Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: 1otyHv8sRJJNRhLT1Rf1JjVMcMTmtx3NlGzPTWeoDas=
Subject key identifier: 91:CC:3D:5F:38:80:E3:13:C8:66:F0:5B:53:2A:5A:1F:FC:29:A4:3A
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 01A1355A33C3C79B3731F756C4AA862A101B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 1AAB
Signing time: Tue 13 Oct 2026 13:01:06 +0000
Manifest this update: Tue 13 Oct 2026 13:01:06 +0000
Manifest next update: Wed 14 Oct 2026 13:01:06 +0000
Files and hashes: 1: 8t3JN_7LDw-CGs7GhP5-c9YQT3Q.asa (hash: vle8JAoc+z41qSzbAnkjsok+oNKxAJh14QSzgoReOFc=)
2: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: GsRoFKRHt0qZfuHXXhxPbvRNSCGvlYxGW+4qW9gcqr8=)
3: HlyeT63d_hTRQoUdqffq7QL-QuQ.roa (hash: x2NNm6m6wU3oFBfBTa5MizhpP5bdnw5qPXYrszPxhbc=)
4: MUhm7sf-jo5IKEGBGo0-Z-Y1dmw.roa (hash: 4wqf+3mVFGC07sq2JR8okYP1Xx2LwUoWzZSDpdV1+vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:33:c3:c7:9b:37:31:f7:56:c4:aa:86:2a:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Oct 13 13:01:06 2026 GMT
Not After : Oct 14 13:01:06 2026 GMT
Subject: CN=91cc3d5f3880e313c866f05b532a5a1ffc29a43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:9c:0b:ff:15:9d:7b:25:65:93:ad:55:87:
37:2d:4c:17:20:17:83:38:ef:cf:62:72:ff:a5:d0:
9e:f3:21:ae:0d:ac:4a:a7:2c:df:dd:78:df:34:eb:
25:08:65:d1:9b:97:e2:81:97:73:1d:29:2f:24:15:
f6:c3:6d:3c:e0:bf:a0:40:78:6a:19:20:7d:8d:13:
60:32:3f:cd:a9:e9:e1:e9:45:b0:81:3d:b7:3e:d0:
95:40:82:55:41:ee:a9:cf:e1:02:26:81:d1:d7:44:
26:68:a0:61:43:f1:d5:5f:3e:4a:ad:a9:2f:87:cb:
17:ce:05:69:69:c5:c6:a6:a4:ad:9d:fe:f8:0e:f4:
c9:67:40:02:81:48:fd:61:4a:60:14:30:cc:0b:de:
81:b6:af:27:1a:f7:e2:ce:b7:a6:17:78:32:ea:bd:
98:8f:b4:5d:da:52:6f:f9:b2:bb:a1:26:5c:1f:a9:
ab:40:ec:1d:bc:96:8f:85:b5:bd:88:f7:5e:a0:6b:
65:e8:12:94:3a:df:65:df:8f:f6:93:50:98:df:15:
24:a6:d8:8b:8f:76:0f:94:14:2c:20:90:95:5d:91:
0a:26:e2:ca:47:45:ec:f5:43:c0:68:a6:ce:99:11:
91:93:cc:17:99:79:48:ce:0a:f0:08:cb:c2:38:33:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:3D:5F:38:80:E3:13:C8:66:F0:5B:53:2A:5A:1F:FC:29:A4:3A
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4b:7f:05:86:4c:1b:aa:67:ae:77:4c:2d:97:fc:6a:a1:ff:
a8:c8:a1:8b:76:af:02:66:19:3c:3d:8e:42:73:ca:99:44:66:
a6:b9:b0:6c:27:29:9a:ee:f6:41:20:f8:bd:b4:9a:cc:ca:17:
86:48:f0:bd:af:6d:7e:ed:60:b7:78:36:43:fe:f7:f3:31:3a:
da:4e:72:96:12:cc:8d:30:68:8d:03:43:68:e3:41:9c:99:99:
9f:ee:84:87:fd:7b:d2:3a:05:ce:af:b0:ac:e7:60:72:63:fb:
8a:1d:92:dd:ed:a3:e8:22:8b:03:e3:54:05:4a:df:cf:ec:7a:
6f:99:27:93:f1:cc:89:80:f6:7b:ea:cc:1f:eb:01:05:e7:32:
1d:ef:70:f4:a5:40:b7:d0:07:98:42:6e:f5:f8:ff:83:8c:b7:
da:7d:ef:df:3b:65:8e:ee:f1:50:2a:42:de:3b:f5:d8:0e:19:
72:b9:8e:a1:55:bc:69:14:6e:78:17:eb:71:34:6f:de:f3:53:
cf:dd:15:3a:e1:46:88:4e:d9:c3:5c:f0:ec:2f:dc:27:89:bc:
ac:12:e4:b5:09:86:54:d7:3e:dc:5d:41:d0:54:d3:ea:5d:a8:
c4:96:66:b9:4b:a3:20:15:7f:33:a3:54:16:25:e7:c4:54:2d:
95:ac:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:13:53 2026 by rpki-client