Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: CKkwdDD38FTfQF/KOXL1K5aRSPonnr7SKe5DI9kJrZ4=
Subject key identifier: EF:F5:D5:63:59:3D:4E:06:30:77:53:1F:EC:4B:C2:A2:28:34:AB:4C
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 01A0B6898BE6B879EDBE0532C427792C1CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 19ED
Signing time: Fri 18 Sep 2026 22:01:02 +0000
Manifest this update: Fri 18 Sep 2026 22:01:02 +0000
Manifest next update: Sat 19 Sep 2026 22:01:02 +0000
Files and hashes: 1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: TpQH0o4U+1d+0Nl4k+sb+0gR7+NhHOq1zQxPn8vGC0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:89:8b:e6:b8:79:ed:be:05:32:c4:27:79:2c:1c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Sep 18 22:01:02 2026 GMT
Not After : Sep 19 22:01:02 2026 GMT
Subject: CN=eff5d563593d4e063077531fec4bc2a22834ab4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:2c:2f:00:d1:37:60:c8:ff:1b:3b:c5:88:
e6:50:5f:65:4a:46:a4:4d:9e:2c:e4:19:07:db:f2:
61:01:08:2a:80:bb:87:a9:0a:cd:f4:e2:4b:3a:bc:
fd:3b:f4:8e:8a:41:15:8d:bf:17:62:37:09:50:a6:
56:8d:3b:03:b1:1e:d6:65:e2:3c:6a:d0:81:0f:32:
9d:6a:eb:a1:95:04:f1:54:a9:21:ef:46:04:10:22:
71:5d:0d:f1:9d:fd:8d:c4:62:ae:ab:63:6a:f0:ec:
f5:34:8a:ae:13:d0:ab:81:e9:23:1f:77:bb:f5:92:
ac:d6:df:d9:41:0e:3b:06:06:05:f1:c8:3e:09:f5:
74:9c:9b:00:63:c8:4c:45:4e:7c:f1:f7:24:27:97:
ec:76:0f:b6:12:83:7c:0f:fa:a5:be:24:09:4b:ff:
64:1f:49:69:43:1c:54:aa:9d:1c:c4:7b:d3:98:ad:
2b:5e:35:4d:6c:14:d0:b9:23:19:a7:82:cd:b2:a8:
d8:e8:3c:f2:92:25:8c:2e:ba:2d:9d:23:4f:c3:dd:
84:01:c3:58:c2:a7:a3:60:0a:48:49:25:d6:da:34:
f1:be:43:46:85:63:40:7d:05:e7:b0:ba:a9:5f:04:
87:3b:04:72:44:ed:97:13:8c:ef:79:5e:f8:5b:26:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F5:D5:63:59:3D:4E:06:30:77:53:1F:EC:4B:C2:A2:28:34:AB:4C
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b3:ec:d4:f9:c1:bc:16:6e:d4:18:55:9a:18:8d:a5:fd:44:
21:94:1d:87:07:0c:97:7c:bb:1d:24:4b:44:fa:5f:78:64:ca:
f4:a1:e6:a9:7b:78:b0:29:ae:17:5e:25:c9:71:99:f4:ee:36:
eb:d7:20:94:66:95:87:54:a7:69:44:59:48:6e:6e:c8:7e:dd:
99:c3:18:b1:d3:13:a7:3f:f6:91:1d:e1:00:c3:5a:37:9c:b4:
d6:13:85:3c:d5:4a:fa:20:16:e5:d3:0f:16:b4:cd:f1:ec:45:
64:a6:a1:14:64:b1:0b:c1:48:87:44:f4:46:20:00:40:e7:44:
d8:f7:fb:aa:39:ee:78:bc:31:44:68:a2:46:06:1b:a8:97:46:
eb:08:de:00:ac:b1:c6:f4:9b:49:17:a8:28:e9:fb:06:3f:41:
7f:cc:6c:43:d4:d4:46:90:e2:8b:d1:79:b8:d6:78:2e:90:5f:
f5:f1:ed:4e:59:23:88:16:c7:eb:f5:4f:3e:65:16:18:25:de:
25:ae:98:53:ac:8d:4b:f9:46:04:d9:41:30:1d:9a:46:c8:f9:
16:9d:01:10:e8:d4:29:ea:27:49:fc:08:a9:81:01:3b:c2:47:
10:00:bd:72:d8:fb:1c:96:2d:b3:21:39:d0:58:16:55:16:72:
b6:24:97:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:37:34 2026 by rpki-client