Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: 9NjAhwZGnZrWM5zX0d2Rp9pOCX98pqKhCJd8q9AKrMQ=
Subject key identifier: B2:F6:6E:C6:23:0F:09:E6:36:A0:8B:5E:75:82:76:0D:93:C4:FC:A2
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01A0C28D30BD0C30B751872B48C30955B211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 06:00:27 +0000
Manifest this update: Mon 21 Sep 2026 06:00:27 +0000
Manifest next update: Tue 22 Sep 2026 06:00:27 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: Oed6dHC5KinJmpOe6c2vZcimG6BP+bkLEWKGlek1ujY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:30:bd:0c:30:b7:51:87:2b:48:c3:09:55:b2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Sep 21 06:00:27 2026 GMT
Not After : Sep 22 06:00:27 2026 GMT
Subject: CN=b2f66ec6230f09e636a08b5e7582760d93c4fca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:12:95:98:08:24:60:7a:fc:50:20:58:c7:
d3:0e:cb:26:fd:37:7a:29:40:64:4e:98:cc:22:3a:
03:c6:4d:5d:0a:3b:a1:ce:44:de:d2:e0:99:bc:81:
ea:3d:a3:5a:67:26:e6:2e:e1:7e:64:39:74:1b:6f:
31:46:ed:32:2a:df:e4:e7:5a:db:c5:c8:67:2b:92:
9e:3a:7c:ce:d7:83:11:16:4c:63:5b:bd:1c:a7:c9:
cd:15:79:6b:45:c1:33:3b:b8:8b:60:3d:04:8b:b0:
fe:fc:4b:df:12:e6:8b:3b:26:50:13:53:34:ed:3b:
ec:78:aa:02:84:ed:07:3e:89:23:89:8b:35:65:b4:
69:c1:fe:5b:45:c6:ba:78:93:a1:83:69:1d:20:c7:
2d:c5:5b:c4:71:d2:cd:c0:b1:e2:89:85:59:40:56:
8a:7d:58:b0:51:6f:0c:de:e2:b3:9a:fb:2b:83:95:
96:74:89:d9:fa:28:4d:82:85:be:5a:c7:47:94:24:
49:a8:86:c6:30:84:96:16:6f:b9:f3:4c:e5:7c:af:
74:aa:ab:14:26:00:be:4d:7b:35:70:43:d3:91:c0:
6a:58:45:ac:b1:09:45:8b:2a:2b:19:75:b4:86:b0:
63:42:64:55:82:d7:7a:13:f1:f6:9b:68:e9:59:a4:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:6E:C6:23:0F:09:E6:36:A0:8B:5E:75:82:76:0D:93:C4:FC:A2
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:34:fe:c4:45:ca:25:4d:9a:8d:bc:be:54:e6:23:28:f0:8c:
07:64:16:91:74:d0:e3:29:fd:b3:4a:7d:c5:b9:f1:d7:1a:9e:
c4:a9:07:f6:d2:4f:3a:7f:66:fc:bf:dd:c3:2b:8c:52:95:0b:
7b:3a:71:62:b5:00:c8:65:2a:dc:dd:42:fd:29:4f:51:fe:18:
f1:b9:82:8d:21:fc:bd:dc:9c:17:be:87:68:c0:9c:c8:3b:37:
49:8f:f5:e3:72:e9:8a:80:28:c8:c7:ce:90:29:46:71:c2:55:
4e:3f:cd:f3:4f:bf:d6:1d:40:3b:42:d2:f5:d4:7e:3a:f8:f1:
6b:cf:f4:36:c8:17:51:2c:47:3c:ab:68:96:a4:6d:d4:cf:f1:
58:2b:f8:30:41:4a:d7:3b:75:a8:2a:dc:63:05:8e:5d:93:4b:
c7:47:1c:41:0b:d4:a8:13:a8:83:f4:bb:a8:3a:d6:7c:5f:58:
d1:11:20:e7:08:2b:3d:ca:90:cc:74:7b:a8:21:9e:d8:64:84:
49:08:f5:8c:7c:47:44:f8:29:d7:c9:55:8b:88:a4:ac:58:54:
9b:03:f8:76:e6:60:73:6e:e0:23:c1:a6:11:41:8a:8f:0f:a0:
ae:8f:ee:a9:e6:55:75:c6:1c:52:1a:bc:8c:3d:8f:57:93:97:
e3:4f:2c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:26:56 2026 by rpki-client