Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: GnHhUzICTesKZsXBzqXVKpdtg/uGvbqcFcdeBLztQ5M=
Subject key identifier: 97:F0:03:6D:17:3B:13:7D:4B:DA:5C:C7:4C:BE:6C:1B:FC:5E:85:09
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01A0C858733DD1378501034C546A703139E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 09:00:34 +0000
Manifest this update: Tue 22 Sep 2026 09:00:34 +0000
Manifest next update: Wed 23 Sep 2026 09:00:34 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: uCJtcKx/DDFejR2B+98r4sDAkjD7kCw4DQgZ6XX7jws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:73:3d:d1:37:85:01:03:4c:54:6a:70:31:39:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Sep 22 09:00:34 2026 GMT
Not After : Sep 23 09:00:34 2026 GMT
Subject: CN=97f0036d173b137d4bda5cc74cbe6c1bfc5e8509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:4e:33:81:b9:81:b2:b7:c1:69:57:f6:38:
6a:9b:aa:7b:56:87:42:f9:57:3d:c7:86:7c:5f:db:
46:db:0c:cf:b5:d6:0f:1e:07:18:99:93:4b:44:10:
95:05:d0:d3:dd:51:7f:c5:28:d6:5d:df:e8:47:29:
1e:da:76:15:e5:50:1d:49:3a:5d:de:78:87:ac:88:
ef:21:0d:c7:f8:30:b0:7f:99:ef:5d:ee:b1:0b:90:
31:30:c9:4c:c4:69:8d:8b:aa:ab:31:97:0b:6f:e7:
64:09:bf:64:71:51:07:ec:24:9d:25:74:38:46:46:
08:cb:df:93:a2:2a:15:cf:7d:92:6f:68:d0:45:ec:
43:20:2d:3f:f9:fd:5c:19:51:3d:e0:36:ce:d7:2c:
f6:7d:64:92:a7:a5:df:22:96:0c:12:dc:19:8e:9c:
f9:53:7e:98:af:dd:68:8e:50:cb:47:69:29:76:8f:
77:d0:36:46:86:7d:04:ee:53:09:e8:12:b1:6f:0e:
31:bf:4f:73:ef:0c:0a:ce:0d:59:a6:cb:83:12:a9:
fc:d3:79:7d:14:b9:1b:28:bd:67:72:d1:7c:86:2a:
8b:74:d0:ce:69:93:09:f0:8a:5d:66:03:6a:c7:5b:
7a:be:86:23:ef:06:d3:dc:3b:60:97:13:b6:3e:b0:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:03:6D:17:3B:13:7D:4B:DA:5C:C7:4C:BE:6C:1B:FC:5E:85:09
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0e:10:1a:45:d2:be:c8:bc:8f:82:04:74:0e:cf:1d:c4:d8:
ac:c0:2b:e3:d2:4c:e0:33:50:01:7b:af:40:0e:d8:4d:da:ca:
f6:49:e4:98:e5:d1:ad:c5:30:33:bb:4c:2f:bd:6a:52:30:14:
48:02:79:06:8d:31:ab:5c:45:d0:47:bd:d3:a8:18:ee:78:fa:
67:83:2d:b4:1b:59:a3:80:dd:da:43:3a:3d:18:e9:f2:3a:fd:
ff:6d:be:13:aa:82:1b:74:87:32:7a:eb:84:b8:b6:b6:3a:9f:
b9:78:b5:31:f7:22:be:cd:76:6e:73:da:8f:5e:9d:23:af:37:
bd:82:85:71:0d:ca:c3:3f:12:02:5e:ad:70:2c:0f:c5:7e:d9:
42:98:e0:5c:ef:0f:bd:ec:ca:7d:1c:5d:73:a9:3f:f7:bf:3d:
b6:46:e4:c9:18:60:b3:96:1f:c5:38:26:e3:04:05:70:15:04:
02:f0:33:2c:4b:1f:8f:d8:2d:c3:d1:a5:c0:ad:82:94:c7:f4:
0d:5e:7f:e6:1a:76:4b:cc:38:06:fe:5f:98:d8:33:e9:c7:a3:
ab:22:90:4c:e1:02:53:39:91:72:ed:af:e1:b0:ad:9b:16:a2:
df:3f:b5:61:df:9e:5f:4c:36:13:01:d8:ed:ad:e8:5b:39:d3:
2f:1d:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:01:41 2026 by rpki-client