Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File: v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier: dvNSHIExQHlys5B8FJVuxh2H4vz5k0n0MI7oS/+kI1w=
Subject key identifier: 85:5D:EF:88:73:E2:ED:E4:D4:4C:94:C3:6C:26:45:7E:CA:EA:87:99
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer: /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial: 01A0DC4D642BFF580A3AAA058064212A3CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number: 1705
Signing time: Sat 26 Sep 2026 06:00:54 +0000
Manifest this update: Sat 26 Sep 2026 06:00:54 +0000
Manifest next update: Sun 27 Sep 2026 06:00:54 +0000
Files and hashes: 1: VynjIVEwblB9H_BmRl1ljWkeWpM.roa (hash: gHCjOMq63YurjqMkoulfc5r5daPJGcP7T3NAkcF7UQo=)
2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: mCAr7CPwvBNoHXAeBt1pznK/GDV6ocfWbOT64NTNRHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:4d:64:2b:ff:58:0a:3a:aa:05:80:64:21:2a:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Validity
Not Before: Sep 26 06:00:54 2026 GMT
Not After : Sep 27 06:00:54 2026 GMT
Subject: CN=855def8873e2ede4d44c94c36c26457ecaea8799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:3e:b2:c3:58:be:0f:3c:79:30:ab:3b:d1:
60:d5:d4:1e:b4:9b:c8:b1:25:a1:de:05:31:0f:9d:
ba:9d:88:55:92:fe:c6:a5:27:1c:c0:43:6e:9e:08:
f9:3f:79:9d:b2:10:43:6b:9c:b0:32:ae:ca:d2:0e:
9e:05:da:34:fa:e6:87:ef:6d:76:44:89:26:16:bb:
c6:a5:97:c2:f8:68:33:30:1a:dc:38:31:4d:53:65:
27:e4:33:6c:b3:6e:04:f7:53:e0:65:c3:f5:02:22:
25:6a:90:5c:fc:28:83:4d:06:98:45:63:cf:45:a0:
12:03:45:bf:87:11:2c:85:cd:2d:c2:bb:ad:29:7e:
c2:91:fb:e9:9b:b7:99:4c:3e:c1:ea:52:67:ed:9e:
18:3c:c5:4b:d2:02:44:ad:75:c8:61:2c:a3:52:18:
6d:fd:16:09:0d:ac:44:89:ab:1c:29:db:93:b8:26:
25:37:5d:77:65:c8:19:f8:67:ad:ef:f9:c5:20:51:
ea:d1:33:d0:b2:2e:c4:f9:bc:ef:5d:b0:1f:48:5b:
78:e9:4b:c8:b4:3b:62:c7:33:e3:67:d6:56:8c:69:
de:29:d5:f4:41:db:07:f6:9e:48:f2:38:41:0f:6c:
7e:66:36:ec:f9:71:bc:e3:c6:e4:8f:b4:eb:32:6d:
5b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:EF:88:73:E2:ED:E4:D4:4C:94:C3:6C:26:45:7E:CA:EA:87:99
X509v3 Authority Key Identifier:
keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a5:f3:fb:c8:fb:f2:7a:a2:ac:b6:40:a9:4b:3b:d5:f3:aa:
5e:7e:8a:40:17:93:31:a6:cf:f2:6a:2c:3c:1c:5c:29:ae:ab:
36:0e:e6:fc:94:bb:59:7d:8e:d8:bc:3d:34:8b:01:55:b0:8c:
d1:e5:58:8f:57:5d:07:cb:39:da:66:bb:93:49:1a:4c:97:84:
0c:e3:bb:14:05:84:d6:ad:25:88:31:38:de:90:37:1d:72:a3:
f4:7b:c7:f0:d8:bc:f1:3e:c9:ae:61:e4:e0:f9:d3:81:1a:cb:
cb:cd:7b:95:33:ed:72:36:71:99:24:3d:a2:77:22:6b:f2:a8:
57:9f:90:91:24:e8:b4:c5:f9:ad:ce:c2:94:8a:7b:18:ee:10:
da:f3:c9:f8:fc:65:19:7c:61:37:26:86:32:15:a7:eb:df:37:
1b:77:b7:06:2f:f0:f7:00:87:4f:4c:6c:0e:5f:24:7d:e6:63:
b3:a2:a6:59:46:c7:da:e8:8d:57:76:c3:ec:af:05:5c:8b:43:
28:6f:8b:06:8f:01:8a:52:97:57:8a:c9:27:35:b8:ec:28:b8:
4d:f8:33:93:7c:3c:cf:cc:1e:14:fe:6d:0e:a9:c6:18:0b:e1:
94:9e:99:43:4c:72:d1:b1:da:5f:2c:98:fa:b1:e7:ae:8f:bb:
7f:61:a8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:10:37 2026 by rpki-client