Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
File: bVhePZVIlPD5w42RWoYnGlJ8eE0.mft (raw, json)
Hash identifier: 2+q+QyPGkABUnFTrXYnPoiwcYK3bPvUHX0K2PHiAhT0=
Subject key identifier: BB:95:21:29:F6:98:B2:E2:73:F1:D6:32:25:3F:02:0F:CE:1C:AC:B1
Authority key identifier: 6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
Certificate issuer: /CN=6d585e3d954894f0f9c38d915a86271a527c784d
Certificate serial: 01A0F4C467251943915A1645BF4D931DF5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
Manifest number: F8
Signing time: Thu 01 Oct 2026 00:01:47 +0000
Manifest this update: Thu 01 Oct 2026 00:01:47 +0000
Manifest next update: Fri 02 Oct 2026 00:01:47 +0000
Files and hashes: 1: bD6xx0TpgrnIB9ZvoVqPvC8PyRc.roa (hash: QaBar+n/MedavkTYqGBlNpBfEOyuab6hMYyoPnfKNHc=)
2: bVhePZVIlPD5w42RWoYnGlJ8eE0.crl (hash: ftckw4xOCDIOdo06SeGZpX/i+nuvYqeyuq4A6KNSX/s=)
3: dLMRQr4uK0MnxRDLYTdzEz1CvR8.roa (hash: fblIO6CiiR4a6/6Bya7xSY9w9n4FH+8mcCxhUe8CHEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 00:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c4:67:25:19:43:91:5a:16:45:bf:4d:93:1d:f5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d585e3d954894f0f9c38d915a86271a527c784d
Validity
Not Before: Oct 1 00:01:47 2026 GMT
Not After : Oct 2 00:01:47 2026 GMT
Subject: CN=bb952129f698b2e273f1d632253f020fce1cacb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:18:96:00:7b:7d:bf:fb:f7:ee:34:07:92:
c4:56:82:aa:2e:62:37:35:4d:18:16:5d:29:03:10:
a9:0a:73:09:41:f3:4f:ef:a0:13:18:33:8d:a7:94:
e8:2a:de:ad:31:1c:f2:9e:dd:b8:be:b0:3d:05:a5:
88:66:64:5a:1d:df:71:2a:f0:fc:94:6f:73:63:3f:
d2:47:86:2f:ff:ab:d3:d6:76:75:5e:ce:08:e7:1d:
5d:68:77:bd:14:70:a3:8b:34:63:9b:f0:57:f7:09:
0f:51:d6:0b:ab:37:54:56:6b:5e:4e:1e:5c:08:16:
94:47:28:c4:83:16:51:bf:93:ac:1a:7e:05:e8:1a:
4b:8c:85:78:ee:3c:97:c8:98:68:b3:6f:48:36:94:
50:c5:ea:1a:ee:01:c2:b6:20:fa:26:3b:10:9a:b6:
f8:1e:12:c5:b3:56:06:4b:17:04:8b:8d:f8:68:4f:
47:04:75:4e:51:91:14:88:1d:6d:f9:ba:4e:03:43:
ff:8c:5e:3c:bb:0a:e6:35:26:48:71:ce:90:fa:74:
78:c1:2a:74:aa:b6:be:fc:9d:db:f7:97:23:53:6e:
e4:d2:d6:cc:33:f5:5e:73:1d:47:d1:61:4e:87:6d:
58:21:c6:5c:94:4a:aa:5b:2c:3f:7c:04:54:f5:8a:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:21:29:F6:98:B2:E2:73:F1:D6:32:25:3F:02:0F:CE:1C:AC:B1
X509v3 Authority Key Identifier:
keyid:6D:58:5E:3D:95:48:94:F0:F9:C3:8D:91:5A:86:27:1A:52:7C:78:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVhePZVIlPD5w42RWoYnGlJ8eE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/bVhePZVIlPD5w42RWoYnGlJ8eE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:af:56:01:78:4e:4e:2c:3b:9d:95:75:3f:d1:83:f3:04:48:
5c:a7:73:3a:ee:fa:38:b7:d3:81:f3:91:cb:26:be:ca:2b:3d:
88:1a:b4:46:65:8a:89:97:37:01:3e:62:49:18:c7:0a:9b:3a:
14:75:33:18:e1:77:4b:c3:bd:42:c8:dc:a0:88:1a:89:4d:50:
81:3d:3e:bc:2d:8c:42:08:63:52:7b:f5:b3:30:88:52:04:eb:
b1:67:29:d9:d6:39:94:e2:e7:fe:5f:95:db:1f:52:03:a2:f4:
fe:a7:d5:42:a5:52:3a:ad:ef:50:d2:fd:35:be:94:a0:8c:87:
30:ba:29:1e:6c:57:20:d9:f6:88:fc:0f:29:b1:c3:4a:6c:4e:
66:aa:1a:92:0a:99:d8:66:1b:e4:cf:27:74:2b:4a:0a:53:62:
24:6c:18:15:9d:fa:73:01:fb:c7:a0:aa:14:e9:d9:34:d7:05:
db:2b:4a:5a:a2:08:79:be:fe:16:cc:01:64:33:2d:39:e3:9e:
a7:35:4c:9a:f5:43:a8:32:60:65:ce:0c:68:b7:79:10:bc:d6:
e1:d8:cc:19:dd:21:04:77:41:cb:47:35:e6:dc:6f:71:10:61:
05:f7:81:75:02:e4:2b:fd:94:c8:98:8a:e4:03:b7:22:0d:f3:
cd:0d:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:22:31 2026 by rpki-client