Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
File: CmhbcVcgw2L0zL11CmEz0z6pzUg.mft (raw, json)
Hash identifier: Kgg3QUnsvM8MQU+jYiyNYj40FQBEnWnrqY0gxLJk85Y=
Subject key identifier: 68:CE:06:16:0F:BA:FD:AD:61:D1:49:4F:D7:1F:7B:15:DE:0A:9F:A0
Authority key identifier: 0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
Certificate issuer: /CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Certificate serial: 01A084C1A8DED15F0AE394F1A3383F5FB3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
Manifest number: BE
Signing time: Wed 09 Sep 2026 06:01:19 +0000
Manifest this update: Wed 09 Sep 2026 06:01:19 +0000
Manifest next update: Thu 10 Sep 2026 06:01:19 +0000
Files and hashes: 1: 0bWhQWuajdVxt380g1tHt_dfDzA.roa (hash: BNIIYhf4bu7N2Q9i17Tx4+jGFkmAZfsMMHPK83i6ScU=)
2: CmhbcVcgw2L0zL11CmEz0z6pzUg.crl (hash: 6FB8DAvgMHNQd3AqIKDpY1glqzN9tFcdyAZAfPdMKCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:c1:a8:de:d1:5f:0a:e3:94:f1:a3:38:3f:5f:b3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a685b715720c362f4ccbd750a6133d33ea9cd48
Validity
Not Before: Sep 9 06:01:19 2026 GMT
Not After : Sep 10 06:01:19 2026 GMT
Subject: CN=68ce06160fbafdad61d1494fd71f7b15de0a9fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:7e:67:e0:6e:4c:90:35:c6:00:db:f8:99:
54:1f:54:66:db:8a:bc:a4:6e:26:4d:69:66:30:8d:
df:59:7e:11:71:ea:77:8e:11:66:8c:a9:e7:80:eb:
1f:2d:4e:4e:d3:90:06:d1:0b:d1:64:c2:34:13:3f:
3f:f3:89:80:ec:bd:c5:5b:73:f7:e8:32:42:43:41:
8b:e8:04:09:c1:34:f9:63:55:a0:ee:ba:1c:22:ab:
42:de:63:38:57:c2:4a:0c:28:8c:78:38:e2:04:fe:
f5:b2:5d:39:1c:9a:49:ae:c3:44:56:e9:ee:63:c4:
55:e6:c8:2f:78:6a:3a:69:17:23:fb:36:9f:18:02:
0c:c8:ab:a0:22:75:67:d9:84:9d:1f:90:13:1a:1f:
04:72:19:87:47:da:5e:76:d0:cc:ac:9f:69:ca:d2:
ef:a9:eb:b8:90:d5:e5:a6:14:83:bd:5d:59:02:1c:
75:f1:d5:a3:b5:71:1f:84:ea:81:a6:e3:c6:be:a8:
85:84:29:b5:3e:b5:ec:5e:b1:ad:de:72:5c:bd:62:
1d:71:a0:b5:2e:fd:d1:c7:e6:f7:39:37:dd:1e:e3:
17:1b:7a:c0:39:0a:8e:34:31:c4:27:9b:c0:45:24:
c3:da:b9:80:67:8a:28:35:72:a0:d8:35:54:29:27:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CE:06:16:0F:BA:FD:AD:61:D1:49:4F:D7:1F:7B:15:DE:0A:9F:A0
X509v3 Authority Key Identifier:
keyid:0A:68:5B:71:57:20:C3:62:F4:CC:BD:75:0A:61:33:D3:3E:A9:CD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CmhbcVcgw2L0zL11CmEz0z6pzUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/CmhbcVcgw2L0zL11CmEz0z6pzUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c1:ca:49:d6:9f:d6:e8:e9:18:fc:48:e7:81:b1:48:18:0b:
9d:61:5a:8c:c6:e8:c5:f0:cb:c1:da:6d:b9:a3:80:10:7f:16:
0d:c1:64:34:f3:8c:d7:36:2e:e4:1e:d4:bd:ff:53:19:87:41:
4a:e2:96:b3:6e:a9:bf:27:b5:b9:c3:f5:47:61:c5:db:f7:57:
61:12:5d:0b:ec:3f:41:fd:c7:12:e7:af:a4:e2:af:86:3f:8e:
3a:9b:17:17:29:4e:ad:d3:50:78:c1:4e:bc:b3:17:8a:d4:8a:
38:f4:d9:6b:61:89:84:d6:48:ed:d4:0d:40:06:14:b1:8f:da:
50:8a:a2:a1:88:65:fe:e6:71:d5:79:88:71:f2:ac:a7:1c:44:
23:bb:da:58:8b:96:91:fb:67:49:79:ea:f6:5b:d3:d1:96:4a:
e5:64:ad:e4:12:8e:94:ee:1b:27:41:44:9d:f5:d0:87:58:85:
7c:5b:1a:ec:57:3d:c9:20:8d:a2:e5:15:b0:cf:8d:f0:89:cf:
d9:09:3d:0b:15:db:de:c4:61:fb:f0:c9:6a:fc:89:31:28:60:
5f:58:33:34:f4:dd:3f:c1:a1:64:70:fe:d0:64:8e:85:f4:1b:
02:9c:7f:f4:4a:b5:a1:e3:98:44:e0:1d:9c:0d:b1:b5:3b:f2:
cc:39:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:37:58 2026 by rpki-client