Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: etstUfrS4UJdcZNxwYGkaLSCQuD3om4Yu4k7UTK5/9w=
Subject key identifier: 6A:6D:52:86:46:55:A4:AE:E9:9E:3E:29:F2:AB:AC:44:46:29:AB:3B
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 01A13BC9E1AF73A5AEBD03DFC2A0B46354B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1AA4
Signing time: Wed 14 Oct 2026 19:00:48 +0000
Manifest this update: Wed 14 Oct 2026 19:00:48 +0000
Manifest next update: Thu 15 Oct 2026 19:00:48 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: CE438SQN80x5iPZkUW29526BgDA.asa (hash: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=)
3: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: jD0QT1NsN+TuhbhDuc0YYjN9pJuKUHi7E2Afo8RYx+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c9:e1:af:73:a5:ae:bd:03:df:c2:a0:b4:63:54:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Oct 14 19:00:48 2026 GMT
Not After : Oct 15 19:00:48 2026 GMT
Subject: CN=6a6d52864655a4aee99e3e29f2abac444629ab3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:9e:a4:e0:02:65:5d:ec:97:91:b3:2a:0e:
d3:7c:0f:54:1b:fb:65:f9:5b:aa:3e:f7:df:9b:0a:
3f:c6:5a:69:28:4a:7a:a2:a3:92:38:63:54:96:a8:
3a:61:b6:e9:1c:93:e2:cf:53:58:5b:e8:99:7f:60:
3b:a4:75:3c:73:ea:e5:3f:b2:3b:db:88:24:37:03:
64:e3:3e:a2:ed:b0:1b:17:99:d9:46:06:ff:1d:3f:
9a:c5:44:4e:80:cd:3c:7f:b4:1e:a4:86:20:24:47:
06:58:c7:09:61:e6:03:a2:bc:0b:49:39:07:a9:5c:
61:b9:42:b2:d7:82:4b:95:16:6c:47:37:f3:ee:2d:
f8:71:35:71:3f:4f:75:e8:09:cc:9a:38:e2:3d:31:
d0:e7:be:0f:01:be:62:a9:a1:98:53:04:53:1c:8c:
81:b1:cf:d1:3e:b2:36:44:8e:51:46:49:da:f3:ae:
b4:85:75:04:d8:26:07:11:00:b7:4f:3f:0f:59:06:
ff:66:36:f5:73:81:de:0d:d7:e9:ca:1b:b3:2f:3c:
fe:11:b2:f0:ae:4a:c7:e3:1d:fa:dd:ee:22:e6:49:
80:52:0e:fd:8a:84:8e:0f:d8:fd:07:1c:12:35:d3:
0e:45:e5:a1:75:72:56:a0:8c:b9:0e:41:35:45:7c:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:52:86:46:55:A4:AE:E9:9E:3E:29:F2:AB:AC:44:46:29:AB:3B
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:88:0b:50:08:96:6b:18:34:8e:45:22:09:b8:7e:55:43:e8:
e8:09:7d:92:69:0f:5a:3b:79:5f:78:45:12:13:6f:b7:a9:6f:
b6:67:ab:76:17:a0:f5:89:1e:a7:70:81:95:88:f3:1a:ab:cb:
2f:dc:1b:70:17:b1:a5:be:83:8b:ad:5e:e7:68:42:db:ac:e0:
b2:ab:5b:57:9f:ed:c0:0e:27:a9:a2:f0:68:f5:fc:b3:65:a9:
93:b9:7f:2c:70:44:da:26:c0:90:ca:11:ad:d7:10:18:b1:8c:
00:c5:af:34:7f:b6:56:0e:48:3f:0c:a2:2d:b7:c6:5d:0d:cb:
c9:fb:2b:2a:28:7e:32:b3:58:b7:7a:e0:61:88:1d:05:23:47:
59:3b:75:08:69:5d:f2:e4:da:b3:56:45:cb:0a:75:77:4c:1c:
a2:8e:b2:08:ac:0b:1d:6d:6b:ac:fb:b3:97:28:8f:39:04:f2:
99:ef:d2:eb:62:e1:7f:bf:6e:ef:01:cc:b5:d1:58:c3:9c:30:
17:cd:a9:e0:a0:8a:28:ba:37:5e:63:d2:90:a7:7f:0f:87:e5:
a0:04:7b:69:27:ef:70:98:8c:91:18:de:91:42:06:cd:d0:e2:
d1:00:c7:93:d3:2f:ef:5d:ea:ae:2c:68:24:2a:ce:bb:ef:57:
47:31:55:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:46:06 2026 by rpki-client