Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
File: bb77vEdNQoNZo_f3X4FPVnmw8YI.mft (raw, json)
Hash identifier: vvZdm9yZ24RC/32/Kw8aGo70TY+zPpQHnsg3DrxlddA=
Subject key identifier: 8C:04:54:F7:92:8B:45:B9:C9:65:C5:D1:39:81:84:80:F0:F7:ED:20
Authority key identifier: 6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
Certificate issuer: /CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Certificate serial: 01A0CD47D6B85A59C4BD0D3F606B2CFFF7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
Manifest number: 85
Signing time: Wed 23 Sep 2026 08:00:32 +0000
Manifest this update: Wed 23 Sep 2026 08:00:32 +0000
Manifest next update: Thu 24 Sep 2026 08:00:32 +0000
Files and hashes: 1: bb77vEdNQoNZo_f3X4FPVnmw8YI.crl (hash: 34Ks3E6SAqdFpu4T3/iKf0AWop6I3ewLBmsuQ89R04Y=)
2: e3W8J6q3iuKac7T4Oo6mtuEW26c.roa (hash: kUqfw4ZECKTGTgvvWuokS9PN540GUZ5VpnMypMvP8sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:d6:b8:5a:59:c4:bd:0d:3f:60:6b:2c:ff:f7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Validity
Not Before: Sep 23 08:00:32 2026 GMT
Not After : Sep 24 08:00:32 2026 GMT
Subject: CN=8c0454f7928b45b9c965c5d139818480f0f7ed20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:37:17:14:53:0b:a0:4d:67:62:0c:6b:92:
7e:c3:55:38:ad:a3:26:81:29:0a:6c:d8:57:f0:d8:
64:6a:c2:86:1e:f5:28:e1:bb:8f:52:20:82:bc:63:
f0:7e:ad:73:41:68:4c:c7:12:39:20:12:bb:e8:ff:
96:05:f6:a7:2f:c0:a2:59:53:c8:92:78:5f:49:a5:
26:f6:89:d2:f6:3d:5c:c1:42:bd:c7:f5:b7:09:86:
04:4b:74:f8:9b:99:cb:ae:e8:89:d6:c1:43:dc:2f:
f1:98:bb:0f:94:cc:ab:50:d4:0d:9f:cf:f4:74:f5:
f8:61:ce:d6:ae:4f:dd:d9:2a:17:f9:88:7b:2f:55:
e6:2b:c9:25:f1:98:7b:43:8f:e6:ee:d0:f4:ef:e4:
34:44:2f:fd:85:20:31:c4:3d:5f:a4:2f:68:8a:36:
82:b8:53:79:e6:04:ce:af:70:29:1c:98:9c:ed:02:
9d:66:00:97:79:ad:83:2f:99:78:2e:4d:8a:41:3c:
ca:48:77:58:4c:5d:13:4d:cd:a1:29:7d:f1:20:97:
ab:85:e4:61:8a:6c:87:e9:30:78:72:26:7f:12:9b:
9b:31:c0:fd:fa:11:12:55:a5:e2:0b:c5:c3:07:f3:
80:4a:fc:12:fe:f2:59:8d:32:39:d6:6e:5a:6d:9b:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:04:54:F7:92:8B:45:B9:C9:65:C5:D1:39:81:84:80:F0:F7:ED:20
X509v3 Authority Key Identifier:
keyid:6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:c5:69:39:ac:9b:12:6f:3b:39:06:f8:ea:bf:b6:c6:b5:
d9:db:53:bc:5b:1e:a9:f3:e6:9b:53:1f:c9:6e:45:71:4f:0b:
72:e3:60:6c:27:84:be:c8:7c:5d:b5:a9:08:66:e7:86:c9:06:
cb:b1:60:ad:69:4a:d7:37:db:f0:9d:45:7b:1f:2f:5c:a1:f8:
a5:ee:30:07:8d:ce:5e:47:b6:f4:3c:a2:7d:f6:32:27:1e:56:
bb:59:f7:83:b8:74:ae:49:b2:cf:44:d9:b1:9a:a7:9b:be:e3:
8c:89:09:04:f9:a7:26:aa:0c:42:74:8b:06:ca:33:e8:18:93:
75:8d:a2:cc:33:2e:c8:7c:f4:df:49:ba:19:3c:8f:e0:3d:f4:
a2:44:22:36:6d:2b:f9:42:e1:63:f9:ea:af:76:1d:e2:a8:55:
c8:16:bc:79:9b:79:ba:64:0f:d2:55:fd:ba:0c:be:14:fa:d4:
60:95:c1:0a:8d:fa:54:b3:9b:11:a8:4b:29:3d:f0:33:53:c7:
98:e9:76:b7:d6:68:06:38:94:0a:8d:dc:ad:b2:17:ed:d9:cb:
74:b6:5b:99:3d:fd:9b:81:80:6b:f1:7b:dc:d8:db:4c:db:d5:
2c:85:eb:5f:c0:d0:10:d9:02:01:3d:4d:f5:d6:3f:e8:06:91:
f0:cc:ba:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:18 2026 by rpki-client