Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File: bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier: lBVFErYYQc+YdPt095/nts8dGm1ReZ2b+W5oQgOc3kU=
Subject key identifier: 4B:F2:5D:0B:18:29:5A:B6:E0:CA:66:34:B8:AC:2F:04:82:63:C7:2A
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer: /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial: 01A1A894907C058B9FF0847825D85B154E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number: 1ADD
Signing time: Wed 04 Nov 2026 22:01:10 +0000
Manifest this update: Wed 04 Nov 2026 22:01:10 +0000
Manifest next update: Thu 05 Nov 2026 22:01:10 +0000
Files and hashes: 1: YQR-M13FITu11JiiH0aP1_gjSMk.roa (hash: NMePy6MATxLOKWKo4OhLjfjmDVEUev8l7cfH0WAc4I8=)
2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: 7464o1TlhXoKZGjcTH7IMVGtgbjHmSKE3Cp8URZZbnk=)
3: oo3l14bHiK5EzB9mjkbAjeez7AU.asa (hash: LV6ke9Lg4BIOwUZIuFQOzI8UUwUkpkbRc2eIy7aXbD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:94:90:7c:05:8b:9f:f0:84:78:25:d8:5b:15:4e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
Validity
Not Before: Nov 4 22:01:10 2026 GMT
Not After : Nov 5 22:01:10 2026 GMT
Subject: CN=4bf25d0b18295ab6e0ca6634b8ac2f048263c72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:b4:42:22:fb:d0:58:65:65:7b:11:37:6a:
f0:72:1c:d0:e4:70:8e:43:a1:93:f6:2b:a1:5e:3a:
e6:d1:1f:03:5e:78:7e:59:44:7c:fd:33:4c:c6:37:
4e:8f:2d:23:77:df:e4:0c:b6:51:35:70:c2:92:e8:
b8:ab:3f:45:67:5a:49:74:ec:3f:ce:e6:7c:90:0f:
df:7d:91:ee:18:31:78:8d:64:d1:fd:08:aa:52:e2:
ef:75:00:92:b8:3c:de:09:17:bf:6d:e4:e1:eb:5d:
7f:a6:00:c9:44:e2:be:56:3e:ab:b3:02:e3:8a:90:
e0:08:61:11:19:22:a0:a0:5b:18:64:4f:07:4d:f5:
6f:ea:f2:b1:17:e4:0f:8b:c0:08:e1:ea:43:a1:9a:
cf:4d:d5:2e:c8:a5:d2:eb:08:b1:25:04:c9:a6:4a:
a8:b8:c1:24:65:0a:5a:cf:c4:ab:10:cc:f2:ab:6b:
ab:51:b3:69:77:e6:7c:f7:48:52:9f:fc:30:be:24:
15:90:a4:64:4e:53:ca:4d:71:aa:2d:43:40:a4:71:
e9:be:42:6f:a5:87:d0:2f:56:68:0d:9d:4c:af:d5:
da:86:9a:04:0a:50:0b:50:0c:3d:de:f9:d4:13:ab:
a8:35:e0:d9:40:58:01:45:6c:02:6d:17:9f:8c:4b:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F2:5D:0B:18:29:5A:B6:E0:CA:66:34:B8:AC:2F:04:82:63:C7:2A
X509v3 Authority Key Identifier:
keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:da:50:d8:40:f9:05:d6:45:d7:8c:06:8a:9e:5c:7e:7c:a4:
c8:fa:71:a8:c5:58:73:07:67:f4:e8:59:1d:ec:14:15:ef:43:
b7:13:5d:6b:10:6a:20:82:c6:33:b8:fa:56:ad:03:5d:2e:f9:
6f:c7:a6:49:23:45:91:8f:6d:c6:1f:01:c2:1d:3d:c3:45:18:
3b:dd:6e:30:bd:ed:36:51:c8:95:cb:78:19:69:e1:bc:41:69:
37:5e:88:50:7b:34:a3:4e:0b:30:90:f8:de:08:fc:32:8a:7d:
9c:eb:aa:fb:f3:50:9c:9e:6c:53:c1:a5:87:47:d6:c2:bc:f9:
fc:67:aa:0b:1b:ad:88:1f:96:71:be:3d:6d:c7:bf:d9:ed:86:
8a:78:f4:c3:2d:bf:59:69:4e:83:95:0e:81:21:d6:90:65:a7:
4f:fb:58:d9:8f:c7:d9:c1:48:88:c8:f8:17:07:f9:9e:fb:07:
04:8c:cf:44:ae:6b:41:d7:be:0f:01:28:19:97:af:0a:61:a5:
6f:53:f8:62:91:44:cf:5c:aa:fa:68:74:d4:a8:d7:4f:96:73:
55:30:fa:86:c5:00:07:84:89:71:85:0d:19:5d:55:25:8c:18:
fa:8e:68:87:27:75:36:1b:2a:d2:53:43:21:0b:2e:91:8a:21:
20:c9:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:15:47 2026 by rpki-client