Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: aSdz07KAFvkcxHN/x1s17xeYIdznU8zdvnUVEKMvPus=
Subject key identifier: 49:2F:CF:F9:15:91:F8:09:C4:E7:F0:38:0E:C8:7F:39:AF:50:91:D0
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01A08AFACFE32A6EEFEA4F9C5B798C54409C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0BB6
Signing time: Thu 10 Sep 2026 11:01:28 +0000
Manifest this update: Thu 10 Sep 2026 11:01:28 +0000
Manifest next update: Fri 11 Sep 2026 11:01:28 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: cKexWKF5eOiTpzn5c9ApO9/Bg+x+9jSoQ6t6z0Z5gVM=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:cf:e3:2a:6e:ef:ea:4f:9c:5b:79:8c:54:40:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Sep 10 11:01:28 2026 GMT
Not After : Sep 11 11:01:28 2026 GMT
Subject: CN=492fcff91591f809c4e7f0380ec87f39af5091d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:3a:5c:96:07:c2:e8:20:45:9c:b1:e0:90:
3f:ec:4f:f6:58:fb:b0:04:17:ea:bd:38:b9:23:00:
5c:f7:93:02:ec:52:30:2d:a9:ca:4d:24:d9:c4:3f:
1e:92:bb:52:99:bb:0a:eb:48:99:99:48:73:0c:8e:
1a:a0:46:81:f9:45:68:d1:01:d4:31:81:93:84:d8:
b9:f6:19:ca:42:ff:12:4f:77:93:16:8d:bb:45:7e:
b7:00:a4:7f:df:00:7c:95:ae:2a:cb:53:84:1c:44:
cb:ec:9a:bd:ed:c2:49:17:fd:43:39:3a:7a:7b:7e:
c0:1d:e6:af:f2:94:1b:27:6f:0f:2b:23:57:ec:4b:
fc:e8:99:a2:ff:0f:40:7e:7a:88:03:6c:4f:0d:2b:
af:60:ba:c5:22:64:77:7d:4a:a4:c7:6a:09:97:55:
49:a9:8f:9e:05:dc:7a:5b:f4:68:13:8e:1c:1f:bf:
dd:42:b2:ee:4f:11:20:c8:67:7f:a8:5c:b8:89:66:
fb:d8:9b:63:47:28:4c:1b:49:30:8b:94:fb:5a:ad:
6c:29:c6:3c:7b:6f:79:d5:49:e1:fc:e3:fb:4e:52:
f9:ca:85:41:89:46:b8:39:45:bf:1d:41:1a:61:ff:
fe:3b:0a:73:69:6f:bb:bb:b1:03:a8:6b:46:a9:39:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2F:CF:F9:15:91:F8:09:C4:E7:F0:38:0E:C8:7F:39:AF:50:91:D0
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1f:96:ef:83:b5:08:26:43:40:ac:9b:64:ef:a0:c1:ad:c0:
05:c3:c1:22:56:4d:bf:ca:aa:ff:68:59:53:52:d4:45:ea:9c:
2d:40:f4:4c:e5:37:0e:8a:79:4b:25:2f:4b:df:06:eb:2d:2d:
f3:41:d3:e0:49:86:a2:ed:af:93:5d:7d:55:22:58:cd:7f:a5:
36:4c:f3:6e:9b:e8:83:d6:8b:15:44:8b:07:c4:b2:6d:9c:f7:
f7:8c:8f:f9:4c:d5:33:5d:45:3f:97:86:b8:a9:a3:8c:47:c1:
db:51:1a:6f:a5:c5:46:ea:42:9e:0b:ce:b4:2f:11:e7:5c:d0:
7a:d8:32:3a:e1:b8:84:4a:bb:70:82:40:26:5a:f7:c0:1f:7c:
20:9c:27:16:be:d1:53:3a:ad:45:73:2e:5c:78:e7:34:72:96:
cc:a0:9c:45:04:f3:bf:8a:3f:18:34:b7:b0:5a:2f:39:5f:9d:
50:bc:f4:0a:a9:b7:91:0c:1b:51:cf:8e:d7:9d:e8:9e:8c:c2:
15:88:6a:66:1d:02:9f:ab:d8:39:1d:4b:2b:09:d3:cf:8f:53:
31:df:a3:b4:cc:c3:fd:81:fd:f2:3a:2e:9d:71:66:0f:0c:8c:
65:8c:0a:cf:e6:41:ae:21:65:62:7e:f3:07:93:eb:ff:f1:67:
62:eb:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:17:39 2026 by rpki-client