Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
File: bckzC9OJcGPbv9IOXru-UcDV0VM.mft (raw, json)
Hash identifier: Ph5lkdTNpIMCTWfLFDpq195yRAExgpgul8PXbQQGzIg=
Subject key identifier: FA:A1:72:59:8D:CA:02:D3:62:46:A6:24:DE:CF:DD:B2:69:29:EB:97
Authority key identifier: 6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
Certificate issuer: /CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Certificate serial: 01A1DD5E22FDA64DBF4F0A55B2DBD9310C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
Manifest number: 01AA
Signing time: Sun 15 Nov 2026 04:01:36 +0000
Manifest this update: Sun 15 Nov 2026 04:01:36 +0000
Manifest next update: Mon 16 Nov 2026 04:01:36 +0000
Files and hashes: 1: 1-436xPDlViLRWbEmsj0lTmJdxXQ.roa (hash: T/iHcmpE9+88yNSlz/OStqxVHcyAieKhQgF8LC1QJDk=)
2: bckzC9OJcGPbv9IOXru-UcDV0VM.crl (hash: fn6LaatFMI02+8xbU7xnndhyEnXkTWf8tAJQftq5GzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:22:fd:a6:4d:bf:4f:0a:55:b2:db:d9:31:0c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Validity
Not Before: Nov 15 04:01:36 2026 GMT
Not After : Nov 16 04:01:36 2026 GMT
Subject: CN=faa172598dca02d36246a624decfddb26929eb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:38:a1:b3:e0:f8:62:17:32:2b:95:b8:79:
43:0c:7a:64:2c:99:2e:2b:4e:a8:1c:5a:e1:89:58:
e9:82:f9:48:0c:11:dd:13:80:19:f7:68:73:7d:f5:
87:aa:de:6e:f1:9d:cc:1f:b4:5e:4b:72:3a:8e:81:
47:7d:4c:42:58:5b:ee:99:7a:71:19:49:fb:a0:97:
07:d1:b9:4b:57:21:2b:12:4c:70:66:e3:33:c4:42:
2c:77:08:06:c7:37:b7:9a:18:21:50:fa:ee:5c:d5:
38:1e:ec:a3:6f:ab:26:69:a0:a6:a5:35:11:d0:24:
ec:b1:9a:8c:67:b1:9f:2c:2b:06:71:e6:5e:10:97:
24:1f:ae:28:a7:24:26:8d:e9:41:7f:ea:9d:2f:67:
d1:36:5b:f7:88:84:d8:bb:bf:a8:26:84:a1:7f:49:
d2:e4:5d:12:69:30:4a:9b:33:d6:3a:f1:32:50:56:
d7:7c:d9:01:cc:93:c8:02:dd:6f:5b:fe:2d:09:ed:
9c:a8:f4:be:ec:9f:4f:be:2f:51:6b:b0:c7:64:4e:
ae:9f:68:c1:d6:01:72:b4:4d:08:1a:ac:a0:5b:f9:
73:db:b7:f4:ba:b8:04:e6:42:6d:25:a4:a7:e4:ec:
3a:58:cc:26:7e:81:80:b8:9c:25:29:26:fa:38:e1:
68:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:72:59:8D:CA:02:D3:62:46:A6:24:DE:CF:DD:B2:69:29:EB:97
X509v3 Authority Key Identifier:
keyid:6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:08:39:11:21:4e:a5:64:e8:4e:5d:ba:65:bc:27:9a:28:70:
70:33:0a:6c:9c:df:22:6a:5d:71:bc:2f:93:f7:34:9f:c1:0b:
f1:12:56:b7:72:68:8e:3c:27:0e:ec:d2:b4:9d:47:c7:1e:ca:
66:9d:fd:4d:bd:9f:3a:3a:ac:d5:5a:79:b4:4c:35:dd:11:43:
c2:d0:70:44:6a:5c:47:f3:98:f9:90:20:58:22:37:eb:0b:a2:
8f:3a:2e:ff:c9:88:f3:fd:4c:39:8f:fb:79:8b:d2:19:76:ef:
d9:50:4f:fb:d6:68:a2:43:6d:42:ba:d9:49:8a:7b:98:61:27:
af:b0:28:22:14:94:23:36:14:ac:6b:ef:f0:46:42:01:6e:b1:
3e:f4:81:ad:29:2d:7c:60:a8:b0:c7:72:d0:20:f6:ad:d4:af:
25:33:1e:36:1b:3f:66:d7:b4:2a:23:aa:96:47:48:32:c6:cc:
dc:ff:34:dc:c6:39:66:7d:b3:a5:2f:e1:19:ca:31:15:89:82:
68:98:91:fe:2b:f5:61:c9:47:f5:17:ba:85:b8:70:f7:8b:44:
53:b9:33:13:2a:f6:ea:2e:df:c9:8d:85:bd:68:19:24:0c:3a:
00:9f:bd:9d:d7:79:06:9d:1b:0d:51:4f:e3:5a:68:6d:77:ab:
a8:66:5b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:51:05 2026 by rpki-client