Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 9mq3t7nhcUGdasQ0Z27yUECMd+gvInD/gaTglrnqZCE=
Subject key identifier: B8:A9:11:A8:4D:63:07:6F:BD:8C:8D:99:2D:0D:1B:32:75:EA:2B:07
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019EBF5B14734B573BCED1C97268E35AC330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1965
Signing time: Sat 13 Jun 2026 05:01:17 +0000
Manifest this update: Sat 13 Jun 2026 05:01:17 +0000
Manifest next update: Sun 14 Jun 2026 05:01:17 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: ZkBwoCMZmBI5ZFNMNRTLtqYoM4wjew9gciW7xYheYrc=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:14:73:4b:57:3b:ce:d1:c9:72:68:e3:5a:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jun 13 05:01:17 2026 GMT
Not After : Jun 14 05:01:17 2026 GMT
Subject: CN=b8a911a84d63076fbd8c8d992d0d1b3275ea2b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:27:8c:5e:06:ad:2b:b3:7c:04:e0:d2:f9:
ca:f5:e9:8c:d0:ab:e7:26:4b:7a:59:b8:1c:5c:d6:
98:b2:d2:27:12:d7:f3:89:fc:a8:82:94:ea:bb:a2:
88:20:87:39:da:c5:68:4f:74:fa:e2:87:07:83:32:
8d:b7:dd:1f:47:b2:2a:05:44:8d:43:c4:ef:d3:d1:
fd:88:48:f4:18:e9:b5:a5:5f:0f:bf:2d:84:11:41:
74:53:6d:93:97:99:26:65:69:cd:ed:48:7a:28:68:
05:45:6e:5f:70:d5:cb:bd:9d:0d:8f:22:2f:02:b6:
4c:d3:dc:6e:9e:46:64:68:25:6f:27:03:13:20:74:
92:63:18:5a:35:ec:87:e3:70:01:4b:0d:cc:84:25:
81:ef:51:26:2e:95:06:40:5c:3a:91:78:c0:f0:09:
f8:84:01:3d:43:19:8b:17:f3:e0:e4:f2:e4:47:24:
01:39:4c:2d:ea:15:ba:0e:eb:f6:7a:a1:4a:71:b5:
aa:78:bb:3b:72:e9:ae:bc:20:2c:26:8e:04:ae:7d:
9d:59:f5:5e:ae:ad:76:2f:83:17:8d:6c:15:e6:f4:
ca:67:ab:19:c0:1a:b0:5e:ae:44:66:40:55:1a:aa:
e4:f8:91:e7:bd:89:10:9b:98:63:a5:89:44:07:d8:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A9:11:A8:4D:63:07:6F:BD:8C:8D:99:2D:0D:1B:32:75:EA:2B:07
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:06:e9:15:e5:19:8d:18:27:cc:75:27:1b:53:5c:28:1b:26:
8c:8c:e0:84:43:e4:c1:61:75:87:1b:e6:56:0f:50:62:dd:31:
f2:20:48:d0:0f:ea:38:7e:43:30:b6:95:3a:22:35:05:11:c3:
db:1c:d2:81:fd:cc:d2:2c:69:72:61:7a:11:b6:ff:5a:de:1f:
e9:39:7d:33:69:1a:9b:72:bd:18:55:71:cd:0c:16:9c:7b:f1:
e0:78:fa:f7:ba:8c:16:f0:54:e3:b1:cf:60:f0:db:64:3a:4a:
7c:c3:5f:86:96:5f:e9:5e:5f:30:c6:b0:49:ab:99:fe:10:e6:
50:02:89:87:a1:22:23:3e:69:83:30:ff:ba:ed:8c:c2:b6:a5:
5d:93:b4:81:fa:6a:e4:3d:73:30:5b:52:e2:d5:23:54:43:56:
b7:25:25:aa:c6:bd:3c:1e:11:29:8d:4f:c3:fc:e6:72:03:8e:
86:40:fb:f5:6e:6f:77:5d:a3:65:fb:b6:59:c5:e4:e6:f7:a9:
44:99:4c:d7:45:a1:b5:ce:f3:71:f5:5c:87:f8:76:54:dd:7b:
b7:cb:c6:8e:19:c2:27:06:64:cf:01:06:eb:05:b3:d6:b2:1a:
ad:3b:31:7f:52:f0:81:3c:6c:c0:d5:95:61:86:02:07:b7:b7:
bc:30:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:47 2026 by rpki-client