Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
File: b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft (raw, json)
Hash identifier: 6qPm6NB1iQnpN6DTgLPfaS2+8wMZU7UT9Wyn4+97ZAk=
Subject key identifier: 53:84:46:9E:70:EB:19:B2:7D:84:11:62:E1:77:41:07:B8:EE:AE:CA
Authority key identifier: 6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
Certificate issuer: /CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Certificate serial: 01A1355A2AA944A7AA15973CF4ABF9C21505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
Manifest number: 17EC
Signing time: Tue 13 Oct 2026 13:01:03 +0000
Manifest this update: Tue 13 Oct 2026 13:01:03 +0000
Manifest next update: Wed 14 Oct 2026 13:01:03 +0000
Files and hashes: 1: 341ViOQdsNCW-En8QgEMghW3CrA.roa (hash: ZDMhvpmhtSILebU2dF818x+O1gwwEqpIPXCs7VmgQH0=)
2: EwqvsuzaZqidzerK9hCEUFqmQ00.roa (hash: GDEyHKgpCdUpHrUWgA6Yr0loRQV7nfKi6qOOjAkX3eQ=)
3: b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl (hash: qeigwMWb+hUcHTsmqdUhC50s3Wi0QTyBOs/BbxL2jYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:2a:a9:44:a7:aa:15:97:3c:f4:ab:f9:c2:15:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe561f84c5bab17d503bf93d3c3d325c2a2252e
Validity
Not Before: Oct 13 13:01:03 2026 GMT
Not After : Oct 14 13:01:03 2026 GMT
Subject: CN=5384469e70eb19b27d841162e1774107b8eeaeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:13:c3:1b:53:92:e5:ff:4f:d4:e7:15:84:
f1:05:01:e0:e1:50:bd:de:a0:d4:ca:52:de:de:8a:
7a:11:8d:ff:40:e7:9c:0f:cc:cc:f2:42:c9:25:85:
80:a1:b7:e1:68:61:8e:1a:de:a7:c2:33:6d:d3:17:
df:e7:2b:c8:58:35:78:cd:e3:ca:59:e5:4f:20:dc:
38:bf:4d:69:71:ab:5c:70:1d:31:2c:6b:c7:e3:60:
61:22:d5:16:6b:07:b8:96:d5:85:a7:33:ad:fb:1f:
ab:1b:3d:5b:6b:45:e3:32:ac:30:39:39:3a:dd:0e:
51:8b:9e:27:ef:30:14:c7:e1:46:8e:bc:2b:b3:ba:
fa:71:8e:ea:13:96:1d:e7:c1:22:4e:27:1e:d7:4b:
92:9c:0e:cc:ba:12:b7:8c:06:7c:ae:86:65:d3:8c:
ea:21:c1:24:fc:65:08:ed:ba:99:69:cf:cd:04:96:
75:c2:28:10:37:a7:2a:95:3e:d5:55:9c:c8:14:02:
67:01:ab:c8:ca:42:71:a0:a8:d4:97:0f:e9:9d:0e:
c2:d3:1b:3f:13:38:09:56:a2:be:24:88:27:7b:dd:
a3:64:e8:46:34:55:c3:21:42:3c:e7:51:a9:ba:70:
72:1f:92:ee:9e:2e:87:2c:e4:ea:29:97:d6:ad:88:
48:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:46:9E:70:EB:19:B2:7D:84:11:62:E1:77:41:07:B8:EE:AE:CA
X509v3 Authority Key Identifier:
keyid:6F:E5:61:F8:4C:5B:AB:17:D5:03:BF:93:D3:C3:D3:25:C2:A2:25:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-Vh-ExbqxfVA7-T08PTJcKiJS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6266af-ffbb-4462-baa6-5739ed83c691/1/b-Vh-ExbqxfVA7-T08PTJcKiJS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:44:75:15:e9:d3:23:ff:9f:a2:5b:a5:a6:55:a4:85:61:3b:
01:25:53:ed:0f:1e:49:f5:05:d4:07:c1:c7:0e:29:75:44:2e:
b3:5c:d6:bd:56:62:88:be:04:d9:5a:dd:a3:17:52:c1:ea:b0:
51:6d:58:0f:44:88:84:d1:2c:f0:89:0d:76:1c:a4:b1:f6:c3:
3c:9c:8d:5e:fc:8e:5f:58:d9:f3:34:70:d8:7b:a5:60:81:fe:
0c:4a:f3:87:ab:4e:20:9e:c2:43:93:ce:2c:b6:30:5a:fc:85:
57:7c:5e:23:45:48:ea:df:e3:af:14:e6:d7:6b:f7:49:5b:7f:
b4:61:e7:06:98:47:7c:18:f5:e9:96:7b:6c:42:65:27:52:f0:
f5:d4:6c:1b:85:7b:64:30:02:5c:88:59:84:e4:6a:cb:28:e9:
ba:4e:77:b1:45:94:5a:7b:5e:82:63:12:5b:78:e1:ff:72:93:
85:fe:36:e9:f7:1b:0c:ee:f7:7a:ff:d4:9f:df:75:a6:71:85:
71:24:ff:d3:f5:e4:f6:bd:8e:d2:a8:df:87:f5:e3:e3:f5:72:
ad:60:4e:d3:b5:cc:85:66:0f:ba:ae:56:81:3f:f4:11:42:5f:
5f:84:64:84:e4:dc:ec:87:0b:f4:44:81:f7:d3:3d:e3:ae:10:
6f:64:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:36:15 2026 by rpki-client