Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: sx9ypaPc29FWAVKZdJMmeHTWbvW2HQgB/hqwFC8bFXY=
Subject key identifier: 36:09:20:E1:D2:AC:62:4E:34:42:06:4C:C4:79:C4:D3:4A:C9:51:E0
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 01A12BE995D6259F9300E68EC130A8EA933D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 17:01:30 +0000
Manifest this update: Sun 11 Oct 2026 17:01:30 +0000
Manifest next update: Mon 12 Oct 2026 17:01:30 +0000
Files and hashes: 1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: fQUPRMwNWjyS4u3fgBB0BDhESihYszSs4+qW9jTSsbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:95:d6:25:9f:93:00:e6:8e:c1:30:a8:ea:93:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Oct 11 17:01:30 2026 GMT
Not After : Oct 12 17:01:30 2026 GMT
Subject: CN=360920e1d2ac624e3442064cc479c4d34ac951e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:82:6a:c3:e8:07:87:a9:08:d0:81:16:a8:
db:7b:bb:25:c7:09:0f:11:69:a7:cb:f0:4d:aa:43:
be:21:cd:46:b6:56:94:46:e2:d3:c2:c4:df:8e:c8:
e4:97:1a:03:4a:95:08:10:ba:b5:23:88:dc:5a:74:
ae:f9:b4:da:f7:c3:2f:3a:66:c5:44:42:79:77:ad:
7a:dd:d1:bd:32:f0:ea:ab:89:2a:1f:63:d7:97:8c:
76:95:96:af:bc:78:cd:69:f6:00:e8:59:73:0c:1c:
63:06:f7:97:13:0e:72:5f:4e:01:5f:97:6d:cc:9c:
ec:99:b3:4f:eb:b8:90:49:18:b2:52:7e:e9:0c:21:
b8:47:cb:21:70:a5:c6:5f:3c:7d:90:e8:62:1a:1d:
33:16:3e:be:38:7a:41:d5:e3:60:81:0e:e6:d1:77:
9d:e9:bc:1c:03:d9:e5:ce:ec:ab:18:5b:21:4f:cb:
a7:8d:30:c9:42:04:e2:f9:65:85:fd:aa:d8:24:16:
ad:ef:63:fa:8e:26:ca:df:9e:dc:f4:44:53:7b:d7:
ae:11:95:c8:70:51:27:2f:06:b7:a1:d0:fd:2d:ee:
49:7a:28:19:a2:55:b1:25:65:24:d7:1a:28:c6:fc:
49:1b:09:d7:ab:b9:cd:d8:ba:58:4f:32:3b:4f:fb:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:09:20:E1:D2:AC:62:4E:34:42:06:4C:C4:79:C4:D3:4A:C9:51:E0
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:24:c7:8f:ae:be:8d:ff:bb:58:dc:d3:ba:26:d3:c0:19:eb:
4a:2e:02:0d:43:8f:f3:4c:85:06:61:37:21:d3:5e:fc:63:4d:
7f:d0:70:43:a2:6b:bc:42:ca:cb:19:64:c0:16:1c:43:b6:09:
83:68:13:3c:05:c5:fb:0d:f7:cb:bb:f1:f9:04:0b:a6:14:ff:
be:37:7d:ea:73:a2:fb:fa:4d:82:39:2c:83:78:5c:9b:db:ad:
9c:91:f2:b2:da:07:b4:22:50:57:b7:71:e0:be:43:3b:45:53:
dc:39:40:8e:86:f5:b2:a1:ce:9a:31:51:2a:fc:13:9f:0f:f8:
e9:e5:e9:93:4d:9f:73:07:f6:51:93:39:eb:d3:a0:14:ba:0e:
0e:b2:0e:ec:66:d2:39:98:c9:a5:c7:95:b0:50:df:b8:1c:d7:
02:4e:49:70:ce:bb:e6:ba:95:c6:30:8e:38:21:f6:cc:b5:11:
b6:94:9f:74:d2:65:49:3f:82:f0:eb:13:4d:99:01:91:a1:66:
29:04:3e:63:82:26:ed:0b:c7:53:e4:dc:72:67:24:8a:db:42:
13:4f:53:73:60:77:fb:1d:55:7e:fd:56:bd:6e:3d:6c:ac:f9:
72:38:9c:5c:e1:0d:59:31:f7:73:73:62:bf:a0:f0:0c:69:bc:
24:e5:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:07:42 2026 by rpki-client