Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: XywC066lSdI0yjMGpxlc1lsC6e+LJeXaQzwROKf2I6E=
Subject key identifier: F6:FB:2C:5D:E0:A1:5B:A3:94:10:C9:C1:5A:21:DC:20:39:0A:DB:12
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 01A0C9D8D38B70ED7A2383464F4725DB7E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 16:00:25 +0000
Manifest this update: Tue 22 Sep 2026 16:00:25 +0000
Manifest next update: Wed 23 Sep 2026 16:00:25 +0000
Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=)
2: CE438SQN80x5iPZkUW29526BgDA.asa (hash: K9IH+d5x5/jcdlcwMyd5/VZgpKUM+MzffZkVWLGjIE4=)
3: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: +np6wtmISRKS8pIkvjYnCP46wH0prri3BVhmExo6wqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:d3:8b:70:ed:7a:23:83:46:4f:47:25:db:7e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Sep 22 16:00:25 2026 GMT
Not After : Sep 23 16:00:25 2026 GMT
Subject: CN=f6fb2c5de0a15ba39410c9c15a21dc20390adb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:d1:d5:78:89:db:30:d7:ac:37:e8:d4:01:
57:85:1d:62:a5:91:57:a3:19:b8:92:3b:8b:eb:f7:
0b:ca:4d:09:34:c4:2e:90:7d:36:79:08:a9:33:f7:
fa:10:b9:7f:b3:11:fb:d8:87:01:3e:d5:40:48:f6:
2a:ed:34:e2:9a:4c:07:67:d4:71:3d:38:f9:8f:9e:
75:97:60:eb:8a:47:b0:54:cc:d5:22:1c:bd:3a:e4:
b0:12:c1:b8:a0:32:c6:a3:2b:9a:32:92:07:eb:34:
91:08:7c:ab:f4:5e:4e:72:a6:39:c7:74:72:c8:98:
1f:8b:7c:68:5e:68:d6:f1:89:63:70:de:2e:87:f2:
aa:cb:a4:f3:f0:e8:b3:a2:8f:0c:09:3d:6f:e9:51:
97:d8:83:01:a2:17:7b:f5:97:41:eb:be:5f:61:06:
a7:4c:33:11:89:94:76:77:89:0a:92:40:be:69:29:
0a:78:84:d5:d7:31:8a:23:4f:be:70:9d:c7:db:0e:
84:63:ef:50:2d:e0:a8:99:49:c1:47:05:79:51:45:
c6:56:32:93:5a:ee:79:e0:54:8b:6a:a6:e9:ef:f3:
01:82:9b:e2:68:cd:f3:e6:a3:24:6f:e2:9a:17:a4:
37:ae:14:0c:6a:21:d7:97:5d:1d:c0:80:b9:1a:ba:
61:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:2C:5D:E0:A1:5B:A3:94:10:C9:C1:5A:21:DC:20:39:0A:DB:12
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:27:74:e3:e4:cf:83:66:62:a6:51:da:ba:0c:ef:a3:8e:f5:
53:c2:be:00:3a:bf:e4:8b:19:b9:07:3b:eb:02:57:9d:cc:c4:
06:79:94:9d:f8:b7:41:a2:eb:c6:d1:1e:98:ea:d1:45:13:7c:
f8:2a:92:11:dd:64:aa:56:d4:c4:f4:44:bf:2c:27:d4:c3:ab:
c1:e5:b2:49:d4:f3:3a:62:94:94:6d:ab:c6:03:f5:02:88:f8:
51:ea:16:cc:67:01:43:2e:e1:3c:c3:17:36:f7:75:22:d2:82:
5f:4d:f2:63:44:77:5a:db:3b:77:25:6b:69:4b:33:f3:d1:e0:
d5:c0:18:02:84:80:86:87:2f:bb:d1:b5:ff:79:b4:46:d5:62:
3b:ff:05:2c:14:31:b1:4e:ed:62:f6:75:79:24:82:3d:e9:1c:
3a:23:fb:c0:ae:46:8f:95:d6:8b:c7:0c:ab:54:7d:46:9c:b1:
9e:22:44:ba:f6:1b:4f:17:d7:c1:02:1f:b0:08:90:6c:1b:10:
f7:5f:a3:67:1a:7a:23:71:46:a9:8f:64:c8:6d:88:22:06:34:
aa:0f:40:01:a9:11:20:80:bb:3c:34:26:c3:67:13:84:71:9d:
93:a5:5f:6f:ac:54:ff:c4:33:2d:7c:ea:b1:8d:2b:2f:e8:57:
17:1f:5b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:24:24 2026 by rpki-client