Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: Bx36IFwjh8UNNAYEg9U1KWukCXQrvi7jtJpnRj6cnyk=
Subject key identifier: 94:23:62:69:6D:D1:8E:1E:E8:FE:2D:4E:77:57:A7:48:D4:55:6B:7F
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 01A1005A0DD5D83D8B4B62BC2E045D4B0883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 17A8
Signing time: Sat 03 Oct 2026 06:01:04 +0000
Manifest this update: Sat 03 Oct 2026 06:01:04 +0000
Manifest next update: Sun 04 Oct 2026 06:01:04 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: UEeh7fZFjG6FVKHPD6P24jtlrO9cn+dJ0ordWHy/sOU=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:0d:d5:d8:3d:8b:4b:62:bc:2e:04:5d:4b:08:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Oct 3 06:01:04 2026 GMT
Not After : Oct 4 06:01:04 2026 GMT
Subject: CN=942362696dd18e1ee8fe2d4e7757a748d4556b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:69:f8:ad:3c:23:66:cb:59:0a:48:fe:6c:7b:
5d:8e:6c:15:3c:c2:ca:e0:bf:ea:ee:02:55:36:94:
f2:ad:20:9e:e6:8c:9d:e5:c9:2b:0f:3f:23:28:cf:
66:11:3f:8d:a4:92:94:a4:1d:0c:6f:27:7e:96:52:
20:94:a3:b7:07:57:00:96:67:5a:cd:68:57:0a:8a:
21:15:1e:cd:f1:7b:87:2c:24:12:ce:10:41:3e:7f:
86:22:62:c4:3e:02:9a:6e:e7:a4:62:dd:b3:91:b9:
97:9d:df:8e:2b:d5:c3:dd:05:18:21:21:90:5c:a2:
e3:1b:a8:e4:51:6a:ee:99:66:1a:8a:88:ee:c6:d2:
f3:87:e5:73:b4:6b:40:aa:54:aa:09:7f:47:50:24:
d2:fe:88:fc:b7:d7:e0:72:c6:b0:f4:48:01:01:89:
f1:1c:cc:20:97:3a:8a:74:51:51:aa:9d:ff:79:5c:
73:f9:f2:c5:c1:75:a1:2b:4d:86:45:6e:a7:fa:ec:
fe:04:e2:c8:35:fd:85:b4:af:4e:4b:c9:69:c0:20:
7c:f8:f6:7c:c3:90:93:2a:3d:3d:db:31:4b:49:4b:
bf:75:30:d2:7c:d2:9b:e9:b1:fa:83:92:03:50:1c:
e6:be:eb:dd:68:fd:02:86:5c:f0:a7:29:f9:6c:54:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:62:69:6D:D1:8E:1E:E8:FE:2D:4E:77:57:A7:48:D4:55:6B:7F
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:57:6d:f1:5f:e2:94:08:32:3d:f1:4a:56:f0:76:8c:ac:21:
2e:99:db:e3:c9:96:56:0e:a0:61:47:2d:c8:a4:19:36:b3:ce:
3d:96:b7:6c:76:e3:26:f1:0c:aa:bb:a3:24:79:54:37:d2:83:
b1:6e:d4:84:8b:f6:9c:ca:07:80:f5:cf:0d:92:83:dc:a1:bb:
9e:bd:2f:59:2c:9c:09:e7:62:bb:df:d2:80:7d:85:53:9d:2d:
2d:98:34:a1:72:e6:7c:2f:dd:b9:c9:50:77:6a:4a:d0:96:91:
ec:00:38:e7:ed:7e:3b:9e:9f:cd:5b:4f:1e:86:bf:66:5c:ae:
d1:36:37:94:56:d9:ce:35:2a:d5:ea:b3:6c:50:d4:3d:6e:ea:
6d:e8:f5:ae:43:57:7a:57:c4:8e:9f:f1:82:42:dd:31:f4:4c:
2a:be:e1:f6:ca:53:c9:08:c4:47:f0:94:f3:ff:c9:e5:34:9a:
19:f2:f2:c1:6e:91:f2:0a:5c:ce:d9:f5:75:22:61:94:ef:ad:
66:1b:a4:b1:8e:3a:d9:a4:51:cc:e4:dd:d0:93:fb:5b:6d:24:
29:40:39:5e:f4:05:19:f3:97:c9:77:1e:2c:2b:3e:d6:66:ab:
56:17:59:74:43:d7:db:f8:3a:10:2f:2f:64:ca:ff:bf:1c:05:
1c:b4:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:51:07 2026 by rpki-client