Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: HDJU7LoxwT22MrLr2GczLG2fkvJvaBqgfqVyKf14WaU=
Subject key identifier: BC:58:C4:A8:33:FA:EE:C1:77:A2:C9:A4:89:E4:62:10:37:D9:0D:AC
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 01A1B874D0ECA33D2C4101826A693012E57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 055A
Signing time: Sun 08 Nov 2026 00:00:25 +0000
Manifest this update: Sun 08 Nov 2026 00:00:25 +0000
Manifest next update: Mon 09 Nov 2026 00:00:25 +0000
Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: EctTxPyBfGwVNPx9glI7fFQvkNLcNZc7DpvGm2e5Okw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b8:74:d0:ec:a3:3d:2c:41:01:82:6a:69:30:12:e5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Nov 8 00:00:25 2026 GMT
Not After : Nov 9 00:00:25 2026 GMT
Subject: CN=bc58c4a833faeec177a2c9a489e4621037d90dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:79:14:9c:3e:b9:db:c2:62:04:60:71:f1:46:
40:14:e8:53:de:c7:95:eb:9f:76:8b:04:24:7a:67:
cd:29:c6:de:01:a5:a0:56:03:27:7c:09:73:35:e8:
7e:57:65:52:23:36:fa:a2:e1:f3:ed:68:c7:67:aa:
5f:38:7e:66:6d:85:c7:8b:46:c2:5d:86:dc:c0:47:
63:99:75:d4:12:aa:ce:8c:b8:6b:15:59:a9:e8:4d:
58:11:17:33:9b:0e:18:a3:c6:c9:47:fe:c5:01:e4:
df:76:95:44:58:c7:3d:47:d2:bb:b9:84:56:72:23:
66:c5:ae:f5:41:ec:e5:e9:46:b6:88:c2:53:3d:df:
f5:e5:ae:7d:14:13:98:5d:d9:75:06:35:ab:2f:cd:
a6:fb:7f:35:ae:47:c1:be:47:d4:03:80:f7:8a:f9:
fe:5a:43:ed:94:8a:df:da:2e:0d:db:27:85:0b:fd:
05:8c:c0:c1:91:7e:7b:e8:d3:56:8d:1d:c6:c0:d6:
7c:e2:8f:a3:ad:5e:e8:59:46:29:43:83:1d:af:c5:
ea:ff:fa:c7:3b:7b:be:41:d9:77:46:57:dd:6f:a1:
f8:07:2b:66:cc:77:02:82:14:cd:99:81:28:59:ef:
63:ce:92:80:d1:08:83:de:e9:d0:9a:b8:45:fc:86:
e2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:58:C4:A8:33:FA:EE:C1:77:A2:C9:A4:89:E4:62:10:37:D9:0D:AC
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:70:69:b8:a7:b6:c3:7a:27:4a:90:65:2d:d0:72:8e:8d:bd:
11:92:0d:5a:65:2f:5b:79:d2:43:99:41:9b:07:5d:81:1c:01:
a3:65:c0:02:2a:a3:52:71:6a:ff:1e:00:c2:de:73:29:d6:76:
d3:96:4a:b5:f8:f2:ef:1b:57:52:47:6d:8d:09:84:87:09:83:
19:73:7a:4a:97:fc:ba:64:e3:ad:79:27:8a:df:ae:5b:b1:d3:
26:5c:e7:a1:3a:70:73:d1:87:43:0d:ae:9f:ca:e0:a2:01:5f:
f3:0e:86:93:09:b5:ef:5a:0e:cc:11:93:db:0d:a9:25:f5:21:
c0:ce:eb:1f:60:c3:15:ec:ca:d7:20:10:9f:2f:89:f6:f8:44:
12:f3:26:b6:07:e5:82:23:28:a5:e0:3f:9f:57:eb:c2:d6:4e:
21:70:89:3c:0b:ba:c6:29:b3:58:e3:ff:0f:ad:02:17:fa:63:
da:b3:82:72:45:fd:12:18:de:d8:0f:f4:2a:fe:ab:6e:0b:a9:
63:fc:8f:17:1b:71:25:14:4e:06:86:97:ec:c4:e7:c9:d9:d8:
a5:4b:f0:c6:5b:3a:b2:80:8b:86:c6:3f:3b:97:7f:01:5f:2a:
76:46:cd:e9:30:2a:f4:48:0a:75:e4:20:a8:b4:21:4f:05:5d:
e2:18:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 14:27:47 2026 by rpki-client