Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: gobw5kpYqlrlbMmmzekND3XnWi+xVFeUjpYIteEMcAs=
Subject key identifier: 90:C3:1B:A1:FB:DB:F8:FD:D1:39:1A:69:AF:02:60:F3:F7:AA:56:82
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 01A0D682D3A0475205C15A6351268D733FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 1A7E
Signing time: Fri 25 Sep 2026 03:01:33 +0000
Manifest this update: Fri 25 Sep 2026 03:01:33 +0000
Manifest next update: Sat 26 Sep 2026 03:01:33 +0000
Files and hashes: 1: 1-XAPtzpEBbR-dL3HDvpMhi_QEZc.roa (hash: Y3Cc5NFdOsrYFpq1aDkqCQTbdqgeCbiviULrvKO6HjA=)
2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: y9/z7gCjQ7trh/5s0G5NB5k5RWG4X/G6QbgR4e5mObs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:d3:a0:47:52:05:c1:5a:63:51:26:8d:73:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: Sep 25 03:01:33 2026 GMT
Not After : Sep 26 03:01:33 2026 GMT
Subject: CN=90c31ba1fbdbf8fdd1391a69af0260f3f7aa5682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d5:55:24:8b:64:8d:ce:fa:9d:7b:93:9c:67:
a0:aa:4a:40:6b:1e:24:0e:60:a3:98:9c:15:dc:3c:
a7:07:3f:47:49:9d:ae:c5:48:4d:72:3a:d4:2c:0b:
44:ac:0a:89:23:e6:d2:23:d5:86:9e:9f:e3:92:ff:
04:5d:88:a1:70:bd:80:03:07:21:3b:77:53:fa:98:
87:b4:4e:2c:45:0d:1d:4f:0c:75:33:83:49:c3:80:
22:01:18:15:63:a8:77:be:52:15:87:c5:98:5a:ac:
38:46:5a:d3:36:fa:b1:15:c9:fc:13:a6:05:81:4a:
f9:fa:7c:53:65:b4:16:52:f4:ab:e4:98:13:82:0c:
36:54:46:49:35:59:e0:56:0b:cf:e6:35:a0:ec:83:
63:8d:f3:26:b7:bd:f2:88:fb:3c:d6:5a:ab:3b:88:
27:47:0a:34:0a:7d:44:b3:23:1c:24:92:b4:d9:08:
4a:94:87:1b:9e:ad:2b:26:a0:6b:c4:59:f6:ec:4c:
05:ab:67:bf:0e:57:cf:b3:15:e2:d9:a6:7d:9e:01:
1b:4e:de:5f:74:8e:48:f2:75:c9:ae:f2:14:ef:65:
7f:ce:19:98:be:b3:43:f9:53:af:a8:7b:04:37:56:
73:ad:a2:3e:6b:35:82:e7:42:d7:05:79:28:c4:1c:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:1B:A1:FB:DB:F8:FD:D1:39:1A:69:AF:02:60:F3:F7:AA:56:82
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b5:3b:ca:1c:b6:12:ba:a8:c9:c4:2e:ad:d1:dc:e5:ff:52:
86:df:b4:5a:ed:ee:e9:eb:3c:59:de:38:b2:c9:80:c4:cf:ba:
8b:2b:f5:e2:00:5b:3e:de:a1:58:d0:9a:87:43:0d:6a:1b:22:
19:13:99:37:4b:4c:14:82:6e:a3:9d:15:d5:a1:c8:70:e6:d4:
d1:80:de:f9:40:45:b3:c6:f2:20:d2:44:32:8f:42:31:fd:3e:
d5:ec:02:c1:12:61:08:f0:97:14:a3:fd:01:18:48:07:c9:eb:
6c:b3:09:a2:30:73:b6:b6:a1:f0:76:ee:bf:a3:a9:80:63:57:
d0:75:4b:f5:41:17:47:7d:2d:bf:6a:84:5f:aa:de:98:8a:7f:
8c:88:2c:d8:c4:71:76:2a:7e:f4:dd:89:de:27:4f:41:d2:a4:
f8:b4:84:87:66:0e:9b:33:39:9a:60:cf:89:53:6a:b2:9d:d2:
c9:4f:6f:42:09:e9:a9:27:4b:c5:36:de:32:75:92:b1:f1:0a:
ec:ed:f9:4c:0e:21:2b:07:a4:2c:51:71:e7:f4:10:be:41:e1:
74:bc:ff:12:90:16:8b:f2:64:d4:0b:6e:22:9d:3c:b7:e0:0a:
96:d8:cd:e4:f2:8c:0c:ab:54:3c:3d:0d:d8:0a:e6:59:b2:05:
5b:a8:97:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:24:43 2026 by rpki-client