Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: 7AOYGUZTIqhjeFh92La9STE9xowtVafyIwjoMiBRbyA=
Subject key identifier: 0B:FF:5F:27:7D:1A:9D:47:61:09:27:FF:A8:53:28:8E:78:1A:E8:E6
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 019FAA1A1039402942022FF6B22D334FEB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 043F
Signing time: Tue 28 Jul 2026 19:01:02 +0000
Manifest this update: Tue 28 Jul 2026 19:01:02 +0000
Manifest next update: Wed 29 Jul 2026 19:01:02 +0000
Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=)
2: 9KcLH-08xp9bTu3iU1LcZBGH8Qo.asa (hash: 3lMyXLFpUnbxFEEAepRspDKIQvKIBFYX/ZM2xRZKoIs=)
3: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: qi9VFi3xUkTsFiieEgn/xmIKvob72LFMhovoPtZWVVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:10:39:40:29:42:02:2f:f6:b2:2d:33:4f:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Jul 28 19:01:02 2026 GMT
Not After : Jul 29 19:01:02 2026 GMT
Subject: CN=0bff5f277d1a9d47610927ffa853288e781ae8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:13:ce:0c:34:20:c1:4e:4d:71:a0:53:4b:
8f:b4:b2:08:a2:c0:b6:d7:6c:bf:43:8d:05:5b:95:
11:11:f3:7a:53:04:b2:cc:d8:b2:c9:19:e3:35:7a:
ca:86:fd:30:64:4f:55:a0:b1:55:31:26:3a:85:6f:
b0:47:ed:80:e5:4c:91:65:47:ec:8e:57:8f:13:53:
58:7f:84:71:0b:53:e5:3a:44:7c:65:d1:e8:da:e1:
71:17:a8:68:d5:c5:a8:d6:31:c9:a1:42:3a:94:21:
28:e5:2d:57:c4:48:68:66:43:b2:06:1d:56:30:99:
72:ab:73:57:26:b5:8c:99:66:1b:f7:8b:d7:1f:98:
94:b0:e9:29:9f:42:79:19:40:42:a7:ee:0e:6a:f4:
c6:d5:4d:3e:76:2a:8a:2d:6a:de:ae:00:8d:92:1f:
68:3b:6f:cb:b3:df:1b:e3:15:24:9b:d8:70:f6:a4:
30:b4:f9:48:60:e9:9e:ae:d2:1c:5e:da:9c:4d:f3:
38:5a:6f:f6:78:a7:e2:3e:0d:7e:aa:1a:a8:41:f0:
c1:36:9a:6a:32:7a:22:5d:2c:3c:10:f2:26:78:0a:
bd:65:9d:04:bd:0f:da:a3:9b:fe:b4:93:f9:91:1d:
bc:80:82:a1:b7:b3:87:ca:40:03:0d:9c:5b:ab:d0:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FF:5F:27:7D:1A:9D:47:61:09:27:FF:A8:53:28:8E:78:1A:E8:E6
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8c:97:c7:14:43:e1:29:2b:b8:4e:0d:00:83:34:05:51:60:
da:09:90:9d:b8:a8:a2:77:d2:d6:d7:72:ae:7d:1a:38:d7:4d:
ec:5f:6b:ad:93:46:92:f9:b1:6f:2f:fc:09:15:64:31:36:55:
c4:50:cf:b6:2c:8c:de:d1:0c:2e:14:45:ed:ee:2d:b8:a8:58:
4a:7d:67:5b:fa:11:b9:c9:bd:15:1f:a8:50:5e:42:9c:7c:c7:
27:37:28:24:aa:48:08:32:a8:b9:6a:d2:f4:04:54:64:3b:b0:
6a:b6:91:79:fc:31:ce:74:00:c5:02:e3:58:ce:d3:5d:04:55:
ce:bf:30:19:7c:90:65:a5:97:d9:84:67:1b:3a:5b:c8:dc:76:
fa:aa:a7:53:c2:27:99:87:c7:f1:f3:c9:f3:e2:ea:e1:b1:8f:
05:57:e3:f9:a7:b4:34:8e:97:c5:98:84:6a:83:85:20:a7:ff:
fb:d4:a5:1c:75:43:25:6b:e4:97:f4:39:98:31:e7:22:47:2a:
2d:68:0f:f0:cd:4f:9c:1c:e8:04:41:dd:8b:26:8e:27:60:3b:
e2:3d:fc:e7:c3:06:c3:77:b6:2f:41:00:d9:9a:73:8b:5b:81:
6c:89:c8:28:01:4d:28:de:00:b7:64:55:2e:50:2a:81:b2:8f:
6e:e1:28:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:50:35 2026 by rpki-client