Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: 7HLk/YgtcnPaCZq9L0l+Xvld6alWpTBWxvkzmNGznpg=
Subject key identifier: A8:F3:3A:FC:38:9D:DF:8D:CB:8F:F8:E9:A0:2A:1A:B3:53:85:0D:BA
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 01A1317D97FEB580B7B2E2DC4D81A6AF97A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 19:01:16 +0000
Manifest this update: Mon 12 Oct 2026 19:01:16 +0000
Manifest next update: Tue 13 Oct 2026 19:01:16 +0000
Files and hashes: 1: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: TASQKI4a0t0ombQnRPaPPN7TXIYz9kRsdUtq9rhGcjo=)
2: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (hash: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:97:fe:b5:80:b7:b2:e2:dc:4d:81:a6:af:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Oct 12 19:01:16 2026 GMT
Not After : Oct 13 19:01:16 2026 GMT
Subject: CN=a8f33afc389ddf8dcb8ff8e9a02a1ab353850dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:3b:26:3e:28:f1:7d:9c:bb:e8:44:b8:26:
38:18:12:bc:8a:a7:2c:92:d0:4b:0e:a8:59:be:d1:
7f:6d:28:a6:c5:db:26:78:c8:aa:09:22:dc:39:21:
55:95:79:61:5f:3d:a7:91:a3:0a:47:56:d7:22:02:
f4:f2:31:2b:2f:df:a3:dd:82:1b:e4:43:e8:ff:98:
cc:22:6c:59:87:bd:5e:9b:81:c3:13:da:00:c6:bd:
b9:a3:fb:89:44:ca:9a:3f:8d:03:e9:13:6b:5e:52:
8c:9e:44:f9:d4:68:ed:44:d3:96:52:4f:c4:4d:6b:
12:5b:d2:64:f0:7b:d1:58:5b:b0:e2:83:3d:c7:f9:
b8:92:86:31:ef:bf:95:b2:aa:65:7a:06:3f:9d:89:
9e:a5:3f:1d:07:d6:dc:fc:08:87:44:c3:2f:82:86:
5d:e3:36:fe:6c:e1:81:8d:94:69:42:d1:be:7c:7f:
c2:e4:30:c5:e9:26:5b:ac:ce:6c:cb:90:18:b1:11:
e4:95:88:52:bb:e7:da:c6:6c:25:f1:bf:a8:59:e4:
7d:04:50:34:b5:d8:b4:8e:90:22:ed:ff:a1:78:3c:
0d:ee:40:6e:0d:dd:fe:cb:a0:18:e2:9f:39:70:69:
13:b1:3e:1f:bf:1b:68:e0:a9:35:66:3a:cc:22:e0:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F3:3A:FC:38:9D:DF:8D:CB:8F:F8:E9:A0:2A:1A:B3:53:85:0D:BA
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:19:31:4a:00:3a:ee:61:00:e3:d3:63:2c:2f:67:3e:9d:e9:
46:82:52:bb:b5:29:01:87:fd:19:07:ac:df:26:1c:ce:2d:16:
e2:a8:28:a3:3a:32:65:da:56:91:78:45:ca:11:4b:da:ab:fb:
8d:92:bb:fb:c0:cc:22:23:50:4c:6e:1b:82:42:fa:af:b9:e2:
fc:fd:18:37:68:af:bd:3e:0d:af:9a:59:ab:9c:09:2e:6d:0c:
bc:e7:72:06:e4:dd:f1:a5:3e:1f:09:06:62:f5:e1:37:94:24:
90:b2:c4:f1:8b:cd:60:b5:8c:67:fe:ef:36:a4:db:97:a1:22:
73:10:e4:d0:71:39:1b:66:29:5a:0c:df:99:d0:42:23:84:6d:
11:0e:fd:30:80:dd:e3:57:68:9b:dd:a7:73:16:b1:96:11:62:
da:53:a3:30:d7:22:da:49:eb:06:7a:3c:a3:8e:a1:38:03:cf:
88:ee:dc:08:9c:49:d8:a5:40:41:dc:6b:34:5c:94:5e:e8:8d:
5a:25:9e:63:4b:c5:7f:42:62:fc:46:1c:e1:e9:32:fa:82:6e:
37:de:ad:00:93:f4:6e:3e:1b:04:5f:73:69:c5:72:64:db:ba:
e6:bd:7e:73:8e:81:95:0e:5a:5e:9f:88:31:c8:f9:dc:7c:17:
0c:c1:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:23:31 2026 by rpki-client