8b:cc:9a:fb:ad:13:86:33:c7:44:f3:4b:b6:1b:32:
a7:1f:d7:9c:ef:98:fa:36:7c:85:73:71:7f:67:67:
77:5e:07:98:fd:0f:65:35:d2:eb:ab:c8:3f:40:fc:
34:e2:32:31:e9:09:49:92:4d:6e:45:8f:cc:c5:84:
89:9d:65:87:87:87:8d:08:d0:0a:e8:70:15:b6:d1:
96:8d:23:ed:4a:41:27:2f:07:a6:c8:62:bd:1e:e8:
94:24:ce:fa:24:70:24:c0:6b:15:18:53:b5:8a:85:
e1:3e:a6:12:df:58:b8:47:30:fe:aa:1c:6b:4f:f8:
4a:f2:75:8d:43:9f:ea:31:f1:f3:2d:07:4a:dc:9c:
4e:68:db:80:df:9c:c7:ea:15:ac:93:54:5e:f4:09:
99:85:22:d6:22:39:28:6e:dd:bd:e0:76:87:2e:4b:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:92:D4:12:65:66:8B:CB:AE:9A:FD:89:80:A6:88:7F:77:10:A7:AA
X509v3 Authority Key Identifier:
keyid:6C:CE:6B:D5:EB:BE:E6:1B:52:86:C6:BD:FA:0F:47:41:A9:39:59:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM5r1eu-5htShsa9-g9HQak5WVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:49:26:49:cd:4e:ef:b5:e6:40:50:2d:d1:14:31:83:fa:b5:
f4:cc:52:29:76:92:fd:72:2a:84:e9:96:8a:14:d2:a4:61:54:
0b:49:c1:67:20:58:86:8e:d3:9a:b1:d3:4b:46:11:3f:43:37:
4c:16:4a:4d:83:df:bd:f6:e1:ff:70:51:6d:8a:f1:20:89:75:
ea:b7:ff:05:2f:9f:4f:a0:f4:93:69:4e:be:04:4a:74:8d:a4:
4b:31:9c:d1:e8:12:a2:99:d2:9b:8e:73:5e:b5:c1:d9:87:af:
05:ff:3e:04:02:17:56:48:fc:af:a5:36:ba:7a:ec:ab:5e:c8:
38:76:e1:ff:6d:c3:6a:5e:01:47:38:d9:60:cf:54:d9:23:9f:
21:02:25:a6:2b:24:c6:0c:35:8a:31:e7:86:47:17:fe:1a:f5:
e8:58:57:75:9d:03:9c:ee:23:22:ad:cf:71:4e:da:42:60:14:
30:48:28:e6:81:30:8d:c6:8b:f0:d9:ea:0b:ce:8b:93:2b:ef:
5e:32:35:2a:25:ee:e8:5d:79:f0:b4:15:3a:f0:e1:7c:f4:06:
65:9a:5b:b7:b0:e5:19:62:0f:20:70:a2:e6:c5:8b:f7:5c:b5:
bc:41:74:5b:fe:5c:36:2f:1d:73:07:68:d5:15:13:7e:70:66:
ab:f9:d7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:00 2026 by rpki-client