Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: DnkceR7YHza4kSDvMYZHLmVaVob553uJzb90is5lJgY=
Subject key identifier: B5:56:D0:8F:11:F1:98:D1:6B:2C:49:17:B9:29:D0:65:97:0D:6F:6D
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019EB7A0EB705CA4D176A55D9B62B656C9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0AC4
Signing time: Thu 11 Jun 2026 17:00:36 +0000
Manifest this update: Thu 11 Jun 2026 17:00:36 +0000
Manifest next update: Fri 12 Jun 2026 17:00:36 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: uWORVhOxAuj7NyNGkXzjnysPCVgyhP3g45p2tAsoZU8=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:eb:70:5c:a4:d1:76:a5:5d:9b:62:b6:56:c9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jun 11 17:00:36 2026 GMT
Not After : Jun 12 17:00:36 2026 GMT
Subject: CN=b556d08f11f198d16b2c4917b929d065970d6f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:b5:81:4b:08:57:f6:cf:c4:11:51:48:28:
b1:c6:42:d3:78:62:e3:ff:7f:ac:5f:ef:74:df:d7:
61:b0:37:67:f2:84:d2:88:05:61:50:dd:f8:de:e5:
75:40:dc:78:50:58:3c:5b:a5:5f:05:3e:d2:08:ba:
66:24:58:78:8c:98:78:f2:bb:92:e9:61:0e:8d:29:
db:46:41:e0:52:04:12:38:01:01:c0:e9:4d:77:fb:
2f:97:49:4f:a1:dd:17:74:bf:ef:7b:54:ba:20:87:
1b:39:64:13:86:89:e7:13:59:5d:3f:be:bd:2a:1c:
31:8c:19:37:20:47:c5:78:9f:4e:eb:60:f6:74:42:
0b:01:f9:4e:d3:3e:07:65:f1:63:17:be:78:a8:20:
22:f0:8e:e2:3e:24:c5:8d:a3:49:d0:16:1e:61:ce:
96:fb:26:7c:cd:da:6e:15:0d:d0:9d:5b:1a:92:9e:
45:40:00:49:df:b0:0a:9f:86:7b:f2:93:e5:d5:8d:
f1:41:46:aa:e8:f8:b4:15:af:d3:67:d1:da:a2:cf:
cc:a1:74:0b:95:3c:49:6e:14:7e:b4:e2:5b:c3:ef:
e1:0a:df:8c:4a:5e:32:cd:4d:15:a1:e1:e6:de:02:
7d:45:58:34:83:b7:6a:06:dd:0b:e5:ab:7e:7d:ec:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:D0:8F:11:F1:98:D1:6B:2C:49:17:B9:29:D0:65:97:0D:6F:6D
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:11:95:79:10:27:7d:81:20:ab:e1:da:38:63:58:cb:11:f2:
0c:30:d5:24:70:d4:25:9e:0f:65:b8:e5:12:9a:46:54:3e:92:
f9:8e:30:ee:fc:d6:fe:c0:4f:52:12:c6:7b:c3:93:85:3b:63:
21:7a:45:27:59:18:14:35:4f:4a:b7:72:cf:82:b8:cc:52:36:
69:06:c8:33:a1:08:60:5d:74:9b:3f:dd:c5:23:5a:6f:6c:ea:
40:b1:a3:ef:18:b4:19:44:13:95:dd:d9:fa:d8:06:5d:51:8f:
f9:80:89:41:bc:d0:08:97:1c:ba:9e:33:df:44:e7:ed:fc:5e:
49:46:b4:20:a8:1d:bc:4a:84:1f:df:bd:6b:0c:38:08:15:a2:
31:4a:89:2a:68:ef:e2:85:1b:ef:9c:28:1e:88:b1:bc:d5:5e:
32:21:9d:62:a7:f8:11:ac:1d:6d:e8:bb:de:bb:5e:b1:e0:19:
86:bd:28:0e:5b:dc:bd:30:18:7e:fe:36:b0:20:d8:f8:46:8c:
0b:82:95:4a:75:77:67:06:bd:fa:82:cb:aa:9a:a4:5c:6a:b5:
0f:59:bb:ed:68:19:c5:0c:e2:7a:5f:b0:2a:de:51:fa:62:ef:
bc:ce:dd:3d:78:a7:5d:ad:2f:fe:a2:ae:2e:11:e4:38:5f:5d:
d3:14:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:29 2026 by rpki-client