
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: ms2W+CbEMTxBfmCeefTvI/f5Hj6o1Ot3OsYWmArl2BU=
Subject key identifier: B5:4A:E7:BE:5D:E4:25:8F:67:12:BD:D2:BB:D7:68:4E:77:B8:C9:A9
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 01A0BF556C0A969131B9B3202F64695D88E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: 04D9
Signing time: Sun 20 Sep 2026 15:00:41 +0000
Manifest this update: Sun 20 Sep 2026 15:00:41 +0000
Manifest next update: Mon 21 Sep 2026 15:00:41 +0000
Files and hashes: 1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: TnnjHaQYNY+8FumWR4S8uArOyjRqBTAprLuYE5Z7TPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:6c:0a:96:91:31:b9:b3:20:2f:64:69:5d:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Sep 20 15:00:41 2026 GMT
Not After : Sep 21 15:00:41 2026 GMT
Subject: CN=b54ae7be5de4258f6712bdd2bbd7684e77b8c9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:06:16:81:10:a9:58:eb:0b:aa:a6:66:3c:24:
58:d9:96:6e:4a:63:82:f1:f1:85:d6:b1:d0:f3:ef:
05:40:c6:e6:7c:34:c2:53:06:59:a9:30:a6:6c:75:
07:f7:e6:bc:a3:22:be:da:2d:32:39:57:c2:d7:19:
ad:25:f6:a7:fd:65:35:be:8e:1b:f9:0b:3a:5d:f9:
8a:7e:47:b1:aa:1c:e1:4c:35:7b:c9:e1:ec:ad:26:
c6:2b:7e:5b:b1:78:25:3c:b3:e2:ba:89:29:d2:dc:
4a:81:51:d9:1d:3d:f8:4d:bd:7b:e2:6d:9f:5f:e8:
d2:ea:16:c4:84:3a:55:8d:62:00:a2:30:14:88:11:
51:a9:7c:93:c9:5c:2e:0e:ce:66:d4:a5:0d:a6:6e:
bf:8c:98:7a:24:12:11:97:45:5f:55:bd:97:c1:4a:
62:30:c8:39:1e:67:69:65:0c:d7:df:7d:33:5a:9b:
ad:fe:f5:05:2b:84:ed:e5:a0:83:fb:6e:ef:1d:73:
a4:db:96:73:52:eb:21:fb:76:02:6b:00:5b:ef:1e:
21:b4:f2:2f:a3:06:7a:07:47:a4:2a:35:4b:11:1e:
94:6d:00:08:86:93:80:f4:8f:d3:b2:91:57:23:df:
59:57:a2:f9:da:13:81:9d:8c:70:aa:cf:b8:ec:9f:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4A:E7:BE:5D:E4:25:8F:67:12:BD:D2:BB:D7:68:4E:77:B8:C9:A9
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:28:14:f8:e9:4c:33:84:28:40:a2:09:57:af:09:be:91:cf:
1a:46:77:4a:54:f5:f3:98:86:15:fe:71:16:ef:a8:49:19:98:
7c:d2:19:d4:f2:ce:99:e1:2d:25:7c:50:9b:0c:e8:5b:c4:1e:
68:1c:2f:c2:a4:60:be:d5:3d:e4:54:da:af:93:a0:4c:f2:d6:
87:1f:58:ac:9c:46:0f:f4:f5:78:08:d0:69:ad:00:e8:0b:2c:
10:ba:3a:6c:72:47:25:21:2d:77:9d:78:64:e2:bc:27:83:f1:
41:f5:a0:02:fe:20:df:12:51:d0:13:53:2a:28:e1:a9:9a:18:
e5:6c:d5:ef:92:4d:14:ce:7b:23:43:fd:dd:d7:0e:fe:d9:b5:
d9:57:1f:cb:d8:e7:13:cc:c9:41:b8:09:de:69:ad:64:46:a0:
e9:d4:27:cf:78:14:b7:e6:7f:30:95:98:eb:62:83:3b:32:d2:
90:33:46:95:f6:5f:94:61:7e:e7:83:25:63:28:a9:0a:2b:ee:
4d:ae:d7:6c:43:3a:1f:d5:dc:6b:be:6c:70:8c:a7:23:b9:ca:
96:8d:8e:a7:52:0b:4d:b7:b5:92:f4:40:da:54:f3:24:f3:2f:
c4:7f:87:79:1c:75:e2:00:87:44:44:48:03:38:52:89:b8:51:
aa:ae:97:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:14:35 2026 by rpki-client