Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: 748HxnADDPYlysAn3h3qmoI06YdWOYEmJU8MpzUA48w=
Subject key identifier: 8A:E4:00:FC:2A:BB:C1:0E:00:19:EB:03:47:E8:7D:E9:2D:F9:FE:E9
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019D25F12274BE549EBA42C9BEDE34AD65E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0F41
Signing time: Wed 25 Mar 2026 17:00:53 +0000
Manifest this update: Wed 25 Mar 2026 17:00:53 +0000
Manifest next update: Thu 26 Mar 2026 17:00:53 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: UQbJGSA2kMXLpY+WNlLTVwNSa0ov52W+DXG0WSs9+ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:22:74:be:54:9e:ba:42:c9:be:de:34:ad:65:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Mar 25 17:00:53 2026 GMT
Not After : Mar 26 17:00:53 2026 GMT
Subject: CN=8ae400fc2abbc10e0019eb0347e87de92df9fee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:34:46:0c:5d:ca:b8:cf:0e:c7:f8:a1:ca:4f:
7a:9c:3b:23:91:2f:7f:e7:09:b9:e6:2d:6f:a0:a5:
4a:05:ff:bc:42:05:26:2e:4e:ea:5a:3a:db:01:63:
8d:bf:2d:84:42:48:93:b5:3d:4e:b0:b9:76:b4:44:
fd:32:67:52:d2:46:97:5a:bf:89:c5:80:b5:72:df:
a7:16:dd:b1:26:34:e5:f1:30:7b:c3:73:b5:5f:00:
c6:a3:d9:f8:6f:06:2c:11:71:db:0f:e7:1a:9a:f9:
50:01:31:f6:bc:df:d0:99:e2:98:9a:e6:bb:f6:6b:
dd:bc:ed:be:aa:62:26:36:03:63:a0:8a:f0:fe:fd:
6c:82:62:ef:9b:fa:bf:6b:52:58:aa:25:55:50:16:
bc:67:f8:1e:7c:6e:b4:07:cb:43:3f:53:49:87:1b:
da:fc:3a:7f:40:de:5e:a8:08:57:a5:24:2e:19:55:
bc:99:65:56:d3:ed:e9:a1:21:66:a2:a8:8c:6b:b8:
69:06:df:af:e6:7b:45:44:91:98:b0:be:7f:ef:17:
84:db:3d:25:33:91:c6:3b:f6:dc:a3:e8:13:b8:67:
3d:c0:19:a6:ce:21:8d:12:9e:ad:fb:4b:bc:a9:29:
e6:e6:3b:03:9f:5b:85:84:79:57:f6:d2:f3:37:a0:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E4:00:FC:2A:BB:C1:0E:00:19:EB:03:47:E8:7D:E9:2D:F9:FE:E9
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6f:de:13:65:3e:b6:c3:e5:c1:7d:a6:51:46:c7:a6:20:34:
a2:d0:5f:a5:d2:76:dc:2c:a7:3e:c6:51:84:57:66:d7:52:e5:
a0:94:52:8c:fd:54:6f:14:80:93:8b:62:be:db:7b:97:eb:bc:
12:ed:13:53:63:1d:9b:b5:66:e7:03:60:5c:70:cd:d0:6b:d1:
53:73:e0:ac:d5:7f:e8:06:4d:09:a6:c0:0d:33:65:8e:bf:1e:
e8:f8:42:69:3b:e2:5d:16:65:ce:6d:43:b0:d3:75:c9:32:48:
99:b0:48:8e:2f:43:a9:fa:eb:8e:ec:d6:26:40:27:75:ff:c8:
5b:cf:64:b2:0d:96:27:02:97:99:28:3a:e1:46:6d:a2:f5:73:
91:5b:1f:0d:8d:b2:cb:17:70:fb:54:1a:b4:57:7b:c3:82:c3:
07:5b:d3:d0:30:d7:cf:ef:17:0e:54:49:1e:e6:20:1c:50:90:
e5:81:af:a1:2e:bf:51:7b:ca:ac:f4:1e:41:d3:87:8e:1a:7a:
8f:6d:ae:f5:62:bc:c0:7e:82:ac:bf:13:bb:37:dd:84:b0:a2:
28:de:3a:94:36:93:8c:b8:50:43:47:0b:07:05:f9:07:b7:68:
b6:28:cc:65:bb:cd:0d:1a:8d:71:6b:a8:0f:17:48:c6:0e:0a:
b8:b6:3e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:56 2026 by rpki-client