Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier: j0T7K4d7wbOVuQbnevxR2Mf+BslzCXB+fJsxpMzmDp8=
Subject key identifier: BF:02:AB:C0:F5:21:9F:CF:5B:01:C7:D4:00:60:99:CD:7B:3B:59:D3
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial: 01A0C6D7AB6B1752E7E6A3760A38A0F61F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number: 1753
Signing time: Tue 22 Sep 2026 02:00:17 +0000
Manifest this update: Tue 22 Sep 2026 02:00:17 +0000
Manifest next update: Wed 23 Sep 2026 02:00:17 +0000
Files and hashes: 1: 5IIUXEAZNtrYdUWTfkEpoGU9_is.roa (hash: hGgqh1MUpciTEKawXPxZYEEAiYB7oibeQnzurhDNdRM=)
2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: G2ykeY/u3s03VTTDyXU4Mt36hR5P87ZoHUFomtvB150=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ab:6b:17:52:e7:e6:a3:76:0a:38:a0:f6:1f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Validity
Not Before: Sep 22 02:00:17 2026 GMT
Not After : Sep 23 02:00:17 2026 GMT
Subject: CN=bf02abc0f5219fcf5b01c7d4006099cd7b3b59d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:4a:c9:3e:21:18:19:72:e1:a1:74:58:a3:
bf:b1:fa:98:0b:ec:7d:69:75:64:4d:cd:53:28:07:
01:df:5f:d4:4d:8e:ee:4b:f2:17:dd:65:f3:90:36:
e1:98:a4:a4:68:06:7c:b7:45:0b:bb:bc:ac:28:db:
3e:0f:d2:33:97:58:7f:45:ce:df:f7:52:06:10:4d:
7e:d5:fe:84:a8:8e:4a:3c:33:45:ba:a7:c1:9f:64:
fb:63:cc:f7:c3:e6:31:f7:13:f3:6d:21:ca:38:d0:
d3:c1:18:43:dd:7d:e0:dd:cd:ea:52:01:21:fd:aa:
8d:c2:0a:74:c1:a6:e3:78:83:86:de:a4:a4:c5:3e:
37:34:21:22:49:ef:96:15:b8:97:33:1c:91:6f:bb:
a1:6a:4a:9c:9d:8d:68:cd:9b:e1:0c:12:fd:5b:87:
97:6c:9a:3c:21:c9:e8:ca:91:a7:58:a5:ee:77:c1:
4a:16:6c:ec:d7:20:e4:1a:0b:bb:6d:ae:bc:ad:df:
3d:59:34:7c:bc:62:25:81:e2:dc:84:d1:81:99:fe:
bc:14:b1:a8:d6:0b:f4:bd:ab:03:6b:94:fa:38:ab:
8c:6e:76:df:dc:6e:91:bb:cf:89:2c:77:3d:7e:12:
97:6a:63:b0:2d:ec:49:14:6c:2e:a9:10:25:98:df:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:02:AB:C0:F5:21:9F:CF:5B:01:C7:D4:00:60:99:CD:7B:3B:59:D3
X509v3 Authority Key Identifier:
keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0a:eb:99:00:84:75:cc:53:79:7e:d2:a3:a1:a0:5d:fb:1b:
96:95:de:c8:2c:60:50:6e:07:ba:d4:46:45:6d:34:39:10:07:
5b:7a:21:06:31:4b:13:2d:ce:c7:ba:89:35:3c:70:67:e4:d7:
39:fc:99:9d:e8:94:d5:8d:72:6c:df:79:0d:33:33:d9:f0:52:
37:4a:c6:4e:18:06:df:84:d2:09:bd:f8:3c:62:57:f6:f8:fe:
ec:db:fa:e6:02:7c:20:b0:4c:38:0e:69:da:5d:2a:5a:0c:a3:
11:41:a1:85:a7:e0:df:b0:06:ce:ba:25:9b:e7:9d:e1:fe:56:
ed:b9:3c:d7:5c:e8:87:04:c3:18:e0:69:ca:e1:5f:71:8d:d5:
64:ae:5e:2a:86:39:5e:66:57:85:22:70:1d:b5:89:1c:84:4f:
0f:f1:3f:27:3e:fe:9a:43:f5:da:0c:65:b4:6f:20:0d:7d:75:
46:82:12:d0:a0:ce:d6:58:21:5e:e4:95:53:0a:8d:4b:6d:33:
d5:da:e2:ba:a0:b3:cc:74:f4:3e:7b:d0:15:25:e1:df:fd:51:
a6:5d:00:a3:dd:f0:43:7b:18:73:2f:38:b2:20:bc:84:eb:7f:
1e:ce:23:a4:d2:51:a6:a8:a5:e5:01:7d:ae:b7:bd:4b:c1:ff:
6e:b9:3a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:56:59 2026 by rpki-client