Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: aOsD2AvagSGXj2CHvzW4keivjDEbarmXH1n2nnToIKg=
Subject key identifier: 08:92:2F:00:22:59:D7:1F:56:8A:89:FF:80:2C:88:CA:33:37:44:33
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 01A14C5004A2A37AEA6ACB2D5CF856CE1730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 17A5
Signing time: Sun 18 Oct 2026 00:01:14 +0000
Manifest this update: Sun 18 Oct 2026 00:01:14 +0000
Manifest next update: Mon 19 Oct 2026 00:01:14 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: XTIgzvQO6Pal6xYILZDeDFY5r0PiPjU2OFXGujAiAs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:50:04:a2:a3:7a:ea:6a:cb:2d:5c:f8:56:ce:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Oct 18 00:01:14 2026 GMT
Not After : Oct 19 00:01:14 2026 GMT
Subject: CN=08922f002259d71f568a89ff802c88ca33374433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:55:80:1e:7e:a7:60:4a:5c:ba:b3:29:7d:
d8:2f:31:d8:8d:7b:e7:13:23:b8:6c:92:37:77:a6:
a3:fe:b3:74:01:c0:7c:fb:99:a8:ac:f0:3a:80:23:
78:4b:73:cd:b5:24:df:39:03:d5:b4:40:1d:39:f6:
78:6b:e1:2b:25:86:75:56:1c:68:f0:7e:55:f8:e1:
01:cd:4c:3f:b8:1b:6f:e4:59:e1:80:4a:7a:fd:7c:
ad:09:83:be:d8:db:c8:ba:9a:f4:e2:8b:86:bb:83:
e5:01:13:ba:42:9e:59:39:a2:6e:02:06:f2:fe:8e:
ec:8f:db:ca:a3:1e:c2:86:99:fb:3a:bb:5c:91:7f:
62:e8:9c:ad:4e:ca:ac:25:73:d6:64:76:93:9d:4d:
c6:c1:49:76:69:be:86:6a:15:6b:c1:e6:78:30:e8:
12:61:3e:07:d4:21:fe:12:7e:6e:a5:dc:45:a0:79:
8b:74:67:cb:38:7b:46:52:36:e0:5c:2d:9d:19:c3:
a3:86:eb:0d:e7:4e:f1:21:8c:e6:58:49:d0:6c:ad:
cd:25:af:f4:10:96:e5:06:20:7a:1a:ba:04:c0:f2:
70:57:d3:85:2b:19:87:b6:df:fa:59:ba:c9:a9:5c:
c6:fe:a2:b1:ca:1f:0f:af:bf:1f:76:99:bb:2b:80:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:92:2F:00:22:59:D7:1F:56:8A:89:FF:80:2C:88:CA:33:37:44:33
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:11:cb:37:60:43:f3:50:68:60:0b:42:a5:b7:27:3e:ab:72:
98:71:20:34:18:27:61:2a:18:93:0f:48:7c:05:98:ff:c2:9e:
db:b3:a7:54:c9:c9:b1:be:de:ad:3b:07:97:1f:dd:ea:9e:a1:
35:21:9e:dc:79:2f:d8:18:4c:56:df:bb:36:19:cc:1d:34:96:
d7:3d:c9:27:c3:0f:a5:b9:58:9d:4d:bd:5b:97:fc:05:88:f1:
6d:38:f1:6b:59:ac:15:fe:f2:de:03:53:f8:53:c0:8d:f8:b5:
d3:4e:3d:6b:2f:e7:d6:a6:9e:57:77:fe:ba:6b:25:47:51:fc:
c1:3d:52:e2:91:cc:9e:c4:6b:7e:72:31:4a:9e:e8:b8:e0:7b:
0a:fd:39:7f:20:17:a6:7c:a4:51:62:1e:6f:49:b0:34:12:ec:
ee:5e:ed:7a:a0:98:78:fc:80:a2:a8:6c:23:11:01:a0:48:94:
39:d7:83:67:94:3d:55:f6:6f:25:4c:05:74:e5:44:aa:11:22:
22:d6:2f:12:76:4f:05:3a:3c:00:f1:24:6f:09:9d:88:90:94:
37:5f:55:b8:2e:57:72:a8:84:68:91:ca:5b:81:f2:73:c0:f2:
cb:7e:30:f2:d3:08:72:5b:b6:b2:f1:b8:2c:50:33:4a:84:f5:
55:c7:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:26 2026 by rpki-client