Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: 5w1vznfyyiJPewzsNwaLXMGsGLyTyt24Aw3DYEofgVc=
Subject key identifier: 50:A8:32:47:A2:D0:32:06:9C:FE:D3:E5:48:09:56:DF:8C:61:7E:54
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 01A0C21F36845BDABDB27032096C41C60EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 04D0
Signing time: Mon 21 Sep 2026 04:00:20 +0000
Manifest this update: Mon 21 Sep 2026 04:00:20 +0000
Manifest next update: Tue 22 Sep 2026 04:00:20 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: 9KcLH-08xp9bTu3iU1LcZBGH8Qo.asa (hash: 3lMyXLFpUnbxFEEAepRspDKIQvKIBFYX/ZM2xRZKoIs=)
3: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: cCJtgAHM+OzBCnBR2y4Jsg0zrhtMxCTZzdNbwp1YSQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:36:84:5b:da:bd:b2:70:32:09:6c:41:c6:0e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Sep 21 04:00:20 2026 GMT
Not After : Sep 22 04:00:20 2026 GMT
Subject: CN=50a83247a2d032069cfed3e5480956df8c617e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:65:dd:4e:df:cf:96:5c:ea:5a:14:7d:90:
e9:80:e1:8e:72:f3:9b:cc:23:4c:17:33:ac:88:a4:
f8:ed:8f:21:79:75:95:e7:cb:40:1c:f7:42:96:86:
d1:49:65:28:b8:ad:23:2a:c7:ba:17:3c:a8:30:c4:
22:38:ab:b8:cd:8e:9a:e3:91:7f:cd:fd:3f:01:49:
85:ea:68:db:b9:63:cf:17:cd:76:7f:f2:5b:09:45:
34:72:1d:ca:ed:7a:29:4c:29:46:ea:d1:68:90:f4:
a7:c0:9a:05:61:a4:e7:00:fa:93:49:36:c0:eb:d3:
51:12:c1:c6:ee:1a:b7:2c:07:56:5b:49:24:12:5e:
aa:47:1a:15:03:ce:a5:9b:3f:6f:91:31:2f:97:18:
20:98:d5:f0:27:ec:60:a4:74:51:61:02:c4:23:39:
e1:7c:97:28:29:f3:a4:8b:a6:4a:10:f3:9b:4a:9a:
be:e1:b9:68:2a:40:bb:b4:03:f7:62:00:aa:3d:82:
ae:8c:91:2c:f5:6a:f1:ed:d2:ad:a4:f5:00:ef:5b:
58:52:55:c7:0d:8a:f2:93:a8:02:56:bf:0f:7f:51:
e9:c6:10:3e:68:d9:04:36:a6:2c:61:9c:10:60:2b:
bf:38:19:b8:f3:5c:d8:d1:d6:83:7f:88:e7:69:72:
13:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A8:32:47:A2:D0:32:06:9C:FE:D3:E5:48:09:56:DF:8C:61:7E:54
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2b:4b:34:8c:ab:d2:ca:06:83:08:f6:68:ab:85:ed:cf:a0:
e0:f5:ac:08:09:ac:c8:a6:1d:88:d7:dc:ce:74:2d:9e:83:de:
9c:34:98:4d:71:a2:26:33:c8:ef:0f:a6:f2:7f:fc:49:ad:58:
b2:a2:8d:ae:a8:7d:1a:ba:79:c7:ca:37:57:f9:10:a7:82:c6:
17:a1:73:d6:64:4e:8e:a0:6e:85:42:3a:e1:9e:6d:67:a5:79:
af:c3:22:ea:d2:c2:8c:68:37:3b:b8:da:42:9c:44:15:b6:9f:
31:f0:9d:bf:7e:4f:96:be:f1:a9:76:ed:d8:09:5e:3a:f2:5d:
6c:2f:18:8d:1e:e3:13:77:b2:b7:34:13:41:05:32:47:48:65:
00:44:83:e7:16:e5:1e:23:f4:8b:0b:5f:90:59:c1:92:41:64:
5b:71:5d:75:39:eb:a9:59:8a:4c:47:31:7a:e2:cf:f1:a1:8b:
e8:0f:f4:20:0b:8d:81:03:5e:80:3f:d1:45:c3:68:9e:6c:3f:
9c:42:ca:5d:1e:d7:a8:b2:2c:8a:6f:76:3d:3e:f7:38:29:a4:
c3:6d:e2:1a:b4:b7:18:02:d0:8c:b2:75:1a:27:69:19:c1:d4:
99:a1:61:d3:ee:fa:1c:40:c7:48:47:bc:f4:01:c2:8e:ca:01:
ec:ab:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:24 2026 by rpki-client