Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
File: bX7uNVd5Y04CoUs5IgNn87NOW5U.mft (raw, json)
Hash identifier: uEIPstDETRIZdp6Sy2kcQH6exq45KVGbJjpfvbirDxs=
Subject key identifier: 0F:17:C4:09:97:26:C1:D1:A9:0D:18:99:60:07:A1:7C:A0:5E:01:6D
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0CA46EC60FCA999E27BA4627984D0A8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
Manifest number: 17
Signing time: Tue 22 Sep 2026 18:00:40 +0000
Manifest this update: Tue 22 Sep 2026 18:00:40 +0000
Manifest next update: Wed 23 Sep 2026 18:00:40 +0000
Files and hashes: 1: 71yhY-WxVQqalC9K9DhFD7UMOVE.roa (hash: kLitY0U2epUMjXBjAnc5HrpMdJDHeOxrQOTxtTGu2Ns=)
2: DQ5ge_AVqMtAPY9U7I0NG3R42qg.roa (hash: jsnJNj/v/02NtfCQyh36AKD7ORjisZ7Gdmv2I1MdQ3A=)
3: OMdzvFDT-17HXZynyaIYHkJPOo8.roa (hash: PUTHdbxTs/622nYbcFAR73BbcBsVc3bYVmDcq7Edzqc=)
4: bX7uNVd5Y04CoUs5IgNn87NOW5U.crl (hash: wYVjdYEQHkH7p+zWCSXsRonCKevyQq9QBqDH8EjxKeg=)
5: fXi5Wrcm2fcLAwlzB8rd9u1HB1A.roa (hash: nKFY+hAxXbReuJhFsMlnah/EDnIkhStz7ge/1s2VIIo=)
6: ndtynDGC-EVnOzPcVJgQ2MEtyFI.roa (hash: KXuLChOisOD0LvopTyxLQ89jxlg2aMENjJxaqLu8ceU=)
7: vZc8TkKpZddQb7OyDFh5hZnqw3c.roa (hash: 40tvF9e9DozuhvZl5vmPNz60qbgyihV7XMK0+CQNkf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:ec:60:fc:a9:99:e2:7b:a4:62:79:84:d0:a8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 22 18:00:40 2026 GMT
Not After : Sep 23 18:00:40 2026 GMT
Subject: CN=0f17c4099726c1d1a90d18996007a17ca05e016d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:ff:bd:df:fc:6b:f0:c3:61:1a:60:50:7d:
1b:ee:e2:83:a5:68:f7:78:e4:25:d7:c1:ff:39:67:
5a:18:a5:92:c6:1d:9e:a9:bc:e8:0d:2a:8b:c7:59:
d3:c1:db:d0:6c:ab:26:f5:2c:c3:b9:7e:9e:da:f5:
29:bb:3d:a0:ad:57:48:b5:2a:51:fe:88:0e:35:be:
25:4d:3f:de:f6:58:1d:7b:6d:0d:0d:07:c6:24:e0:
19:f4:5f:b8:e6:b4:85:4c:8e:48:39:16:ec:35:51:
0c:7a:a1:eb:d3:b9:5c:96:ff:29:43:2a:cb:7f:79:
e3:4c:fd:fd:58:eb:b2:50:9f:c8:53:d1:ba:a8:78:
4c:2f:0c:b6:d7:86:0b:a6:9d:78:41:2e:ae:ca:bd:
3a:a6:b2:5a:c3:71:50:ce:c4:8c:4a:cc:93:53:aa:
12:2b:e9:e0:36:e6:c4:11:99:b2:19:bc:0a:d3:eb:
ca:a0:40:86:e7:2a:b2:dd:18:de:d9:f9:da:2c:65:
cf:e6:31:5e:67:cf:3c:2d:ca:9b:17:e6:43:af:42:
4b:59:74:26:bc:65:1f:85:77:43:fd:6e:6c:db:2c:
1b:5d:1c:48:56:c7:3b:b9:12:d2:87:f0:ee:9b:d4:
5c:d4:e8:94:ca:d5:cf:e3:8e:c7:46:f4:7d:69:3e:
7f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:17:C4:09:97:26:C1:D1:A9:0D:18:99:60:07:A1:7C:A0:5E:01:6D
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:21:21:b1:6d:43:b7:0b:87:b8:4d:d5:6d:a8:09:16:6b:14:
80:e2:fe:98:ea:9f:23:06:68:20:60:77:eb:e0:6c:26:1e:aa:
a6:4a:71:33:4f:77:e6:fe:00:17:55:60:cd:83:ef:df:54:84:
73:e8:c5:8a:0a:10:b2:12:44:18:a6:01:73:b2:f5:2c:6d:41:
86:a3:91:40:fc:bb:4d:9c:49:b0:80:19:d6:9b:aa:7e:a4:89:
98:36:02:8e:93:9e:61:c2:4f:93:47:a5:69:6e:31:21:f5:5b:
cd:47:4f:80:1c:29:8e:fa:da:7e:ec:b3:32:21:25:60:1e:8c:
15:7d:7e:69:6a:d8:46:4d:1a:93:5d:b5:4f:0a:c6:46:1d:5b:
5b:a9:3e:77:39:4a:f3:c8:62:e3:bf:66:d0:fa:11:de:37:7e:
21:09:66:46:92:ed:78:54:01:9e:3c:69:94:0a:74:65:ed:e4:
0b:6c:7e:48:3a:6a:74:bb:f5:92:8c:10:b7:3f:a6:92:e7:87:
92:f2:16:86:bf:30:1b:a2:07:78:40:b1:6f:3e:8c:ff:09:59:
db:36:a6:f1:84:95:4a:9f:56:23:29:ba:5c:9b:a2:41:5e:9f:
55:4d:50:7b:6a:1d:1e:d1:aa:03:ef:12:9b:22:1b:0d:ef:cd:
06:a1:93:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:10 2026 by rpki-client