Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: GtsFyMBC2viH4RwBjql7xniuy8kAFd1/fLZFBkBITGo=
Subject key identifier: ED:75:BC:0C:B7:75:B4:EA:E3:4A:C8:A2:9D:8D:A7:48:A4:0A:57:8E
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 01A0D4943B64E3802FFAC8BC76FA9BDD17F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1767
Signing time: Thu 24 Sep 2026 18:01:19 +0000
Manifest this update: Thu 24 Sep 2026 18:01:19 +0000
Manifest next update: Fri 25 Sep 2026 18:01:19 +0000
Files and hashes: 1: MEIc2bGt5e__2EYZcQgjrWD4duM.roa (hash: 9JsE0ryMFAES2iHyGEPNb9NzGX6vqAC7Vkax56Cn3Do=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: oMnFLDilce51smJjh8lFpYMbIHbVhwNete828DNEYVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:3b:64:e3:80:2f:fa:c8:bc:76:fa:9b:dd:17:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Sep 24 18:01:19 2026 GMT
Not After : Sep 25 18:01:19 2026 GMT
Subject: CN=ed75bc0cb775b4eae34ac8a29d8da748a40a578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:e0:7d:07:93:88:62:a7:fc:53:8c:70:1d:
9e:18:16:e4:f8:e1:4b:e0:94:10:0b:f4:fe:65:8b:
4a:f3:d6:ac:f5:d9:43:2d:7d:16:2c:09:c2:27:71:
bf:7c:73:da:9d:ff:fc:95:d5:b1:78:e1:bf:ec:a7:
43:c1:51:10:fd:49:fd:dd:21:79:fe:e0:ae:f4:9e:
7c:89:37:6a:f2:5a:01:fd:74:9b:8e:50:fd:68:47:
17:32:71:30:d3:bc:ab:05:20:8b:7c:fc:6b:9b:76:
77:ec:ec:2d:24:78:fa:10:de:4c:df:56:03:31:5f:
d9:46:53:e5:39:7a:b9:c6:3a:41:92:a1:2d:46:8f:
0b:ce:ca:8d:3e:d5:28:8e:c7:0f:71:f9:e2:f3:c1:
f8:15:66:55:f3:5d:58:dd:58:1e:64:6d:61:e0:bb:
62:03:f7:a4:d5:7b:5d:26:c9:31:74:9e:8e:da:c4:
85:5c:7c:96:45:0c:43:2a:17:53:33:eb:dd:d5:61:
9e:87:f8:31:c9:5c:56:b6:f4:89:28:ea:cc:22:c6:
1e:48:09:eb:3b:4b:0a:68:02:cb:7c:cb:c2:fc:0c:
28:8a:82:48:69:15:1b:23:95:1b:e1:ae:1a:0f:7f:
c6:7e:98:9d:24:3a:5c:3e:fb:d3:cf:73:ac:d0:63:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:75:BC:0C:B7:75:B4:EA:E3:4A:C8:A2:9D:8D:A7:48:A4:0A:57:8E
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:92:dd:73:72:ed:0b:a1:e0:06:ea:25:5c:c4:7a:a1:e4:
98:f1:5d:3a:cc:72:2c:95:79:4e:71:c8:c7:57:a0:35:13:56:
7f:c1:ed:1b:66:bb:0b:5f:64:44:f4:29:d1:97:24:03:22:28:
57:e4:5d:47:33:29:b7:14:f5:5e:f8:4d:fa:c4:a6:71:04:70:
74:8e:75:78:03:94:c7:50:1f:41:f8:a4:bc:1e:b4:04:77:c9:
a6:66:a0:8d:4b:28:8f:bc:e0:4c:76:7d:5d:c4:98:fc:cf:f3:
9a:49:00:c5:3b:88:91:2c:5e:44:7e:6e:82:af:9f:4b:e3:7d:
8a:f8:75:59:8d:82:21:c0:aa:49:1b:99:62:df:1f:2f:51:25:
19:bf:46:e9:b2:4e:1f:40:46:b8:8e:dc:f8:7b:06:c6:f1:1b:
0f:cf:70:fa:a5:1b:ad:49:6c:25:bb:bf:4d:87:02:ba:4f:71:
dd:b5:2e:43:27:17:37:f3:ea:20:83:aa:11:57:a2:e8:b3:3b:
23:d8:06:f3:49:ba:68:ec:55:63:bd:c8:37:7c:39:18:e1:16:
81:df:4b:01:36:a4:d5:dc:7a:66:5e:85:46:a0:bb:6b:b1:12:
fb:3e:57:ea:e9:49:f9:ee:9d:9e:28:7b:ff:bd:92:90:77:f5:
69:61:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:52:45 2026 by rpki-client