Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: p6ZXKRL2Fp9GUFRfa8PJwEItqAmBaC1xDPAWaPavcrM=
Subject key identifier: 90:CC:E6:7A:0C:63:7C:80:E0:18:AB:E9:4F:D8:1C:B6:8D:59:30:04
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 019FAA1A225D2EED8CA7B91FE474F0F13C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0F81
Signing time: Tue 28 Jul 2026 19:01:07 +0000
Manifest this update: Tue 28 Jul 2026 19:01:07 +0000
Manifest next update: Wed 29 Jul 2026 19:01:07 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: NQaHPgTIO79CwCp5PQ1MrrImNyI0GDwjoXRUe6o1R0M=)
2: xByyab3Vrz3Ef2rAb6P2eDrMVOE.roa (hash: kIu292fLCuL6Bxl5IG18vmja0jYF3hwZuE7UgYdGv/Y=)
3: zHx4boZUx9mQ4kmi1AyAMn8HdYg.roa (hash: 2evdzACk+oevIsq4yxjXZwXVQi4UVdSShl8e3fPWgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:22:5d:2e:ed:8c:a7:b9:1f:e4:74:f0:f1:3c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Jul 28 19:01:07 2026 GMT
Not After : Jul 29 19:01:07 2026 GMT
Subject: CN=90cce67a0c637c80e018abe94fd81cb68d593004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:23:db:5e:ee:72:66:8d:1a:28:73:66:84:
34:de:e1:6c:fe:41:24:7c:5a:b3:98:d0:16:7c:25:
2a:fb:17:f4:69:e4:20:93:83:fb:e3:37:f7:d9:3e:
f6:fe:38:9d:dc:85:74:11:e1:bb:ec:e4:e0:ce:55:
e7:42:45:0e:37:7e:70:55:26:22:5c:12:af:cc:e8:
14:c1:5e:3f:41:c8:21:a9:7e:ef:5a:c0:01:9e:98:
5a:b2:d3:b3:85:66:52:18:70:44:62:44:8f:85:df:
3e:3d:ba:ba:8c:82:b4:d5:e0:af:18:5d:12:a6:72:
2d:fa:c7:e1:e4:f8:22:5b:5a:d8:ca:da:a7:48:14:
04:49:aa:ed:38:6b:25:1d:eb:d1:45:3c:b7:2b:e7:
ad:8f:fb:78:4d:e2:36:57:bf:c3:9e:b7:bb:86:df:
da:3b:b7:16:4b:73:cf:85:3c:f9:07:0b:72:1f:0d:
e4:93:2f:12:17:a7:94:e6:d2:18:69:d8:dc:d4:1e:
1a:91:28:b2:47:9a:b5:7d:af:48:ae:0c:bf:75:94:
7e:8a:d3:62:cb:9e:8e:be:b8:f1:50:46:62:be:88:
02:0d:60:2c:d4:c8:2c:b7:7b:92:23:44:91:e2:ae:
96:80:82:13:96:cc:c3:e3:53:fb:b2:6e:30:3b:a4:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:E6:7A:0C:63:7C:80:E0:18:AB:E9:4F:D8:1C:B6:8D:59:30:04
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:82:b1:a0:12:d7:48:22:37:d6:8b:b8:ae:f1:a4:96:e6:59:
1b:29:d7:de:2f:f8:1a:4d:b0:de:cc:f8:17:4b:cf:d6:b1:16:
8c:13:bd:44:10:28:0f:96:c0:9e:31:44:e5:21:90:cd:b2:20:
ae:4b:16:51:23:07:4b:db:c3:cc:03:1c:9d:96:4f:77:e4:da:
c2:c8:fb:00:af:35:69:3f:d9:46:06:a3:a7:b6:bc:77:a8:af:
70:56:ef:d5:6b:71:69:c8:f2:8d:3b:82:f1:6c:30:84:68:b1:
3f:7f:ce:a7:13:90:58:f9:c6:5e:36:04:86:df:da:68:fb:7c:
4d:23:db:36:da:16:39:22:59:05:6e:9a:68:5a:a4:7e:c2:30:
40:2a:d0:9e:c0:77:3a:85:89:08:ad:bf:20:b7:16:b6:d3:14:
6d:08:bf:30:75:47:b5:f5:4b:92:66:39:d7:5f:1d:29:e9:1c:
5a:64:7b:de:fe:fa:8d:b3:36:a2:66:d3:a8:16:c5:52:08:bc:
d9:97:69:52:1d:08:c8:9e:30:2b:23:5a:83:44:33:3a:06:d7:
37:e3:f8:55:1c:24:a4:e1:50:28:b2:8c:bb:f8:67:7d:3a:8a:
9f:2f:c4:c5:b9:36:6a:0e:37:78:97:6b:ce:7f:7d:15:cd:98:
7b:40:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:35 2026 by rpki-client