Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: +JzTv9jHJnv+ffGJz9kmUnZBtTUyg034xaaAnmTqs9E=
Subject key identifier: C9:55:BB:B4:30:DC:3B:20:5D:AF:A7:E5:C1:97:5B:AE:06:84:6B:44
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 019ED574B7A1681050D95C7F322B1023CBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1651
Signing time: Wed 17 Jun 2026 12:00:56 +0000
Manifest this update: Wed 17 Jun 2026 12:00:56 +0000
Manifest next update: Thu 18 Jun 2026 12:00:56 +0000
Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: 5AyDkPDFELEBKA4UVXENARJIzHwzFljXDuI+Jb30f50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:74:b7:a1:68:10:50:d9:5c:7f:32:2b:10:23:cb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Jun 17 12:00:56 2026 GMT
Not After : Jun 18 12:00:56 2026 GMT
Subject: CN=c955bbb430dc3b205dafa7e5c1975bae06846b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:c0:60:37:21:b8:1a:f1:9b:ac:f5:60:fa:
85:e5:50:48:10:a4:15:52:20:77:76:52:79:93:86:
24:30:bd:57:ef:4f:ca:77:67:71:fd:46:af:7a:ca:
b3:7c:e7:34:11:d3:a7:a8:80:ba:3c:46:7a:7c:29:
85:b1:fc:9e:b9:9b:fc:4d:8c:55:7e:44:90:71:ab:
f6:25:c7:46:1d:0d:20:13:df:3b:1f:6a:4d:5e:09:
47:3e:1a:e7:20:fe:72:c0:2d:32:62:1e:36:f8:36:
68:25:42:6f:94:56:9c:67:78:39:8c:76:8a:cd:1a:
4f:f7:de:88:ef:3e:a3:c5:71:84:63:f9:24:8c:ee:
1e:62:e3:53:fa:81:d8:e2:5c:ff:83:c3:5e:51:d8:
e8:9d:02:89:92:1a:9e:ff:a1:23:80:6e:e6:84:97:
68:af:55:0e:bb:82:98:6c:d5:16:c8:33:36:04:28:
0d:38:83:eb:22:88:3a:f2:e4:0b:41:36:eb:83:5d:
08:cb:ee:09:de:55:92:6a:79:cd:fa:7a:6b:45:e4:
3b:21:ff:54:8b:63:44:a9:39:cd:40:81:f9:fb:9e:
64:53:be:d7:e3:45:22:cb:c9:d2:5d:bd:f7:e8:0a:
61:13:fe:6d:0a:73:1b:6d:b9:c6:ed:4f:9e:f4:9a:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:BB:B4:30:DC:3B:20:5D:AF:A7:E5:C1:97:5B:AE:06:84:6B:44
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:13:70:69:a0:cb:ec:35:ca:62:e7:f4:68:94:6e:c2:7f:
90:ad:93:15:ae:36:8b:bf:f3:3d:be:79:e9:9d:c9:3d:6d:0e:
0d:ef:72:d5:24:ec:bc:81:db:4a:86:75:03:bf:6f:62:28:0f:
57:e9:10:55:a4:cb:03:da:ea:da:60:9f:93:c1:a9:7d:d8:e7:
f9:05:b2:c2:79:1a:9e:b7:27:31:b3:00:bb:b1:f4:4c:b5:40:
f9:2e:93:83:bd:88:2a:54:f1:15:4e:bb:0e:0b:ed:10:17:b8:
20:d3:c9:26:11:96:29:29:eb:18:54:0b:06:66:51:55:39:80:
87:58:4a:93:50:ff:c7:39:ab:d1:a0:4c:5b:1a:13:15:fd:23:
3a:32:2e:1e:1f:b0:a2:88:b9:15:40:b4:df:cf:dd:35:3e:52:
60:47:06:00:1d:cd:c8:33:c4:01:89:f6:17:ba:d6:48:11:a3:
3b:20:1d:a0:4f:6b:3e:09:80:7a:ee:55:57:c0:61:61:c5:69:
af:46:84:89:82:0f:53:d9:71:5e:85:22:55:e0:86:89:8c:d8:
f6:52:2f:90:a1:5a:b7:6c:54:8d:4b:54:59:e7:5c:eb:27:2e:
e2:dd:40:24:55:e6:7a:39:48:a3:94:de:f3:dd:85:71:8d:1b:
e3:e6:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:02:45 2026 by rpki-client