Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: UccqY/HCXKhainfY90ilgzGRjHue6kIV35e298/ACDo=
Subject key identifier: 1F:86:3B:58:2A:22:97:02:C4:0E:12:0D:BD:F3:4E:6C:5D:5A:D3:9E
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 01A0D07FD27E062C47C72A879C66D6C8C09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 1127
Signing time: Wed 23 Sep 2026 23:00:32 +0000
Manifest this update: Wed 23 Sep 2026 23:00:32 +0000
Manifest next update: Thu 24 Sep 2026 23:00:32 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: geQ5mWpjd5o06B5cm86PlgJPPiu08O6nMkhYnqM0Yv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:d2:7e:06:2c:47:c7:2a:87:9c:66:d6:c8:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Sep 23 23:00:32 2026 GMT
Not After : Sep 24 23:00:32 2026 GMT
Subject: CN=1f863b582a229702c40e120dbdf34e6c5d5ad39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:9e:f3:f9:97:cb:98:4c:df:86:72:a5:34:
ac:71:56:0c:92:93:0d:c8:43:f0:ab:7a:73:c6:c5:
01:86:46:76:db:ba:2e:e7:23:8d:59:84:4d:5c:11:
81:6d:e7:aa:6a:14:c0:0a:64:46:7d:42:95:a9:60:
d0:7e:03:74:e5:6f:28:95:b6:76:c1:73:c0:6c:6c:
47:bc:9d:a8:3b:01:ad:4e:f5:20:c0:4b:76:51:37:
03:5e:85:b0:a7:fc:34:35:7c:92:5f:8b:88:1c:3f:
e9:4a:10:b3:f7:9a:a3:aa:16:24:d6:7c:2c:92:82:
5a:8f:3f:6e:4f:9f:3e:b9:08:6d:0f:28:25:da:83:
2c:9f:fc:51:a7:47:11:ae:69:77:99:11:24:d4:dd:
b1:75:c9:2e:e6:dd:8a:dd:59:bb:49:e8:3e:40:95:
01:94:86:c9:2b:5f:3b:81:4b:ae:b1:c4:91:37:fc:
48:60:a4:30:5e:f7:fd:a5:a1:d6:cc:3a:d4:ed:78:
7c:71:6e:a3:d3:d9:4f:ee:ae:ed:9b:24:34:bb:ac:
f7:a3:e2:a7:6d:c2:3a:e7:8d:b0:94:c7:ec:49:03:
3a:36:b3:6d:81:05:fa:a5:b6:9d:7c:0d:a5:c8:ec:
f7:01:0c:bf:cf:11:be:fa:28:8f:1e:1e:b3:ff:28:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:86:3B:58:2A:22:97:02:C4:0E:12:0D:BD:F3:4E:6C:5D:5A:D3:9E
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9b:87:b9:15:ce:c2:dd:8d:ea:1a:2f:90:fd:90:06:1c:09:
7e:fe:ed:98:83:32:14:74:ca:8b:a0:c0:10:fb:7c:65:bc:ac:
eb:eb:e2:40:e4:25:c0:4a:01:5a:44:34:54:3d:62:1b:c6:6f:
25:94:98:f4:aa:9f:b2:c8:e1:4f:84:9d:21:f2:ce:d4:b6:07:
44:c2:62:d1:af:93:54:37:b2:63:16:bc:15:28:2a:2d:e9:2f:
1a:e0:ea:56:39:75:f4:08:69:c0:06:e2:ca:4e:59:37:15:12:
bf:94:00:55:2d:ff:bc:f1:f9:17:6b:fd:72:9e:ec:aa:ee:f1:
32:a4:b3:51:fe:21:77:0e:70:ba:6f:16:b0:c8:c2:d8:d6:39:
d4:b8:67:05:e8:43:49:45:1f:91:1c:4c:35:2f:4d:07:38:4d:
ba:73:43:e3:68:f4:37:aa:0f:1c:89:e2:c4:40:93:79:e1:1d:
76:33:a7:b9:5e:61:af:92:3f:3e:89:51:94:7f:73:51:89:19:
3d:86:98:44:f8:77:72:08:45:d9:22:88:46:53:f9:50:0f:4b:
32:19:35:fd:ee:59:fb:2b:ec:5f:09:fc:01:e0:98:1c:ff:ee:
c4:d5:ce:51:99:30:39:e3:cc:76:95:56:cf:a3:21:bb:4f:c2:
f2:04:c8:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf9J+BixHxyqHnGbWyMCcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi
ZGI2NDAwHhcNMjYwOTIzMjMwMDMyWhcNMjYwOTI0MjMwMDMyWjAzMTEwLwYDVQQD
EygxZjg2M2I1ODJhMjI5NzAyYzQwZTEyMGRiZGYzNGU2YzVkNWFkMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOme8/mXy5hM34ZypTSscVYMkpMN
yEPwq3pzxsUBhkZ227ou5yONWYRNXBGBbeeqahTACmRGfUKVqWDQfgN05W8olbZ2
wXPAbGxHvJ2oOwGtTvUgwEt2UTcDXoWwp/w0NXySX4uIHD/pShCz95qjqhYk1nws
koJajz9uT58+uQhtDygl2oMsn/xRp0cRrml3mREk1N2xdcku5t2K3Vm7Seg+QJUB
lIbJK187gUuuscSRN/xIYKQwXvf9paHWzDrU7Xh8cW6j09lP7q7tmyQ0u6z3o+Kn
bcI6542wlMfsSQM6NrNtgQX6pbadfA2lyOz3AQy/zxG++iiPHh6z/yjWjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+GO1gqIpcCxA4SDb3zTmxdWtOeMB8GA1UdIwQY
MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt
NjZjYTU3Zjc0ZTBkLzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk
LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJuHuRXO
wt2N6hovkP2QBhwJfv7tmIMyFHTKi6DAEPt8Zbys6+viQOQlwEoBWkQ0VD1iG8Zv
JZSY9KqfssjhT4SdIfLO1LYHRMJi0a+TVDeyYxa8FSgqLekvGuDqVjl19AhpwAbi
yk5ZNxUSv5QAVS3/vPH5F2v9cp7squ7xMqSzUf4hdw5wum8WsMjC2NY51LhnBehD
SUUfkRxMNS9NBzhNunND42j0N6oPHInixECTeeEddjOnuV5hr5I/PolRlH9zUYkZ
PYaYRPh3cghF2SKIRlP5UA9LMhk1/e5Z+yvsXwn8AeCYHP/uxNXOUZkwOePMdpVW
z6Mhu0/C8gTI6g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:04 2026 by rpki-client