Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: umBYSEJuFGfmDPeqGRmMG5jcmiA7O+lENABJ39QbxW8=
Subject key identifier: 82:3B:1B:BE:F5:EC:38:8E:BE:59:2F:58:73:A1:78:0F:73:D9:2A:70
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01A17C605C0028BBD5BB2B20848CE6E06DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0C33
Signing time: Tue 27 Oct 2026 08:00:51 +0000
Manifest this update: Tue 27 Oct 2026 08:00:51 +0000
Manifest next update: Wed 28 Oct 2026 08:00:51 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: XHmk7+OHDBuiPo88XhIeWgT/6HRyStawhyQeyv9Nw14=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:5c:00:28:bb:d5:bb:2b:20:84:8c:e6:e0:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Oct 27 08:00:51 2026 GMT
Not After : Oct 28 08:00:51 2026 GMT
Subject: CN=823b1bbef5ec388ebe592f5873a1780f73d92a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:19:85:00:3c:c0:fc:ba:0c:b9:d1:6b:5f:
ea:fc:77:74:f2:bd:14:e5:68:3f:f9:a9:ac:35:a2:
11:cd:cc:83:09:20:2e:a5:4d:11:a7:8a:a7:cb:f3:
7b:d8:da:6e:56:ab:96:ad:bb:bc:02:33:24:49:2d:
a1:6c:90:55:4a:c9:5e:42:fb:ac:d8:f2:d2:56:01:
8f:3a:a3:1a:d7:c3:ff:c9:af:1f:6b:e3:6d:ec:d7:
84:2c:c6:c5:d6:36:7a:cb:5a:3f:ac:d7:e5:03:7d:
c2:8c:27:8c:d6:de:a6:ea:a6:04:0f:c7:0d:b4:0a:
05:93:b7:a3:2a:89:2f:26:fd:bc:2f:c5:c4:64:09:
a6:bd:6f:29:4f:61:f4:55:ea:22:34:fc:0b:87:2b:
e3:37:34:6f:de:f2:4e:8c:bd:ad:55:cb:23:f5:a0:
b8:b8:8f:fc:04:89:3d:4e:7c:00:64:43:5c:c4:8a:
18:e4:ed:b3:04:a0:6e:40:b5:f2:25:18:ca:36:6c:
68:48:be:6d:55:fd:e1:c2:99:45:e2:13:bc:70:69:
c9:fc:b0:05:1c:62:8d:62:14:81:d2:7c:40:20:c6:
7f:fa:82:b0:39:3b:17:a2:c1:77:5c:60:b1:c9:95:
96:a6:9f:6b:85:0f:d6:ef:cb:12:8c:7b:f9:f1:af:
1b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3B:1B:BE:F5:EC:38:8E:BE:59:2F:58:73:A1:78:0F:73:D9:2A:70
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:4c:81:52:0f:3b:2d:b2:0c:ca:dc:9c:0d:4c:1a:ed:8d:
2f:fc:fc:b9:b8:31:64:92:72:16:7b:b2:77:f4:8b:2a:bb:53:
3f:ea:b2:ec:d9:f8:3e:8f:ec:df:a4:4e:c0:fb:01:ce:a3:12:
19:dc:b7:81:f1:0b:24:18:56:2f:a0:59:df:d3:22:a0:e8:34:
7a:b9:66:7f:66:08:e6:b9:d0:5e:2b:d2:8a:5f:6d:b0:66:db:
17:d6:d1:b2:48:76:15:9f:4b:ed:01:ea:4f:8f:90:23:be:01:
f7:8c:3e:66:ec:0d:14:24:55:82:9c:bc:67:0f:8d:de:a1:74:
1a:b6:4b:e7:36:d5:40:52:fa:c2:3e:f7:04:f2:9c:bb:31:ef:
ef:2d:f7:60:24:3e:ea:3d:0d:21:aa:11:ee:26:3a:27:d4:1a:
4e:fb:d7:64:80:2a:a9:01:9f:71:fa:0e:65:75:a9:31:0d:50:
93:ac:1b:b9:38:48:17:59:87:3e:ff:39:b1:62:e8:a1:fe:ca:
09:f5:50:83:ac:ad:05:49:c2:9f:a0:74:6c:d1:74:87:fb:b5:
3a:cb:eb:bf:69:24:68:74:f1:a2:5e:3b:ad:69:b6:37:d5:ca:
4a:34:7c:76:fe:c0:d8:4b:cc:6e:5a:54:f5:0e:3e:53:7c:c4:
55:ff:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:15:08 2026 by rpki-client