Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: SNnusuEIu9ur58Nk6s4+TR6oMBj85DRz+HeItKR2zK0=
Subject key identifier: 58:0C:09:0A:C1:99:C2:A4:24:96:D5:4F:7B:4D:4E:8E:1C:23:F2:22
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 01A0BDD49624F768266991B0D9C594C40BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1A6F
Signing time: Sun 20 Sep 2026 08:00:20 +0000
Manifest this update: Sun 20 Sep 2026 08:00:20 +0000
Manifest next update: Mon 21 Sep 2026 08:00:20 +0000
Files and hashes: 1: 9U2gzAHMQAtRK1gQNHxjr09eebA.asa (hash: AXuT5FLBEMvZmsQmdwNr+acvh8DbWZJW923I5JZgo+o=)
2: SnthKeN0QNsYJSCvNCIW3QkdzO4.roa (hash: pm2CDsGetmBd20fFZ1+ibNzTRJyqdNoHhgU1ZBjBaHg=)
3: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: k0cE4Bc0pLc6VvAZFw+/7TM6dYLmw2U5WtgZscaRShk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:96:24:f7:68:26:69:91:b0:d9:c5:94:c4:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Sep 20 08:00:20 2026 GMT
Not After : Sep 21 08:00:20 2026 GMT
Subject: CN=580c090ac199c2a42496d54f7b4d4e8e1c23f222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:35:7f:49:c9:f1:ed:eb:96:58:5c:4d:47:e0:
75:d5:e5:09:39:c3:41:c6:00:b2:5d:f7:44:e5:dc:
85:36:d2:1b:2e:98:cf:f0:ab:7b:4b:e5:cb:72:5e:
7a:b1:a5:26:6f:97:52:74:b9:fb:aa:90:ed:69:3b:
9d:9c:61:48:45:5b:02:28:49:4b:fe:0c:0e:f3:f1:
54:07:ee:18:59:e6:ed:60:f1:40:c5:2f:fd:38:ad:
1a:ff:2d:89:5b:cf:8f:d3:9e:a2:2f:b1:b2:19:c5:
1c:9c:e9:3c:5d:4e:eb:bb:4c:93:de:20:35:e9:da:
9a:67:43:14:35:06:7c:fa:c8:9a:1e:15:0e:1b:87:
83:ee:7d:ae:d3:80:8d:f8:49:59:3f:a2:17:4d:98:
31:24:c1:99:03:b8:a1:d6:a7:d0:83:28:e7:60:27:
3c:1d:ee:a1:29:dd:ca:80:f1:27:7f:e3:f8:59:f0:
c4:68:6f:40:66:17:10:db:53:d5:a7:c4:43:15:a2:
2e:f5:99:3d:08:22:d1:f1:0b:ff:a5:e3:c3:60:bd:
f8:0a:de:74:7e:81:35:ff:9c:80:e1:f7:0d:5b:f7:
2b:98:59:83:04:e1:cc:f5:14:4d:a6:bb:12:df:94:
f9:90:19:50:dc:67:c1:dd:fa:9c:1f:b8:81:80:66:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0C:09:0A:C1:99:C2:A4:24:96:D5:4F:7B:4D:4E:8E:1C:23:F2:22
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:34:f1:85:39:75:1d:96:a7:bf:ce:58:4d:85:94:c8:4c:15:
e7:c2:67:7b:a0:27:1b:83:ed:7d:6e:ce:ff:e8:e1:9f:42:a4:
94:8c:b0:c3:a9:86:e6:81:23:2c:5e:05:b0:ec:ee:b9:b3:a4:
8e:2b:43:fc:90:16:ca:60:35:9f:bf:9f:8f:30:80:86:cb:98:
90:f5:66:a4:eb:38:b9:6c:38:53:47:49:63:12:a0:94:3a:f7:
89:e5:e3:90:5c:2d:25:75:f2:35:b2:b0:bc:c6:35:7a:cd:f8:
d2:57:00:52:22:d0:bd:a1:9d:21:aa:be:53:db:3a:01:8d:0c:
22:f8:b0:93:cd:27:6f:54:cc:97:9c:94:a5:b1:a8:ea:a3:e8:
bc:f7:2f:61:07:93:ab:ba:33:4f:a2:54:ce:a7:76:26:c1:10:
6d:81:9e:be:ae:74:12:21:1d:bc:a3:ff:aa:c8:91:fb:aa:9e:
b0:e4:a0:1f:14:6c:a4:9b:7c:a2:15:99:e2:74:b1:2a:8e:89:
9b:1b:85:64:63:fd:17:3c:d9:e1:dd:27:80:47:44:a7:df:a9:
f6:62:11:7e:4f:75:a8:d0:31:ea:08:4f:ab:4c:b7:ee:c3:c7:
5d:49:6f:b2:f0:7f:1d:fe:eb:59:6c:0d:83:ff:87:4d:45:90:
21:f3:62:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:07:07 2026 by rpki-client