Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File: bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier: mbS3E53wHMkfEacdNvds/4iDUwrmz5tYmb1DdN2DQ8E=
Subject key identifier: 10:CE:4B:63:AE:44:A4:EA:37:BA:AC:58:B6:BE:71:04:8B:D4:C9:93
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer: /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial: 01A1408356456AC239DB9F2DEEB19EE9491F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number: 0C54
Signing time: Thu 15 Oct 2026 17:01:51 +0000
Manifest this update: Thu 15 Oct 2026 17:01:51 +0000
Manifest next update: Fri 16 Oct 2026 17:01:51 +0000
Files and hashes: 1: 5ID5z559_ezDnZySPYG9BxB-s7o.roa (hash: ni+8ewLYFW0Txvc6bnLeborivZa41Cp0rcVNXQIugfI=)
2: 6qtkp2qDEVEEIbbFxY_2i2rKW-0.roa (hash: 2a2iY/VwDxwMHTiCEWGU641Pb5rVRla6ASIylRtAZzE=)
3: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: 2Ey57N8jUqokXyb8O4TTPSxF5UxlFncHizpX2IRXDAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:56:45:6a:c2:39:db:9f:2d:ee:b1:9e:e9:49:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Validity
Not Before: Oct 15 17:01:51 2026 GMT
Not After : Oct 16 17:01:51 2026 GMT
Subject: CN=10ce4b63ae44a4ea37baac58b6be71048bd4c993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:ee:ca:9f:5e:52:97:e2:78:a9:06:99:35:
19:e3:2f:0f:34:bb:91:23:81:a8:9b:16:34:f4:12:
cd:c6:99:e1:0c:57:19:f4:85:7d:80:c1:5d:a4:95:
7d:8e:de:5d:1d:76:d2:cb:56:2e:38:aa:b7:c5:f3:
1a:5f:47:cf:af:00:db:47:6b:bd:a9:bd:13:4a:8b:
54:85:8b:72:e0:1e:5a:78:ae:90:6e:b2:15:89:f5:
66:67:34:51:2e:4e:4f:2f:b2:6d:1e:41:5c:d8:65:
af:90:58:06:0a:44:8b:6f:43:f7:f5:97:6c:3b:84:
f0:86:3c:e9:07:2a:bc:90:65:f3:04:be:0e:58:0c:
35:eb:5f:f2:e6:35:c0:09:8e:c5:b4:98:a9:d7:72:
32:9b:2a:64:a0:04:bb:74:47:e8:e7:d0:81:9b:ac:
6b:ea:95:95:c5:2e:11:6b:a1:a1:1e:dd:7b:5b:9a:
e7:82:4b:d5:5f:2a:da:2c:9a:de:c1:30:89:12:16:
ca:96:d3:94:73:69:c4:91:64:b2:29:9c:33:0b:26:
7d:03:27:69:bf:f4:0f:4a:ce:75:98:01:7b:bc:45:
22:8c:d7:2e:00:89:bc:87:ac:d2:4d:e3:37:02:5c:
9d:35:61:41:dd:0b:d3:e3:e8:e2:6b:37:a0:58:92:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:4B:63:AE:44:A4:EA:37:BA:AC:58:B6:BE:71:04:8B:D4:C9:93
X509v3 Authority Key Identifier:
keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:a2:29:31:ee:7a:08:97:1b:fe:19:00:64:b8:c4:91:c6:
12:87:ff:c9:26:67:2a:12:95:e4:49:50:6c:c5:43:86:16:58:
e8:66:65:0c:2e:5d:df:f0:f8:3e:0e:44:5e:62:ec:40:36:ba:
c5:f3:3b:5e:60:0d:cf:ce:c4:85:dd:08:16:2c:d0:b8:01:95:
34:bd:17:4c:0d:6f:e0:ec:44:ce:93:20:69:6a:a2:e0:74:40:
1c:42:f0:7d:c7:14:52:aa:2f:2d:64:fb:bd:66:30:17:e3:bf:
84:3e:1d:d5:d0:37:86:36:12:a3:9d:c0:41:36:14:f2:7d:4b:
f7:81:e8:3f:03:2f:37:9f:a1:01:5c:5a:4c:1a:ee:d0:5e:4d:
0c:95:8c:af:1f:d0:44:3c:c7:3d:a8:e3:9d:b0:47:4d:45:cf:
b0:6a:fe:09:25:9f:07:7c:60:7b:da:e6:42:86:39:6c:af:6f:
05:73:58:8a:58:e5:90:a7:75:50:b6:86:8e:dc:fe:ca:13:f2:
40:00:ea:14:45:21:14:0a:50:00:1a:eb:23:17:24:ef:e7:f5:
32:4b:7d:8c:77:ae:04:f5:35:25:f7:09:7a:1d:b4:62:83:c7:
1b:76:9c:e9:fe:ba:ab:a8:80:0e:74:a8:7c:3d:64:bb:46:6d:
d3:25:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:20:24 2026 by rpki-client