Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier: o/uymus6F5swoFWngY+gC12mZUVUJ58+hEGfk8dQxII=
Subject key identifier: 9B:90:51:85:F7:6D:9D:1E:81:E6:61:17:94:31:7A:55:75:1D:07:C7
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 01A0C4B3137357A140CA5E6F30DA5CDA50A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 16:01:05 +0000
Manifest this update: Mon 21 Sep 2026 16:01:05 +0000
Manifest next update: Tue 22 Sep 2026 16:01:05 +0000
Files and hashes: 1: 14WxdiCVm4rnXK9-tDL_PXH0l8E.roa (hash: hqaflv4B62LQIs49QinUGmrt4sGWk2w+n2txj5z2H8I=)
2: 8QavD1xGOGIsFORO8QpTl9ze2qk.roa (hash: CP8EcYyC8MJCP4Qe6fiDSKdEQwvcsEiCEc0QZK7hpC4=)
3: E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa (hash: 3KMhjTFJ+WQEHP63JQ46+UXmsQRLh8CZFZ+BiwZhaII=)
4: LaR2tR9VELkIqYB1KayofzhugrQ.roa (hash: IhBsr0UP82ELR6sQ5NhU1p2TkFx8sUm8QDTn1ahLei0=)
5: _NPYi_tgDVixqRihfPCnzEyteiA.roa (hash: a/DOqggraEPPchKDiC0Upq/MDsgJ2XWYLDm3YdovFlo=)
6: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: AlA5PwOxQhbz2FXWqwwNimfFZy5nPWOUFku9OHq0ITs=)
7: wswbiWhFN53OcrlAurii4-C90OY.roa (hash: FaPWRVidTojhM8z9Dp/5f4Ru4RTG3RuxDK7oQeJK2nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b3:13:73:57:a1:40:ca:5e:6f:30:da:5c:da:50:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Sep 21 16:01:05 2026 GMT
Not After : Sep 22 16:01:05 2026 GMT
Subject: CN=9b905185f76d9d1e81e6611794317a55751d07c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:4e:ce:60:27:3b:5a:5b:fc:6d:a8:01:50:
66:c7:49:54:a9:1d:e7:88:91:b2:86:76:cf:f0:5d:
33:18:ec:74:43:e8:d6:24:36:7e:8a:66:2c:37:77:
01:02:37:91:ad:cf:42:81:cd:12:eb:6b:91:3b:97:
22:bd:b5:fc:45:83:d5:03:55:30:3b:cc:b5:2b:d1:
0c:73:b4:6d:0d:51:3f:0b:83:1b:b4:3c:30:47:e4:
ae:0f:f7:ea:ad:32:d5:52:19:93:4c:14:ae:85:45:
d8:71:46:57:99:b3:32:c8:32:61:cf:ad:44:7e:81:
eb:81:f1:0e:7a:f8:ed:1c:d7:9a:d4:4d:87:5a:31:
90:2e:05:c7:71:74:27:d0:10:fc:73:f1:73:da:d6:
cb:e9:01:07:59:70:15:c7:38:fd:15:b7:47:32:a3:
37:c1:51:73:1f:c1:d5:ae:c2:70:9b:3e:ff:56:fa:
de:69:4b:9a:7b:67:32:48:e8:cb:f0:fd:56:fa:04:
93:0b:3a:41:39:6c:13:a1:f1:89:20:31:4e:5b:64:
f6:b0:08:99:53:46:38:31:37:91:75:b2:5f:08:4c:
04:8b:c7:57:89:96:5d:90:7e:6d:4b:a1:15:bc:51:
26:30:dc:a5:56:53:19:ea:b2:d3:40:5a:cf:7a:c4:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:51:85:F7:6D:9D:1E:81:E6:61:17:94:31:7A:55:75:1D:07:C7
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:a5:9d:a4:56:d3:06:26:f2:27:1d:af:79:1e:62:d4:26:
8a:31:52:58:4d:1e:49:50:a9:e6:39:ce:ef:b7:3a:cb:5e:fd:
fc:f8:ac:7a:be:00:d3:dd:7d:e9:d4:95:96:c8:35:09:dd:64:
0a:45:17:b5:2b:f7:11:7b:1f:d5:02:62:82:68:46:3f:a2:4e:
17:8c:28:00:94:5d:7b:9f:78:5b:0a:d3:99:b9:f8:36:d3:e9:
1d:d0:38:2e:60:ff:7a:d1:c6:b8:f5:75:cc:c1:e0:0a:d1:9f:
52:9b:f9:fa:46:43:07:9b:74:68:b4:0c:5a:a3:9c:44:6a:c2:
54:23:c0:12:45:b2:e4:be:d0:ec:73:5b:0e:76:8e:f7:a8:aa:
3f:ed:60:22:f1:14:2d:a9:72:fb:34:cc:59:25:14:00:ae:98:
8f:0c:03:94:c1:a0:36:86:a9:4f:b5:8e:40:92:92:8f:0d:e3:
70:ce:e5:99:70:1c:4b:65:d2:ce:22:03:11:ce:74:6f:bc:88:
3d:57:ad:e9:22:c4:a5:d9:75:22:0f:fb:70:4a:1d:a5:6e:21:
d9:00:ba:0e:46:49:9d:c1:cb:e1:dc:f1:d7:9d:92:56:06:9f:
9c:e6:03:b5:63:b8:84:b2:5a:1c:d8:b0:48:24:3c:ea:51:cf:
fd:b7:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:17:36 2026 by rpki-client