Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
File: bCecf9LtlfgYXaFSKg9XxQPuxas.mft (raw, json)
Hash identifier: fSTV0Wa4ie9JebmwvoOFjrJcLeztEpzEWqTH9blTbS8=
Subject key identifier: 26:3A:01:19:04:36:D2:EB:51:6D:12:BB:29:7C:53:38:41:59:39:AB
Authority key identifier: 6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
Certificate issuer: /CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Certificate serial: 01A177A734DA74EF3DA15CD49E795191F9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 10:00:09 +0000
Manifest this update: Mon 26 Oct 2026 10:00:09 +0000
Manifest next update: Tue 27 Oct 2026 10:00:09 +0000
Files and hashes: 1: VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa (hash: PJAiuPsV0OJUExzoh82Xuin/NOUbTrHxFe1Pka5/k/Q=)
2: bCecf9LtlfgYXaFSKg9XxQPuxas.crl (hash: LsocmIrox7gpPoIJElPCRdpr4rQFCqloe6PKX35itao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:34:da:74:ef:3d:a1:5c:d4:9e:79:51:91:f9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Validity
Not Before: Oct 26 10:00:09 2026 GMT
Not After : Oct 27 10:00:09 2026 GMT
Subject: CN=263a01190436d2eb516d12bb297c5338415939ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:91:18:6f:5e:23:0c:b4:b5:e1:ef:12:39:
d5:52:45:a4:a8:86:ca:e1:f7:26:8a:2e:99:0c:dd:
8d:10:b6:5a:72:bb:bc:b5:a8:a9:21:9b:74:2a:4c:
7f:9f:5d:1a:95:53:70:b6:e8:46:1b:f5:27:73:67:
35:7a:b8:b7:be:ef:ba:b2:57:27:b2:5f:ba:32:59:
eb:48:1b:1f:dd:98:ce:bc:18:bd:1b:9d:71:b2:9a:
4d:31:b4:3f:ab:0e:ba:69:f5:14:c9:c2:15:fa:5e:
2a:8c:2f:92:87:c2:2a:2e:e9:50:ee:05:fb:1c:9f:
65:0e:f5:56:8c:d5:46:fc:a4:6b:36:97:99:f3:11:
f7:86:0c:31:3b:49:d6:fd:36:26:e5:4e:c2:20:a5:
61:7e:4f:2c:c3:92:26:ed:54:0b:1b:f3:11:90:f7:
18:01:a6:47:9b:43:63:7d:df:20:9b:ca:a0:71:0e:
c1:6d:4b:ce:84:6b:91:fb:0e:67:27:c3:7f:61:02:
98:b4:a0:33:9a:92:7e:99:14:cc:dc:45:d1:4b:dc:
05:fa:b3:b3:29:44:f1:4b:7f:b7:7e:e1:88:46:1b:
0b:2d:80:ef:c6:38:f8:8a:66:2d:84:5b:fc:b4:83:
0e:17:7b:f8:22:95:80:cb:cb:08:cd:db:d4:b7:f0:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:01:19:04:36:D2:EB:51:6D:12:BB:29:7C:53:38:41:59:39:AB
X509v3 Authority Key Identifier:
keyid:6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c0:26:41:28:cc:70:ba:f6:99:04:a6:ae:6f:33:a8:1f:f3:
56:8a:2a:f8:44:c8:fa:1b:db:3f:eb:ab:b6:0e:91:e1:84:51:
cd:65:4e:be:e6:92:d1:56:d1:97:61:57:80:bc:af:9b:00:e7:
72:17:b8:1f:94:4d:d5:96:ff:52:1d:d7:c2:83:58:05:5a:5f:
80:8c:79:42:6d:61:52:80:ba:b6:3d:ed:55:0c:65:91:1a:96:
0a:a3:d9:0b:a0:29:4a:14:57:02:82:cb:7f:01:dd:1b:fe:62:
80:b9:19:f3:72:a7:79:97:de:ed:80:8c:68:fa:34:af:8c:66:
81:b0:df:d7:90:07:36:f4:c2:46:76:29:ce:45:e2:c9:ac:3c:
a6:d4:40:db:ab:d3:3f:aa:b1:f8:f5:96:71:5d:58:cf:68:d1:
cf:ce:df:74:8e:8a:8e:62:70:4e:09:18:9b:27:ab:20:01:f6:
85:fc:40:78:16:2e:7e:66:b3:83:57:b0:51:89:02:64:b6:a6:
84:81:ab:cf:24:82:a6:b5:71:92:e1:29:20:05:dd:70:f6:a6:
61:f9:68:5b:1d:3f:90:df:c3:c1:72:f4:9a:ed:33:cc:7f:68:
e0:83:16:1c:97:6e:c1:34:6a:73:a3:58:5f:9e:5e:35:fa:e5:
9f:1f:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:31 2026 by rpki-client