Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: Jgmfwub94aGPSceO/Dw8zOr/LOTPRSplxLrOlrTth0k=
Subject key identifier: FA:AC:35:F5:9B:09:64:EA:E7:9E:11:D4:7C:FC:A9:4C:FD:89:D1:33
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 01A12D6986110B41E0F57164DD502AA13F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 17DF
Signing time: Mon 12 Oct 2026 00:00:52 +0000
Manifest this update: Mon 12 Oct 2026 00:00:52 +0000
Manifest next update: Tue 13 Oct 2026 00:00:52 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: wSx8Ae7XmwoeS06TpZcmc99Q8A6nvM/OjEgtGSr6vC0=)
2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:86:11:0b:41:e0:f5:71:64:dd:50:2a:a1:3f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Oct 12 00:00:52 2026 GMT
Not After : Oct 13 00:00:52 2026 GMT
Subject: CN=faac35f59b0964eae79e11d47cfca94cfd89d133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:39:bd:2b:33:d2:fb:87:5a:24:4c:ec:09:
f4:1b:23:16:95:e7:66:3b:6e:e0:ca:4e:61:b0:a4:
cb:a1:9f:24:e6:fa:16:f1:6e:0e:70:f3:93:a1:31:
58:f4:84:6c:04:73:e2:fa:47:b3:1e:e4:36:8b:25:
c0:90:00:b5:25:9a:df:f0:92:6d:ea:dc:86:e7:92:
03:f1:f8:ed:38:ee:40:53:e9:68:3a:ab:2f:23:bf:
94:f5:41:70:d9:be:ec:f6:11:ca:05:e7:12:9a:15:
3e:a1:5d:72:f0:65:5d:0f:12:95:ab:4e:d6:48:55:
72:8e:02:8e:9f:66:1a:ca:fa:6a:12:f4:9c:29:3c:
c3:c6:fb:23:c4:3b:76:72:34:c5:ff:41:14:17:99:
c0:7d:cf:8d:cb:8e:b5:2d:68:53:b0:8a:f4:a6:83:
bd:0b:8f:a4:b9:94:0d:59:2d:05:12:2b:ff:f6:68:
80:b0:30:01:de:a8:a2:0d:1e:8d:af:b7:d2:50:ea:
81:75:77:b5:d2:a1:cf:36:d7:29:66:6f:c2:8f:f8:
fc:82:24:05:8c:7a:89:12:7b:d5:64:7a:bf:98:b3:
34:13:57:cd:bb:e2:f8:9a:6c:fb:7c:82:56:85:ed:
1c:85:a6:57:67:d1:df:a1:36:73:77:b2:41:c9:61:
0d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AC:35:F5:9B:09:64:EA:E7:9E:11:D4:7C:FC:A9:4C:FD:89:D1:33
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b2:b2:b0:eb:40:d0:7b:da:f7:32:b3:2e:67:a2:1a:08:39:
0d:fe:8e:7d:9f:c4:3c:15:92:31:20:dc:fa:a6:cd:70:65:3c:
0b:96:5f:93:22:03:a3:5c:cc:48:9a:1f:23:22:e9:4a:8d:7e:
af:cc:b1:f3:1e:b2:34:94:b5:c4:cb:39:22:73:4a:77:b6:d0:
c1:b5:70:84:9b:f8:0e:d7:56:03:0c:54:5c:c0:2c:5e:33:3c:
d4:40:1a:55:ff:5e:12:d7:fd:04:55:f9:08:23:e8:bb:82:16:
d1:26:06:f5:a2:c5:0a:00:66:e9:9b:2d:29:34:40:38:ea:15:
67:f7:04:77:d2:ef:bf:ac:ea:17:d9:67:98:ba:66:77:54:f9:
08:5d:a8:d2:47:e1:8f:87:c3:9b:72:7a:d3:53:ae:e4:fb:39:
85:5f:d3:ce:89:ff:72:83:3e:96:ae:cd:c4:cd:17:ab:a0:1c:
f8:57:11:cd:45:e3:84:0b:cb:6d:45:3e:5a:ab:8b:34:16:67:
b6:c4:db:64:f4:a3:a3:cc:41:ef:57:cd:22:a5:dd:a1:51:3a:
e8:28:bc:85:1d:9a:8d:b8:03:bb:c9:7f:4b:0d:e8:a8:0a:bb:
f1:42:0d:a8:ac:f5:a3:88:42:ca:3d:4d:d1:8f:d4:95:cb:a8:
38:17:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:35:05 2026 by rpki-client