Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: rNGDbsx3Rbv1jREbZiG+ScYMdSVS25RhfakslwJNM/A=
Subject key identifier: 8F:B5:F9:8D:EA:9F:D4:96:B9:C6:BA:5A:E2:4C:C5:2A:61:AC:DA:04
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 01A08A1F456ED880B1581EB5D5DC176FF7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 07:01:40 +0000
Manifest this update: Thu 10 Sep 2026 07:01:40 +0000
Manifest next update: Fri 11 Sep 2026 07:01:40 +0000
Files and hashes: 1: _HzxSZR90lf9BYmEm2VupOU1Vas.roa (hash: Ugm9+I27Dta4vBt0cYoky3PGDm0q/WYMbNn8zxEdBlA=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: UnVsAlAm4Ra6QQrftSCM/x2bvwSsT3BdOa2FTzO3j/s=)
3: wgHQmaQij3F-nK5W4X8CVxaOPm0.roa (hash: sBWiBVt4sHrg4hhwrk19Ek9irYUlBrf3WzJ8I2XR+Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:45:6e:d8:80:b1:58:1e:b5:d5:dc:17:6f:f7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Sep 10 07:01:40 2026 GMT
Not After : Sep 11 07:01:40 2026 GMT
Subject: CN=8fb5f98dea9fd496b9c6ba5ae24cc52a61acda04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:08:b4:98:f2:24:50:82:4a:d6:13:6e:88:
12:43:1c:59:67:1c:15:e3:46:06:49:dd:b6:5c:4d:
24:ab:db:e7:48:9f:d4:42:03:00:06:a5:7b:f4:c6:
3d:97:fe:17:ca:2d:59:59:0c:5e:dc:92:78:79:45:
48:f7:4b:96:7f:a8:52:55:05:9a:b5:f9:e2:85:be:
a0:73:29:1c:a2:91:05:35:24:d6:44:e8:ed:de:c1:
7e:1c:7b:b2:94:62:5b:01:2d:66:33:09:a1:53:79:
25:d7:f1:57:6e:8d:92:69:7c:6c:7b:66:bf:5a:69:
ec:a8:8f:7b:28:84:60:ed:75:df:5a:f7:1f:9e:a3:
e6:ca:a2:fe:9a:6b:1b:51:cb:7b:01:81:71:f3:1e:
6a:d2:1a:f5:1e:9f:8b:32:42:e5:41:e0:b5:82:14:
71:b9:d4:2b:b0:b0:7a:34:fb:1e:2b:42:c6:7b:99:
3e:56:62:59:0d:00:22:3f:b9:67:55:39:ea:63:24:
6d:7c:f3:a4:51:67:b6:04:0a:6e:2e:f3:02:b3:67:
c0:0c:6f:69:8c:a9:41:54:66:c6:be:21:df:3e:41:
84:e8:26:e9:5b:b8:1c:43:5e:65:9d:79:80:1e:32:
7b:b4:4e:c2:84:8f:00:84:1c:22:68:18:2d:ab:89:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:F9:8D:EA:9F:D4:96:B9:C6:BA:5A:E2:4C:C5:2A:61:AC:DA:04
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:74:ab:9e:a9:89:9b:0e:5b:90:6e:0c:be:3c:a8:e2:d8:
83:95:34:2f:e9:f4:07:20:e7:57:bf:90:7a:55:e9:6e:76:40:
ab:11:af:a3:b3:0a:54:26:5c:99:2b:d6:c5:8c:24:a3:11:e2:
83:71:b1:49:92:28:4f:d8:57:b0:64:97:c8:d3:df:c0:c7:49:
c4:c5:83:6b:0c:da:bc:5d:71:f3:29:f0:8c:67:e5:11:12:6f:
d4:64:9d:47:26:b8:b3:47:00:fa:a6:56:3f:ca:2f:0e:a8:8d:
8f:af:71:c2:8a:ed:4a:73:1a:0a:86:ef:ff:f8:80:17:ca:5d:
98:9f:30:47:f2:66:5d:b2:e8:36:d6:f1:88:9e:2f:96:19:3c:
9f:fa:c3:83:dc:a5:8e:ea:47:0d:2d:2b:6b:f1:3b:ae:e2:f9:
20:c3:5f:8e:a3:3e:9e:38:81:84:dc:39:8c:7c:43:d0:fc:60:
f3:22:15:db:64:35:30:6b:2a:3b:be:7c:e6:5d:99:3e:ba:1e:
bd:3f:da:58:d1:f9:b0:eb:f4:b0:bb:7b:9e:6a:2c:90:42:f6:
72:e5:e8:a9:65:24:2c:c0:fb:8d:22:8e:dd:d4:ed:e3:6a:fd:
b0:c2:fb:49:80:09:7b:5f:51:fe:b7:81:b4:66:65:84:ba:08:
5c:ca:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:57:22 2026 by rpki-client