Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
File: bXCSMh13tuXct8pQXXQ6I4AI1PI.mft (raw, json)
Hash identifier: 1ZIjqzVZmKYhBxn7a/6ia0srA1PLcIuAXUa1p5kND7g=
Subject key identifier: 29:91:03:CD:DB:95:E9:C7:FD:20:56:7D:D9:F2:00:23:19:BA:67:43
Authority key identifier: 6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
Certificate issuer: /CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Certificate serial: 019EC17F8D0199FC6CBE7D5545D3093EFA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
Manifest number: 4D
Signing time: Sat 13 Jun 2026 15:00:22 +0000
Manifest this update: Sat 13 Jun 2026 15:00:22 +0000
Manifest next update: Sun 14 Jun 2026 15:00:22 +0000
Files and hashes: 1: 5Bh9FgmflHXxe5GmPRz8PVD3zfw.roa (hash: kDLz5Pnu2hEMAIwf6lkfKB1WnkyFIe+sVCyOKc/QTLc=)
2: bXCSMh13tuXct8pQXXQ6I4AI1PI.crl (hash: 4Z07z6eTWfN2VMM9dRsuymKn3wMpV6XzCDwimqVCX1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:8d:01:99:fc:6c:be:7d:55:45:d3:09:3e:fa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7092321d77b6e5dcb7ca505d743a238008d4f2
Validity
Not Before: Jun 13 15:00:22 2026 GMT
Not After : Jun 14 15:00:22 2026 GMT
Subject: CN=299103cddb95e9c7fd20567dd9f2002319ba6743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:82:2d:4a:f6:0b:7d:40:ce:23:c6:c1:06:
12:5e:4e:ad:58:e8:3f:14:a7:8b:d0:fa:e3:c3:cb:
93:05:48:28:cf:93:81:b5:90:9e:50:d7:88:40:94:
0d:8e:28:52:36:65:86:9e:1e:16:5b:9d:ae:23:2a:
6e:b6:55:5d:42:a9:c6:68:68:3f:2b:50:72:17:cd:
6a:20:31:b9:6e:9a:3f:e4:88:b1:1f:a4:7f:92:2c:
5b:38:a9:70:63:29:23:c2:32:1c:91:3e:bf:cf:e6:
4c:36:85:d8:4b:d8:ac:f2:ff:37:54:5d:6c:57:09:
0a:f8:da:c7:c9:db:7b:8b:72:e3:d9:4a:bd:8a:d7:
49:8c:98:d0:56:bd:5e:6f:88:2c:97:a6:ae:0e:91:
6e:c6:46:89:c3:11:13:1d:f8:75:ee:f9:eb:cf:49:
83:a9:76:f2:70:99:c9:b7:51:3f:95:0c:6e:28:67:
8b:31:02:ac:b6:e6:e7:6d:a2:e2:89:ab:15:8e:bc:
12:45:4c:1c:8b:a0:b5:75:56:42:be:1f:db:7d:d8:
15:60:57:3f:59:81:4c:80:40:65:23:ec:81:de:22:
58:ca:4f:7d:0d:e4:4a:2d:d2:8d:93:00:ad:ae:64:
d3:7b:93:d7:0d:43:b1:bc:d7:0b:26:30:3a:30:8d:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:91:03:CD:DB:95:E9:C7:FD:20:56:7D:D9:F2:00:23:19:BA:67:43
X509v3 Authority Key Identifier:
keyid:6D:70:92:32:1D:77:B6:E5:DC:B7:CA:50:5D:74:3A:23:80:08:D4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXCSMh13tuXct8pQXXQ6I4AI1PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fbf13e-e25b-497a-be55-3847f4f24ea7/1/bXCSMh13tuXct8pQXXQ6I4AI1PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:d9:e7:9f:43:1d:3b:a3:b9:f0:86:6c:77:5b:0a:13:93:
af:ec:ba:30:22:6f:3d:cb:18:c9:68:88:4f:a1:46:9e:44:0e:
61:83:8a:d8:a4:2a:bf:be:c1:90:79:d8:08:4e:c5:d2:bd:a9:
f1:11:a3:2e:65:90:0b:5d:60:2a:5f:fe:44:92:9f:e5:73:23:
74:99:f5:43:99:ae:9d:06:14:47:22:13:22:c0:7c:ea:ad:15:
85:f1:72:95:f9:05:c5:65:ed:1f:2e:13:69:b6:5c:9a:5c:91:
d1:67:6e:bd:48:40:da:a9:f0:e0:9a:f7:be:4c:23:c5:3c:a4:
7e:0e:1c:d3:a1:25:30:a5:61:fb:20:85:76:32:95:45:cc:ef:
78:95:78:24:ff:13:06:99:63:77:bb:a7:ad:09:e8:91:da:47:
b1:db:43:bf:56:bb:1b:b0:ef:8e:fe:73:25:c0:30:29:b0:ae:
8c:fb:78:89:19:3f:ba:13:d3:b9:cd:75:03:74:a8:00:af:a1:
6c:ae:09:e6:68:46:9b:e1:02:2e:c0:e9:a8:ae:86:3e:82:e5:
53:82:08:a9:0c:45:8c:1d:34:6a:6b:a0:15:cb:4d:98:13:dc:
52:08:79:e2:48:fb:8f:9c:9b:c3:8c:91:46:a5:78:98:c0:64:
89:06:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:16 2026 by rpki-client