Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: r2AXsGRn3WcYY0ho4KHLSbSglp5uRJwh4ryOXU4olls=
Subject key identifier: 15:A1:3C:E5:07:F0:2A:B5:BD:D6:FF:11:51:3F:4E:13:E7:93:B2:87
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 01A0C8FCE4C2AEF1A2339F8DE8BE021B1F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: 015A
Signing time: Tue 22 Sep 2026 12:00:11 +0000
Manifest this update: Tue 22 Sep 2026 12:00:11 +0000
Manifest next update: Wed 23 Sep 2026 12:00:11 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: nvBKQgfyVsaGvIjq2/XnBoJcHZ5tVh0LUK0JI9LTJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:e4:c2:ae:f1:a2:33:9f:8d:e8:be:02:1b:1f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Sep 22 12:00:11 2026 GMT
Not After : Sep 23 12:00:11 2026 GMT
Subject: CN=15a13ce507f02ab5bdd6ff11513f4e13e793b287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:26:38:97:f8:96:3c:9f:6b:57:89:3a:a4:
30:a1:3e:b1:90:0d:2d:bb:c1:5c:02:8f:fa:fd:6b:
f1:92:9e:f9:08:be:f6:64:82:00:55:6a:e1:c7:67:
e2:b4:d0:c9:c0:91:f6:66:27:36:5a:67:2d:d0:66:
74:06:03:b0:16:15:5a:c3:ae:61:c6:b9:a0:aa:6a:
c0:04:ca:ed:a5:3c:90:b9:3b:91:74:d3:47:79:7e:
99:f8:df:c2:8c:4d:09:ae:e6:d1:9d:3e:1d:5f:d4:
46:13:2f:f8:87:c1:ef:17:4d:16:92:7b:ef:01:6e:
c3:d2:58:33:49:c3:db:9a:51:4b:8f:f4:c6:c7:2a:
e2:b3:62:41:2d:bc:90:62:23:e9:b9:3a:cf:bd:89:
06:a8:8c:9a:a1:c0:41:96:d8:0f:c8:19:ec:a9:19:
ae:4c:a1:c6:6d:93:5c:37:17:8c:ef:41:ba:98:ca:
dd:50:06:18:45:bd:b4:38:ae:4f:db:fe:cc:26:d6:
86:80:0e:b0:5b:e7:cf:8e:98:95:a7:0e:08:d4:27:
e0:18:0e:0b:4f:9e:c8:e6:3e:5f:1f:20:15:3b:77:
ea:5d:ab:85:24:e6:51:15:53:6d:ee:b6:f5:85:59:
99:8c:e5:64:2f:f9:99:07:04:ee:61:dc:30:74:9c:
48:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A1:3C:E5:07:F0:2A:B5:BD:D6:FF:11:51:3F:4E:13:E7:93:B2:87
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d0:67:0a:13:1f:50:0b:5d:fd:40:4e:66:4b:68:39:d9:ac:
c7:ec:99:89:c8:f2:d8:84:75:54:ec:5d:13:c0:0b:05:3f:46:
6a:aa:27:6e:ce:6d:33:32:9a:7a:f6:4d:26:ae:e0:eb:c7:52:
79:69:34:87:91:63:a8:55:6d:ac:f6:1c:ad:ef:e6:e5:bf:1e:
e5:25:6e:9e:76:8b:53:b0:f1:84:a8:84:64:96:57:85:09:99:
f0:5d:f9:ba:f5:f9:31:d9:0d:45:ad:83:fa:d3:f5:6e:a2:00:
ec:ed:fd:7f:e4:e5:27:4e:85:8d:69:1b:d9:6a:20:1d:36:75:
2b:3d:51:f9:0d:f4:2f:09:a7:f2:d1:c4:7e:2b:d2:64:bc:48:
45:d7:15:bd:31:7e:c5:75:3c:ea:a5:43:4f:e1:4c:46:80:0a:
8d:49:d8:3f:5e:a3:c6:ad:57:de:d9:65:13:d3:b9:a8:4c:42:
33:ee:1e:ed:8d:d6:bc:d5:d7:46:7a:6f:5a:e5:e6:d1:33:39:
b6:77:3e:e6:e1:56:03:7b:31:21:e5:d5:e3:8e:0c:b5:8b:ed:
e9:2a:d7:61:f8:c2:16:11:da:0c:57:e9:42:dc:0b:47:54:1b:
bb:cc:2c:24:40:f2:08:0b:44:2d:4c:bd:c8:57:5a:81:c0:d1:
80:c4:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:40:20 2026 by rpki-client