Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: 85zyDGPCYJf+MDA8h/Qihtt+Q5RQ2n9AtSeoGU6Qo/c=
Subject key identifier: 05:D3:9E:0D:42:BA:B8:A1:5E:77:22:8C:AD:1C:30:C0:F1:10:72:7C
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 01A0DBDF971040BBF13E53EEEDF75A2E68F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 04:00:58 +0000
Manifest this update: Sat 26 Sep 2026 04:00:58 +0000
Manifest next update: Sun 27 Sep 2026 04:00:58 +0000
Files and hashes: 1: SUVgPcCNecAn7h3a2odgkdUnXAE.asa (hash: JHYm3gRUz1k6I2OldseBDJbvhLcJl5oAw0QgRA7AXfE=)
2: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: bCTcvHxuzhkV3pC+C9B9+YuWrl7MeL8SJFLK7to8cdY=)
3: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:97:10:40:bb:f1:3e:53:ee:ed:f7:5a:2e:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Sep 26 04:00:58 2026 GMT
Not After : Sep 27 04:00:58 2026 GMT
Subject: CN=05d39e0d42bab8a15e77228cad1c30c0f110727c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:25:7c:18:d8:ba:e1:c7:9a:a6:de:05:54:
ae:35:7f:f2:83:54:b2:1f:76:31:72:76:ce:b1:3a:
44:a2:da:48:fd:ce:98:e3:a3:5f:14:01:b4:9a:c7:
79:06:72:1e:b7:7f:3f:e9:5d:33:5a:f3:3d:e2:6c:
d4:44:d5:f4:d8:56:93:94:10:28:ad:1b:9d:96:a9:
9f:90:05:e8:ff:3a:f8:f3:81:02:9f:67:48:59:63:
a2:7a:14:35:8e:10:bc:d5:7f:cb:9b:76:fd:9d:6f:
67:56:cc:60:cb:66:dc:27:81:7e:db:3e:02:f9:70:
f3:2d:84:3d:fe:cb:c4:1f:91:d2:f9:7e:48:67:07:
ba:e8:c4:e4:6a:ee:86:8d:81:e4:64:95:d6:91:b1:
a0:67:fb:9b:41:96:87:19:1b:1d:fb:2a:12:02:36:
be:1b:c0:d5:32:1d:c1:b0:74:54:63:2d:3c:7b:2d:
24:63:63:ff:36:d9:5a:70:8b:53:a7:72:8c:24:ca:
2e:0a:0e:fe:30:da:54:04:7b:75:16:77:2b:52:cd:
a9:58:59:bc:6c:6e:ce:63:50:22:f9:4e:b1:46:a3:
31:13:ce:14:e6:e6:b8:b7:20:78:1e:ca:e5:d3:f6:
51:2e:fb:3a:b7:64:ad:70:66:15:de:4a:c8:7d:78:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:9E:0D:42:BA:B8:A1:5E:77:22:8C:AD:1C:30:C0:F1:10:72:7C
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:31:5c:0e:bc:bf:e4:92:a1:df:fb:c8:73:6e:76:47:6e:85:
a6:ba:b6:24:03:e7:f2:f2:90:9e:e6:4e:0c:29:8f:0f:f0:f7:
88:64:ec:91:d7:a6:16:9e:e5:4b:d2:cc:75:f9:55:df:60:41:
c6:75:38:23:b9:7b:7a:28:77:c0:13:fb:14:9f:c4:69:90:1b:
be:b1:63:50:11:16:f7:4b:af:44:86:33:4b:ad:f5:b6:14:6a:
7c:3b:a8:b6:3d:ff:f1:68:e2:ba:57:95:52:61:22:6a:92:31:
7a:90:ec:ea:64:1c:0f:00:f6:be:05:49:3a:1e:4a:d5:20:9c:
73:34:a7:fc:53:4b:29:27:f9:2b:d0:83:7c:68:a7:fc:30:52:
ae:6e:28:58:f4:5c:b3:be:11:45:c5:a7:e2:03:47:b6:77:e6:
4f:9b:07:80:4b:73:64:b2:c8:cc:42:0f:6d:61:4f:00:59:2f:
90:72:0a:43:0c:67:29:0d:ab:1e:e3:ce:3f:73:3c:38:54:4e:
3a:39:61:1b:c3:a2:71:61:5f:34:ed:5c:77:fc:0f:a3:3d:e4:
65:33:9f:56:cb:c9:4b:04:d4:04:c1:55:7c:01:45:a3:8f:25:
09:82:81:44:c1:8a:af:55:4c:1d:14:a3:24:bf:c9:f7:c5:23:
90:a2:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:36:17 2026 by rpki-client