Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: i9fDtq8ilE3X+xvrw3onH1yQJZ9CPe+D9GfCJne2NBg=
Subject key identifier: C6:E7:65:D6:E2:0D:8B:98:0D:51:D4:24:BB:37:16:5E:34:6B:09:55
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 01A03F72B159EC839FA793742DD635D6FBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 1A21
Signing time: Wed 26 Aug 2026 19:01:16 +0000
Manifest this update: Wed 26 Aug 2026 19:01:16 +0000
Manifest next update: Thu 27 Aug 2026 19:01:16 +0000
Files and hashes: 1: SUVgPcCNecAn7h3a2odgkdUnXAE.asa (hash: JHYm3gRUz1k6I2OldseBDJbvhLcJl5oAw0QgRA7AXfE=)
2: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: zMdhC8afi2zRvIXQrBdxNezQoc6dK/Q6Ddym2G/eCj8=)
3: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:b1:59:ec:83:9f:a7:93:74:2d:d6:35:d6:fb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Aug 26 19:01:16 2026 GMT
Not After : Aug 27 19:01:16 2026 GMT
Subject: CN=c6e765d6e20d8b980d51d424bb37165e346b0955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:16:57:2d:56:30:b1:9b:eb:d2:eb:c5:78:
c0:95:97:ef:28:84:f4:9f:a4:4a:53:7e:0b:22:91:
86:1a:dd:5c:bb:c1:1a:21:a8:9b:5d:13:7d:90:86:
3d:ca:b4:9d:29:8e:93:5a:0e:72:37:f1:8b:e1:81:
6f:97:69:f4:91:0b:eb:0a:74:b4:c3:e6:a5:cd:7a:
75:0c:e8:fd:6e:5d:cd:a2:e7:b1:6e:f6:4b:bc:bd:
63:58:ca:08:03:3e:1f:9c:04:92:e2:95:b4:cf:3e:
2b:22:8d:a5:9b:0d:a1:ed:f3:b4:6c:7c:53:a6:4b:
c3:d9:d1:e6:59:f0:7d:98:68:9d:3e:02:76:e9:88:
d3:b3:81:ff:97:68:7d:1f:7c:a8:ec:74:ce:12:82:
15:2d:90:dc:b2:30:d0:45:5f:4c:c1:f8:ec:87:c6:
af:6c:3a:6a:fd:51:fb:a0:23:76:e3:3f:44:45:e9:
95:3f:61:44:88:59:29:ee:2c:fd:2a:b2:68:6e:ba:
1c:9f:99:0c:a1:3e:5d:16:23:f1:f7:9a:c9:90:e9:
88:44:11:69:1b:ef:2c:a8:e2:0c:6f:92:b5:1f:0b:
73:03:2f:4e:19:23:e7:d0:92:7c:73:4a:5a:34:2f:
bc:78:b8:75:04:d3:d7:8b:f6:64:f1:6e:4d:02:2d:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E7:65:D6:E2:0D:8B:98:0D:51:D4:24:BB:37:16:5E:34:6B:09:55
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:24:e9:5c:17:2f:78:31:29:29:8f:46:84:7f:30:2e:1f:d6:
90:c9:7f:67:f4:a5:64:81:45:1e:57:f8:09:29:bc:46:71:16:
db:77:fc:c6:39:d5:cb:b2:a5:6c:50:60:08:30:a6:fb:c5:27:
c7:f2:96:18:a8:5f:c5:57:2a:84:dd:22:8e:cc:51:52:1e:cd:
7c:f4:fb:67:37:ba:6a:f0:08:cc:26:0a:c7:75:6a:d8:e1:29:
3e:7a:9d:72:4f:c1:fa:2e:27:77:e2:4a:87:00:32:7e:c9:83:
0d:dd:eb:b3:d8:ff:ba:71:73:a4:ae:5e:48:77:f4:1d:fb:15:
88:45:1e:30:ab:1b:54:14:ad:ec:53:fe:fa:a7:af:dd:af:ad:
07:32:31:7d:dc:01:10:4b:7a:5f:df:8a:f1:2a:84:d5:57:c4:
1d:ff:bb:db:b7:0f:86:3b:98:55:6e:31:28:b1:ef:61:51:7d:
bf:a9:45:5a:2d:01:7e:99:4c:b7:8f:73:33:79:97:4d:7c:2b:
62:bb:1b:25:76:9b:b3:f4:24:7b:d2:87:db:a0:38:01:27:2b:
69:22:29:72:09:f5:3a:76:97:b3:5a:26:79:c9:d1:63:90:56:
a1:24:bb:00:1a:b3:c2:2c:2d:47:da:b5:cb:68:16:fd:d1:75:
de:3a:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:56 2026 by rpki-client