Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier: MK96YEQsodk6Lxq8trbdqXIDhs8RhlW/TUvBuElLN80=
Subject key identifier: 81:A9:7E:5D:17:DE:C0:3C:81:03:9F:4A:03:4F:07:98:35:39:FB:6D
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer: /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial: 01A0C22028615AD850B3C55D00E0A7099B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number: 060A
Signing time: Mon 21 Sep 2026 04:01:22 +0000
Manifest this update: Mon 21 Sep 2026 04:01:22 +0000
Manifest next update: Tue 22 Sep 2026 04:01:22 +0000
Files and hashes: 1: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: WzIP0/eBoaT8qBPoIUKNTybtAOcN++mCa/ncmtRPKMg=)
2: m4kYecQvosDEbgzFUfKOmbMpQHc.roa (hash: Qzj75bvQYH3AqSh7xgbB5Q2jMsStMjrkOv+BsYSia7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:28:61:5a:d8:50:b3:c5:5d:00:e0:a7:09:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Validity
Not Before: Sep 21 04:01:22 2026 GMT
Not After : Sep 22 04:01:22 2026 GMT
Subject: CN=81a97e5d17dec03c81039f4a034f07983539fb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:fc:81:08:bb:6e:2a:9b:7c:e7:c9:0d:de:
6b:fa:61:f9:ce:af:bc:2c:14:63:dc:08:44:ab:90:
0d:75:e3:68:f6:53:5a:c5:03:c1:a3:31:0e:44:ea:
e9:cc:94:f4:6b:01:c0:cd:3e:39:08:8e:86:75:a0:
0e:2f:2f:5c:ec:1f:55:ec:c4:96:a2:ff:fe:ff:69:
df:d9:e1:18:dc:95:4b:4d:31:37:84:22:f7:03:49:
98:9a:03:e0:44:98:01:1d:73:1e:b2:ed:67:a4:f3:
56:1d:5b:0d:04:9e:db:04:c1:0d:91:e4:87:a0:e3:
5e:bb:2d:df:f4:dc:ee:93:91:90:d5:a2:a4:d1:e3:
6d:96:e9:00:b4:65:f9:a3:ef:64:5a:62:16:e8:c8:
60:ad:25:0e:8b:13:f9:cb:7c:b6:bd:9c:04:2a:2a:
6f:57:ad:65:f9:a0:74:52:8c:7b:70:6a:64:90:4b:
80:a1:fa:eb:b1:e0:4c:be:81:9d:88:f6:02:eb:fc:
71:c9:82:e4:c7:79:25:0c:d7:de:23:d7:6b:ec:38:
12:0d:f2:b4:66:0c:81:d0:15:de:d6:71:c5:77:33:
83:6f:ba:07:17:24:5f:b7:14:e4:fa:fe:97:93:3c:
aa:05:4c:79:bf:c8:5f:bc:35:b3:dc:94:58:53:f4:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A9:7E:5D:17:DE:C0:3C:81:03:9F:4A:03:4F:07:98:35:39:FB:6D
X509v3 Authority Key Identifier:
keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0e:43:54:e2:b9:43:3b:8d:47:a4:bd:05:2c:ee:96:bb:55:
99:53:73:15:10:14:d5:de:86:1c:2a:18:fb:c9:d6:62:16:d8:
96:95:e6:10:e7:c1:79:6b:4d:9c:e7:f8:c7:73:4c:97:81:1d:
7a:b1:e5:67:94:48:3a:76:40:c0:de:7b:2c:ef:05:4a:f8:e7:
64:7c:6e:05:22:a6:b6:e6:65:ac:87:37:0b:05:82:7a:8f:0b:
42:a9:2a:76:32:49:1c:a8:e0:51:1d:6c:2c:b0:6a:87:97:cf:
1b:19:f5:c2:7b:eb:12:71:58:dd:72:d9:78:f3:1f:85:49:1a:
a1:a7:9a:7a:fe:6e:19:f7:e6:7d:45:2a:9a:e0:85:b4:ac:d3:
46:1d:7e:4b:25:df:62:3d:d8:1e:33:6d:c5:18:e6:a4:b9:69:
34:36:7f:ba:9c:eb:a8:aa:f7:1b:db:9c:df:ec:97:32:13:ad:
c6:32:57:03:7d:1f:73:4e:9d:18:44:07:ef:69:f4:96:30:3f:
6b:32:d6:3f:a1:0f:19:6d:ec:94:54:be:a8:4e:eb:47:85:b1:
c2:39:ce:ac:95:3e:66:d8:3f:58:d3:28:ef:ae:0e:c8:ba:00:
19:12:b2:74:28:3d:fd:d4:3b:d2:ec:ed:53:a4:61:34:f2:f7:
c2:85:39:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCIChhWthQs8VdAOCnCZskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMWQ4ZGQzMWFlOWUwM2FmNGQyNmU5ZGE2ZTJkZDg2YTAz
MDM5YTQwHhcNMjYwOTIxMDQwMTIyWhcNMjYwOTIyMDQwMTIyWjAzMTEwLwYDVQQD
Eyg4MWE5N2U1ZDE3ZGVjMDNjODEwMzlmNGEwMzRmMDc5ODM1MzlmYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0T8gQi7biqbfOfJDd5r+mH5zq+8
LBRj3AhEq5ANdeNo9lNaxQPBozEOROrpzJT0awHAzT45CI6GdaAOLy9c7B9V7MSW
ov/+/2nf2eEY3JVLTTE3hCL3A0mYmgPgRJgBHXMesu1npPNWHVsNBJ7bBMENkeSH
oONeuy3f9Nzuk5GQ1aKk0eNtlukAtGX5o+9kWmIW6MhgrSUOixP5y3y2vZwEKipv
V61l+aB0Uox7cGpkkEuAofrrseBMvoGdiPYC6/xxyYLkx3klDNfeI9dr7DgSDfK0
ZgyB0BXe1nHFdzODb7oHFyRftxTk+v6XkzyqBUx5v8hfvDWz3JRYU/QkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGpfl0X3sA8gQOfSgNPB5g1OfttMB8GA1UdIwQY
MBaAFG4djdMa6eA69NJunabi3YagMDmkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMt
ZWQ4NWNlMDk0YTg3LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hMjY5YWEtYzliZi00MmMxLWFkZTMtZWQ4NWNlMDk0YTg3
LzEvYmgyTjB4cnA0RHIwMG02ZHB1TGRocUF3T2FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw5DVOK5
QzuNR6S9BSzulrtVmVNzFRAU1d6GHCoY+8nWYhbYlpXmEOfBeWtNnOf4x3NMl4Ed
erHlZ5RIOnZAwN57LO8FSvjnZHxuBSKmtuZlrIc3CwWCeo8LQqkqdjJJHKjgUR1s
LLBqh5fPGxn1wnvrEnFY3XLZePMfhUkaoaeaev5uGffmfUUqmuCFtKzTRh1+SyXf
Yj3YHjNtxRjmpLlpNDZ/upzrqKr3G9uc3+yXMhOtxjJXA30fc06dGEQH72n0ljA/
azLWP6EPGW3slFS+qE7rR4WxwjnOrJU+Ztg/WNMo764OyLoAGRKydCg9/dQ70uzt
U6RhNPL3woU5fA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:20:07 2026 by rpki-client