Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
File: bDjM5r4-JvXmJUacse03btd5v7A.mft (raw, json)
Hash identifier: hUENgaYqvRvShmEToul/qWFMOhvrY35dqCbUK6k2xhI=
Subject key identifier: AC:00:9A:D4:E2:97:B1:FC:89:3B:7B:B4:8C:7D:FF:BA:75:7F:5D:3B
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Certificate issuer: /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial: 01A117870ABA7E94FC8BBDF842745A1BF9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
Manifest number: 010A
Signing time: Wed 07 Oct 2026 18:01:28 +0000
Manifest this update: Wed 07 Oct 2026 18:01:28 +0000
Manifest next update: Thu 08 Oct 2026 18:01:28 +0000
Files and hashes: 1: OZq72zv4sg7RvskqcH-YM473vC0.roa (hash: ZaPK+bZUcZeqLBhmkFhNu+PtlkG5P1ecScSV/otpvoU=)
2: aqZj2vUKzXW4OJOiXFcYzOGlOBE.asa (hash: OBvOGfVO6gpSCVcXtODca/H8DDZWmcTW85b6yxSA+tY=)
3: bDjM5r4-JvXmJUacse03btd5v7A.crl (hash: 7r8aSeuiDqOOn6ZfmbJ5RmjP6CaPz/aPJlw24vl1nd8=)
4: isv1noVOs3IF7XKFRPIZvlT-zzs.roa (hash: Y7qPP/O0hbTSlwRSjlHZA/XaYa5Jq+RJtLqdMHL5xuY=)
5: vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa (hash: ktZFb+NWv0kq4A04+BX1/mDAvqdfa84ChDii4aiEH4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:87:0a:ba:7e:94:fc:8b:bd:f8:42:74:5a:1b:f9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Validity
Not Before: Oct 7 18:01:28 2026 GMT
Not After : Oct 8 18:01:28 2026 GMT
Subject: CN=ac009ad4e297b1fc893b7bb48c7dffba757f5d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:f2:92:23:63:04:45:4e:55:64:f5:8a:6f:
18:94:7c:48:04:eb:0e:de:c7:a2:c6:07:42:ed:2f:
50:05:b5:5d:17:70:0d:66:10:d5:f9:cd:3d:a7:e9:
cc:a4:38:75:5c:cb:ad:83:3b:47:99:49:5d:d9:72:
b4:71:02:c1:91:5b:c4:cd:6c:32:e9:80:49:99:b9:
0e:8f:b0:e5:67:59:be:17:3d:c5:d0:59:97:1a:53:
c0:48:a1:6f:7c:c0:27:fc:d2:1e:cf:b1:ac:6f:35:
23:20:56:16:f6:09:b7:66:92:9e:40:2d:97:ae:77:
1d:30:78:9b:fc:ba:1e:e4:23:d0:df:44:27:77:b5:
97:21:89:2a:2e:39:19:ed:22:43:ac:38:02:c5:72:
92:86:ab:66:35:4d:a0:fc:52:be:8b:fe:8a:40:a2:
51:75:6b:ab:9b:7d:a0:fc:10:86:ec:34:d0:47:1a:
5f:ba:4e:70:04:07:82:4e:0d:0d:09:76:d9:d0:a3:
76:a7:8a:b6:df:39:67:69:09:fb:34:3e:23:ca:37:
04:2f:2c:a0:93:6b:28:5a:8f:86:fc:4b:d1:ea:ea:
0c:07:36:60:0f:7f:33:df:83:a7:d4:ba:41:a9:af:
69:11:f9:89:74:bc:20:16:63:2e:73:21:6c:26:29:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:00:9A:D4:E2:97:B1:FC:89:3B:7B:B4:8C:7D:FF:BA:75:7F:5D:3B
X509v3 Authority Key Identifier:
keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fa:58:01:2e:dd:1e:b3:86:9f:d8:9a:e6:6d:5e:46:dd:f9:
bc:80:5f:cf:d2:a4:47:20:7a:12:1a:ce:df:d3:61:7f:de:82:
72:cf:9d:01:cd:78:a9:97:89:5f:a3:5d:02:26:d8:ef:a1:62:
37:1d:6d:48:82:34:61:4b:5f:d8:18:11:1c:13:d0:3c:19:4b:
74:7f:78:63:32:bd:bb:11:09:88:ae:65:02:f3:2a:a1:f5:16:
f0:e6:ee:b8:50:16:9f:11:92:7e:43:da:79:11:ae:7e:10:26:
52:3d:0e:45:bb:74:69:10:59:4c:25:6e:3e:a4:0f:c3:dc:31:
2c:91:78:44:ec:09:03:b6:b9:18:a5:cd:c3:84:91:ab:6f:18:
29:70:29:74:c4:db:31:17:d7:06:5e:bb:2c:53:0a:44:85:72:
35:78:19:d2:fd:59:06:a0:d8:7b:64:80:c1:06:3d:2b:28:11:
aa:1b:f2:59:25:a5:c8:c8:54:b8:fc:36:df:f3:30:f8:8f:02:
f1:0d:04:46:c2:67:6d:74:90:76:6f:62:78:ea:cf:5c:fc:11:
84:89:89:8c:01:12:40:b5:2a:81:79:18:6d:68:62:cb:48:a5:
ec:0b:e8:f5:a5:24:a2:a6:02:66:48:ff:40:d6:f1:47:2b:e6:
96:d0:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:10:55 2026 by rpki-client