Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: qjpE1iS5PhpCKcovF6tWifUEzZpq65lNFLcsv46k8pI=
Subject key identifier: 11:39:E7:8E:E6:9D:70:21:6D:C7:1E:73:66:15:07:90:46:7B:B6:45
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019E1D234279C73C77568BE9421B17C05382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0FC1
Signing time: Tue 12 May 2026 17:01:50 +0000
Manifest this update: Tue 12 May 2026 17:01:50 +0000
Manifest next update: Wed 13 May 2026 17:01:50 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: BeeLF1r8Tcm+FekP4jZXdZg8kPJHbfSkGQct1/eGrjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:42:79:c7:3c:77:56:8b:e9:42:1b:17:c0:53:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: May 12 17:01:50 2026 GMT
Not After : May 13 17:01:50 2026 GMT
Subject: CN=1139e78ee69d70216dc71e7366150790467bb645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:3a:eb:61:db:2f:4f:0d:4c:52:ae:2d:c0:
aa:b6:9c:75:55:aa:c6:39:e7:4b:0a:03:c2:6b:7f:
4b:48:8a:88:39:99:d2:c7:5c:f7:64:ca:2e:ce:56:
5a:dc:c1:bc:eb:f3:df:c6:9c:a8:f6:9d:60:87:18:
2b:e7:54:f6:e4:e3:63:de:20:3a:81:a9:28:e9:ed:
6b:77:15:de:1a:f5:a0:92:59:1f:6e:c7:1c:74:36:
78:3d:dc:de:81:9d:1a:97:8d:71:56:08:2d:4c:63:
ff:e0:31:05:c3:51:88:0c:08:aa:1a:e2:23:82:43:
16:16:82:25:a8:60:ac:40:f5:a4:52:42:78:af:3a:
84:27:96:f9:24:1b:fd:61:df:45:d2:52:50:42:f5:
4a:00:44:1b:13:25:60:a6:73:8a:f4:d2:4a:67:b3:
87:2d:4b:11:bd:68:20:26:94:91:93:71:7b:a0:01:
ce:44:b0:e3:31:5e:bf:19:a5:4d:40:38:f7:9a:fd:
95:3a:ce:d1:2e:ca:2b:02:19:46:a6:a1:60:10:ef:
77:cc:4b:67:fd:1d:22:7f:06:70:ad:76:96:9b:13:
49:dd:76:4c:0f:86:69:6d:05:7f:e6:2f:f4:86:78:
2c:52:03:d3:fc:83:25:ce:2e:20:1d:dd:4a:50:30:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:E7:8E:E6:9D:70:21:6D:C7:1E:73:66:15:07:90:46:7B:B6:45
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:10:84:dd:f5:ae:c3:83:c6:3b:2c:8d:9c:ca:d7:3a:2f:54:
db:fa:7e:66:43:fd:aa:cd:3a:4c:15:22:ec:b8:6b:53:2f:93:
e4:c1:37:4b:5e:c5:02:d7:dc:c1:b3:c9:fd:e1:6b:e0:4c:c8:
ac:cb:04:75:4b:8b:e7:3c:66:a5:6a:ac:37:6c:1f:46:da:00:
bb:c8:d6:7c:a9:64:ba:b2:b0:ee:84:a9:22:4b:43:f5:87:a2:
32:4b:76:60:a3:6e:83:65:90:54:6f:54:83:a8:72:b3:e7:25:
88:ca:20:a0:54:67:c7:89:ad:5a:78:63:d0:ce:c7:e2:81:70:
6b:06:0d:c3:bb:9a:b2:67:f9:51:f4:dc:cc:86:0c:8c:86:d6:
58:64:fb:ab:b7:1c:7f:bd:3d:b2:b0:02:a7:a0:4b:23:00:12:
f8:f2:45:6e:cf:28:e8:27:e0:6f:1e:85:bf:bc:b1:b9:7d:40:
11:c1:89:fc:7b:38:c7:a7:96:23:a3:4e:8d:f1:27:31:0e:86:
bc:7f:05:7d:f8:39:8b:09:a3:8b:1e:1e:ff:e0:9c:41:10:50:
76:4d:c7:f0:ff:dd:26:7b:94:ce:38:2c:b4:78:12:7a:db:c1:
3a:9a:bc:0d:e1:4e:be:d8:5f:f4:25:40:42:b5:b3:9c:03:89:
6a:c6:bb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:15 2026 by rpki-client