Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: hbwA4u8IYRtm5TtNfkP37V0v3uEsnJ4xvKzmFSiyzvo=
Subject key identifier: E7:97:D3:5D:A9:33:D9:B9:7A:80:C0:3A:DD:94:E6:6F:56:49:17:31
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 01A08D574981ECE388154B55D6A3C4ECF261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0B30
Signing time: Thu 10 Sep 2026 22:01:42 +0000
Manifest this update: Thu 10 Sep 2026 22:01:42 +0000
Manifest next update: Fri 11 Sep 2026 22:01:42 +0000
Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: 9Pi+Gq9W6j5kgkqsQY6f5oAiGumMY5xGVsfGsI7jcLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:57:49:81:ec:e3:88:15:4b:55:d6:a3:c4:ec:f2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Sep 10 22:01:42 2026 GMT
Not After : Sep 11 22:01:42 2026 GMT
Subject: CN=e797d35da933d9b97a80c03add94e66f56491731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e6:29:5c:9d:60:80:3b:6e:ad:c8:72:56:1b:
01:ab:7c:5d:0b:f8:09:9d:2b:80:0f:b2:cc:a9:93:
a8:1b:05:f9:fd:19:c8:f1:63:87:96:cb:eb:51:cb:
1a:8f:41:59:1c:00:8d:80:13:68:4a:2e:5c:67:39:
30:3f:df:d3:b7:93:c5:88:ea:a3:f1:f5:05:48:5b:
d6:0c:6f:3e:f8:f3:87:0c:11:7c:f1:fd:86:7a:dd:
28:12:c2:a1:c5:01:83:87:fc:97:99:74:28:78:4e:
de:f1:b6:cb:8d:1b:05:08:dc:81:f1:24:4a:15:4e:
d4:01:8b:6e:fe:0d:ca:59:0e:27:8d:5c:9d:5a:b0:
2d:8f:69:47:7c:14:64:5a:01:d4:d1:22:3d:19:bf:
00:e2:b9:c1:18:fa:95:22:72:6c:87:e3:d1:c4:5a:
60:85:ca:be:f3:94:34:9a:d5:51:84:a1:47:4d:16:
49:42:99:ef:32:52:fb:94:bf:f1:f3:37:03:d6:bd:
36:3f:28:c6:2b:ac:58:7c:07:42:bc:eb:85:00:8a:
17:ce:b7:fa:6f:7a:cc:cc:16:76:b2:2e:e8:09:85:
3d:e8:8f:55:fa:13:3f:aa:f4:7b:e0:2d:33:07:79:
26:32:09:a1:13:ed:79:9c:a4:10:19:21:1f:bd:71:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:97:D3:5D:A9:33:D9:B9:7A:80:C0:3A:DD:94:E6:6F:56:49:17:31
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5d:7b:bf:9f:54:f2:fd:c8:34:c3:18:51:45:5f:4b:68:10:
b9:07:06:fb:0c:46:69:d7:a0:ba:9f:7d:ec:58:5b:7b:ea:60:
aa:e5:0b:fc:f2:ef:88:d9:02:15:65:49:fe:ed:15:16:7d:b4:
10:54:76:25:91:dc:20:d5:aa:88:dc:d5:58:1a:94:d3:62:7b:
76:e0:dc:48:c4:2d:28:cc:6b:5c:28:68:4c:1d:a9:ae:09:88:
d8:6a:bf:cf:5f:bc:1c:97:4f:9b:04:92:53:a1:ed:6b:cc:a4:
68:a7:42:e2:0b:43:6f:8c:03:3d:c9:69:eb:91:bc:0c:c6:5f:
04:8d:02:43:31:13:c3:16:33:67:7a:1a:9f:ea:fd:a7:7a:dd:
e4:d3:8a:20:0c:a9:a2:59:96:ae:b7:30:0f:6f:41:e5:94:fa:
3a:57:3c:f2:19:a4:ef:2b:a1:ca:aa:e2:96:c6:70:9d:4c:f7:
20:ea:00:3a:0a:93:81:5a:0a:37:81:2e:3d:4c:2c:c1:19:11:
02:3c:14:97:78:00:8f:53:80:e1:b4:f9:a3:ca:71:09:e3:48:
10:67:10:50:c3:4b:87:40:5f:5e:44:58:8a:59:b0:76:d5:85:
69:db:13:26:b6:2c:31:9f:b1:e1:08:51:84:05:8c:5e:62:37:
1c:6a:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:33:10 2026 by rpki-client