Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: 0670u7ek/yMjBCP/Hc/sozCqgiK+m4Erf6dHrDLKWco=
Subject key identifier: D4:55:29:6E:03:CF:72:92:10:0D:0C:91:A5:DF:66:BA:40:80:C1:69
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01A0C47B6C5D0CFF8308162F65A579337706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 15:00:17 +0000
Manifest this update: Mon 21 Sep 2026 15:00:17 +0000
Manifest next update: Tue 22 Sep 2026 15:00:17 +0000
Files and hashes: 1: WK4FeKC76gPpIjRhyORnL_0frZU.roa (hash: vdHNIiugtJJb19ih4gpWPEIdemNrQgRmwJqyp8Z7ys0=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: BiDZLzPs/7R8UHQXPTie1Xnkp4vw5wOTE4xSXc075dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:6c:5d:0c:ff:83:08:16:2f:65:a5:79:33:77:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Sep 21 15:00:17 2026 GMT
Not After : Sep 22 15:00:17 2026 GMT
Subject: CN=d455296e03cf7292100d0c91a5df66ba4080c169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:f9:79:82:84:c4:dc:63:de:06:75:e0:0e:
17:81:d6:c1:92:f4:c2:a6:fe:8e:a4:e1:5c:44:46:
67:95:93:06:9c:8b:c3:d3:ff:b2:32:98:1a:4e:17:
69:e9:09:ea:6b:04:30:eb:01:22:33:b9:2a:81:f0:
b7:16:1a:d8:77:73:1e:06:28:0e:27:2f:43:2e:ff:
35:d2:02:24:71:a6:9c:a0:2f:5a:d8:84:2c:da:71:
e9:45:95:07:c6:89:2c:8c:ab:4b:33:91:87:44:57:
92:a1:47:3b:fa:c4:4c:4e:dc:d7:80:43:3a:42:24:
6a:f1:56:54:3f:5d:38:c8:55:b5:21:6b:66:b7:9a:
c9:05:9f:da:01:27:3e:93:df:4f:3d:25:95:de:28:
f3:47:25:e4:00:ee:4a:72:74:1f:bf:a9:69:2e:6e:
22:b9:ab:cb:80:12:04:44:c9:f5:fd:28:09:d7:4f:
4c:cf:ab:55:0e:d6:8e:f4:2a:4d:b5:ba:55:a7:b0:
e8:6e:11:a9:85:70:4b:8c:66:22:f7:be:a2:bc:d0:
65:ef:53:d5:03:6c:37:b3:6d:3f:5e:b9:83:af:7b:
35:bc:9a:9c:cb:4e:f5:8b:cc:16:d5:d6:0e:02:03:
b4:84:52:58:78:68:60:fd:43:02:c5:68:e9:8d:fd:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:29:6E:03:CF:72:92:10:0D:0C:91:A5:DF:66:BA:40:80:C1:69
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ea:0c:64:98:a7:23:ff:1b:80:37:01:e4:48:6d:bd:62:90:
b2:e5:64:6a:27:1b:87:18:e6:17:61:27:3d:6e:ca:d9:00:c4:
14:0c:5e:65:0f:1e:8b:10:a4:36:cf:60:d9:96:ab:26:fb:02:
b2:de:e8:b4:17:31:50:09:99:25:36:3b:2d:c7:60:d8:df:e9:
0e:4b:0f:c2:af:69:cb:41:ac:ef:ec:8c:8d:b4:43:b4:4d:f1:
08:59:ba:46:24:7b:f4:f3:64:a4:f4:6c:57:7e:34:b0:11:02:
f3:3c:75:d6:bf:dc:e8:ef:35:10:09:66:a9:dc:20:04:6b:a0:
a2:a4:0d:ff:84:49:9a:15:ec:25:81:95:d9:49:8e:49:88:da:
62:0d:95:f5:88:98:19:de:f6:fe:67:7f:49:be:32:f0:bc:f3:
c6:e5:d8:1c:c5:b1:ad:aa:5b:0e:93:27:74:1f:51:57:c0:3b:
ab:22:a9:c3:ae:45:ba:9e:f7:67:49:e9:ff:7e:1a:98:02:76:
70:e8:66:75:87:22:fd:2d:28:8d:6c:51:c8:61:a2:e8:ff:42:
ca:e9:81:69:94:28:c1:38:1d:24:6a:8e:fb:7a:fd:4a:46:29:
e4:a7:19:ed:51:1c:a7:a4:36:71:0d:14:7f:43:75:6f:6c:d5:
eb:1c:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:17:43 2026 by rpki-client