Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: oRXwpNuOW2E6DPL0kvlSlIirbfSqGbGQs8juiH1wMI8=
Subject key identifier: D2:4F:FC:CF:9E:1B:AE:81:AE:43:E7:CC:3E:51:AD:20:6F:3C:C7:89
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 01A027A18FF46AA249124CFA328E734F511A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1A15
Signing time: Sat 22 Aug 2026 04:01:34 +0000
Manifest this update: Sat 22 Aug 2026 04:01:34 +0000
Manifest next update: Sun 23 Aug 2026 04:01:34 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: CE438SQN80x5iPZkUW29526BgDA.asa (hash: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=)
3: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: 1iv6h6GDahk2Cy0QTV5yHsTsiD6UHeAwcdPu9MNZ90k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:27:a1:8f:f4:6a:a2:49:12:4c:fa:32:8e:73:4f:51:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Aug 22 04:01:34 2026 GMT
Not After : Aug 23 04:01:34 2026 GMT
Subject: CN=d24ffccf9e1bae81ae43e7cc3e51ad206f3cc789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:cf:b4:7b:bd:37:a9:e8:0a:61:05:a1:fa:
1c:f5:64:fb:6c:82:14:65:9e:4e:77:74:de:b7:d0:
86:84:2a:ba:37:ed:a9:20:72:ae:1b:d1:93:48:15:
d5:9b:f6:72:68:6c:29:05:36:6c:ff:3d:bf:5c:bf:
1f:d4:ae:d6:63:77:9d:11:39:ed:f0:cb:1a:c3:a8:
5a:72:84:a4:3b:3c:83:e6:41:e5:59:d1:b9:c8:49:
b2:9d:e6:60:0c:f8:55:45:ea:12:7b:78:e9:e5:72:
79:23:90:12:75:b8:62:ea:f0:50:2d:73:21:a4:03:
c7:c4:c8:f8:82:74:e6:ba:45:25:81:7d:f3:00:6a:
51:0f:7f:22:e3:df:34:70:ff:5f:36:60:1a:20:1d:
da:05:be:71:b3:c7:3e:f9:ad:9d:09:ed:8a:01:f3:
ac:b4:51:ba:23:78:6c:e1:3d:f3:82:f8:bf:c9:ec:
76:d9:f5:36:0e:bd:51:c5:84:a1:7f:53:13:e0:b3:
71:8f:81:c5:a1:a0:ae:ba:31:df:d0:bc:49:21:97:
3a:5f:e2:65:d1:bc:18:52:d1:60:75:96:36:40:7d:
2e:f3:eb:62:b8:98:49:3c:ff:09:b4:82:26:35:62:
2b:3d:df:d4:5a:80:cc:15:35:fb:35:54:1f:f1:41:
cb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4F:FC:CF:9E:1B:AE:81:AE:43:E7:CC:3E:51:AD:20:6F:3C:C7:89
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ad:11:59:ac:39:90:b7:ec:7d:2b:37:ec:9f:17:b8:80:92:
0d:df:90:20:e4:29:f3:9e:59:81:df:e7:0c:7a:1f:c4:04:b8:
83:17:28:3b:59:e4:79:0e:af:86:8a:c7:6a:d9:7d:45:5f:29:
7b:c9:84:99:43:eb:d4:6c:cd:19:30:93:1e:b0:de:8d:74:fc:
c0:e9:99:24:53:5e:16:0c:1e:2d:c2:0e:8d:44:fd:9e:33:b4:
a2:4c:0e:93:d7:c5:d9:8b:d2:05:bb:f7:60:f0:44:e8:d7:7d:
8f:09:59:e4:c8:9b:ff:48:3f:84:66:70:df:56:fc:e9:f6:1f:
9d:9e:ae:91:55:08:10:3b:0b:d4:41:bf:6f:af:9d:47:08:b9:
6c:a3:65:a6:eb:a8:56:56:71:69:dc:93:90:cc:46:f5:d0:f7:
82:ca:6e:ed:10:65:d4:c0:e9:13:9a:2d:a9:a3:df:d9:4b:54:
52:4b:43:62:c0:c9:9e:4c:cf:08:87:c7:f5:91:bf:6d:66:4c:
09:1d:29:39:dc:2e:d7:37:05:0b:f6:47:fa:a1:8a:fd:fe:ad:
54:ed:86:ae:8c:1f:71:11:f1:fd:72:c5:f9:f5:4c:11:b7:49:
c7:be:b3:c3:de:dd:eb:97:b7:ee:fd:f3:d4:33:5d:65:78:fe:
65:04:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:01:22 2026 by rpki-client