Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: gk0VRRQHLrKpk4L3TqSvdNQGSCKr09itBoBuBlcr8QE=
Subject key identifier: D3:37:5F:80:E4:EE:E4:6A:82:D4:21:E9:46:E2:09:C9:41:71:FC:CB
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019F8FEC53B6D1D09D1D375B24EBC8EAC32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 1081
Signing time: Thu 23 Jul 2026 17:00:57 +0000
Manifest this update: Thu 23 Jul 2026 17:00:57 +0000
Manifest next update: Fri 24 Jul 2026 17:00:57 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: vpisMrSQhJFSqYGAGNb9cnXo8+d4V3+UI6hTjUWbSJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:53:b6:d1:d0:9d:1d:37:5b:24:eb:c8:ea:c3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jul 23 17:00:57 2026 GMT
Not After : Jul 24 17:00:57 2026 GMT
Subject: CN=d3375f80e4eee46a82d421e946e209c94171fccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:6e:41:1b:06:b0:df:7a:2c:7a:42:20:0a:
13:c7:dd:74:71:78:33:86:d1:1e:5d:f1:63:bd:a8:
cf:06:fd:50:d5:98:5b:8c:8b:ff:b4:f4:f7:a0:cc:
d6:01:cb:36:98:f4:42:a4:2e:d1:5c:21:18:d1:2a:
46:0c:fc:69:b0:31:c1:89:4d:b2:1f:83:86:01:b8:
85:a8:a4:8a:0e:59:f9:ad:76:44:1f:a8:81:18:1e:
7e:29:0c:12:50:60:9e:d8:b5:b5:bc:52:c4:af:2b:
0d:f2:97:1b:df:e1:d0:e7:d8:a3:70:59:db:0c:1d:
bb:17:29:82:f9:4a:29:4c:28:8c:65:22:88:7f:45:
16:b3:c7:35:62:6d:26:aa:a4:48:54:56:4a:9b:e7:
e4:be:c1:1f:86:29:08:5f:4b:7b:25:8c:ba:39:a4:
cb:f9:48:63:e0:a1:a9:4a:1a:1d:0b:af:f5:db:37:
36:75:07:a8:7b:89:95:d5:d4:cd:6b:21:7f:83:7c:
59:f1:a5:7f:37:ee:06:df:a1:3f:bf:b4:2f:79:2e:
0f:22:41:d7:3a:a4:8c:c7:6f:3b:a3:0c:f5:20:ad:
2b:c4:fa:b7:11:a5:eb:27:2a:83:c6:bf:a2:1c:be:
03:13:f3:c8:c2:9e:c6:34:e6:76:27:df:f5:2c:76:
58:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:37:5F:80:E4:EE:E4:6A:82:D4:21:E9:46:E2:09:C9:41:71:FC:CB
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:4e:14:02:16:37:02:73:1a:68:0b:1b:0b:95:ef:5c:40:
9d:c8:66:d6:4c:b0:57:e0:9a:07:5b:f7:00:8e:e4:78:c8:77:
ab:af:d5:14:2f:39:f1:fa:26:19:e8:80:f6:af:14:00:ac:ff:
0e:f3:b2:71:30:1e:8d:4c:ef:86:6d:0d:4b:f6:13:9a:e1:15:
2c:94:84:c9:40:de:4a:8d:5a:fd:ba:8f:01:b4:6b:05:f3:e6:
d2:4f:52:12:8e:bb:fd:82:fa:99:40:b0:48:ff:d5:16:46:02:
5a:82:a6:99:4a:57:3f:da:b9:86:e6:1b:88:32:19:31:a3:88:
a5:69:fe:32:c5:18:1c:3b:b4:b2:2c:de:8a:0c:7b:34:ec:92:
27:ff:16:f0:04:aa:b4:94:be:60:84:17:25:ee:a3:be:06:7d:
2e:34:63:a0:06:2a:a9:64:2e:c3:0e:0c:ed:39:db:cf:0f:96:
06:dd:fd:9f:c9:a5:65:f0:56:42:26:91:de:69:a1:e1:33:41:
6b:82:5e:e8:9e:49:30:61:f8:77:82:9a:2f:59:84:1f:12:1d:
96:b9:e1:bb:32:19:ab:9f:30:01:92:1f:35:af:16:24:d2:9e:
61:05:0d:fc:24:93:be:69:eb:1b:55:d5:d3:f6:06:6d:dc:8c:
3d:ff:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:22 2026 by rpki-client