Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: j7MZBw2nQpFmD9MmK6xmfsWBzzZCGQP8MzYn4aQh9PM=
Subject key identifier: E1:DD:3B:0C:0E:67:9F:AF:3A:1D:59:F8:96:1A:F5:11:55:3E:85:58
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 019EC148E89DC7C2D718C25BC369278F6652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0AC9
Signing time: Sat 13 Jun 2026 14:00:41 +0000
Manifest this update: Sat 13 Jun 2026 14:00:41 +0000
Manifest next update: Sun 14 Jun 2026 14:00:41 +0000
Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=)
2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: XwASmvyANFqokKgbKXyZ0tdZ6OJSTi3TQerBENKhkY0=)
3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:e8:9d:c7:c2:d7:18:c2:5b:c3:69:27:8f:66:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jun 13 14:00:41 2026 GMT
Not After : Jun 14 14:00:41 2026 GMT
Subject: CN=e1dd3b0c0e679faf3a1d59f8961af511553e8558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:ba:89:cd:10:fa:76:aa:2e:37:a1:d1:33:
45:15:21:bc:d7:33:d2:be:de:75:2a:ea:53:66:a5:
a5:7d:56:fa:12:ba:04:b6:f9:a3:9c:bb:ab:04:35:
d7:b3:1e:a5:1c:95:e7:6d:8f:42:88:58:92:64:3e:
42:d2:dd:41:55:2d:ad:ab:5f:1e:65:8d:64:f1:a1:
d1:a2:6d:b0:c9:36:8d:54:d0:55:2c:cd:ce:01:4d:
04:08:a8:51:46:94:65:f2:8c:03:74:85:41:82:a5:
5f:42:6b:a2:be:9f:36:88:8d:15:0a:0d:b0:e1:7e:
e3:38:0c:52:f4:30:48:e4:eb:38:82:f9:6a:15:3e:
e2:38:87:63:a9:80:af:e2:ee:ae:7c:1f:c2:6c:d2:
ca:96:32:28:f1:7e:28:47:f0:17:f8:d2:8e:0e:11:
7b:6a:15:95:89:fb:b0:aa:76:1a:ec:db:5f:8e:dc:
05:9c:7c:3f:c5:2e:7e:15:84:8e:5f:31:1b:16:18:
60:94:0f:1d:03:0d:c5:46:15:19:ed:01:b9:ad:3f:
36:11:dd:cb:47:32:00:93:af:52:f6:d4:69:ee:99:
72:9d:95:92:e2:ea:10:cf:ed:3e:cb:09:84:02:34:
30:9d:42:01:a2:bb:97:03:3a:41:28:41:a4:81:40:
8c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:3B:0C:0E:67:9F:AF:3A:1D:59:F8:96:1A:F5:11:55:3E:85:58
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:01:1f:f4:ad:f8:c1:37:cb:f0:fe:a4:f5:a1:ca:2d:50:fb:
54:da:f9:72:77:d8:55:28:de:9e:5c:6e:0b:55:f4:77:70:ee:
b0:d7:e3:6e:61:6e:b9:f2:e9:1d:1a:2d:7a:29:25:65:3c:19:
26:0f:06:03:18:c9:93:c4:08:b9:39:4f:9e:72:f9:62:5a:5c:
05:10:74:62:1f:89:22:dd:68:82:9e:1a:72:07:30:43:d2:cc:
26:e5:92:81:f7:34:59:a7:1e:e8:12:4c:6d:08:3e:ce:c9:4b:
cb:c7:44:3a:fe:0c:ab:32:cb:65:eb:3a:9f:71:3e:f3:b4:e1:
fb:1c:4e:d1:84:e4:35:55:36:46:8a:b2:63:35:ff:99:e0:f4:
e3:08:3f:fa:35:52:22:67:22:c8:42:dd:da:22:72:f7:fb:6e:
f8:09:db:89:6d:7f:39:a6:9a:a1:5a:9e:01:3b:22:53:67:6b:
d4:5b:24:0d:db:a3:97:bc:54:a5:52:d4:1e:36:f4:aa:86:9d:
75:4c:96:67:56:fa:31:59:2a:9b:65:7f:4a:fc:f7:c0:4b:91:
d3:61:91:78:9f:5a:c2:0a:10:da:dd:0e:cb:5c:f6:99:4a:72:
33:1d:fd:54:41:19:8a:f3:b8:1f:89:7d:4c:b5:39:4e:8e:f5:
94:5a:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:12:23 2026 by rpki-client