Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
File: bI0-HD8Fey_LtJrgMEReEurgsw0.mft (raw, json)
Hash identifier: gbzogFHTCQTLMvfYucBShJa3vhb8/fZByF+HAECFTOg=
Subject key identifier: 01:F1:5F:A7:9E:0C:54:82:E4:D7:B8:9B:49:06:D9:01:D7:CB:4B:F2
Authority key identifier: 6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
Certificate issuer: /CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Certificate serial: 01A0CE240C49E8996E2B9FB8B3FD0482DCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:03 +0000
Manifest this update: Wed 23 Sep 2026 12:01:03 +0000
Manifest next update: Thu 24 Sep 2026 12:01:03 +0000
Files and hashes: 1: UDflW4qKHgaeJ7MC9kLoPznsjiU.roa (hash: pJeNm8HWUIyS3A3dKqU3o6igG4hqSi4lZOd1wNQLmxU=)
2: bI0-HD8Fey_LtJrgMEReEurgsw0.crl (hash: HOuoov8LUHEHv+ufRvZdxRB6RZMTRlxU2hmtscUi94o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:0c:49:e8:99:6e:2b:9f:b8:b3:fd:04:82:dc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Validity
Not Before: Sep 23 12:01:03 2026 GMT
Not After : Sep 24 12:01:03 2026 GMT
Subject: CN=01f15fa79e0c5482e4d7b89b4906d901d7cb4bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:4b:81:3f:8a:28:84:94:58:47:eb:34:15:
bc:2a:70:62:4c:38:e6:6b:29:7f:43:57:21:12:97:
f3:24:59:83:e0:4b:55:36:3a:ec:dc:e1:46:06:20:
26:e1:1a:54:06:2a:ee:fc:25:77:a8:13:68:62:05:
c8:f2:ce:d9:07:37:f3:f7:65:91:44:40:4f:5f:16:
a7:2b:fe:88:bd:7f:64:ab:71:ed:f4:26:70:91:81:
40:c7:1d:08:66:d1:df:7b:78:d7:30:22:42:e6:fe:
d8:3d:ab:8c:52:f2:ec:b7:b6:31:a7:32:0e:d9:42:
ea:05:86:a6:eb:81:4a:54:e4:91:10:fe:4f:9c:30:
4e:93:5d:67:ec:c3:47:97:74:eb:a4:b3:ef:56:5b:
76:7f:7c:3e:09:0d:e6:45:e9:99:c3:da:2c:35:e5:
fa:0f:ba:1c:39:9e:f4:5c:df:cf:3f:87:2e:67:ff:
9e:06:a8:7b:0a:70:5c:77:b2:c4:23:9d:14:5a:ec:
fa:ee:b9:85:23:05:4d:95:25:e8:7c:b4:fb:37:ee:
14:7e:b0:1f:8b:73:16:12:4a:0d:a7:ce:f8:01:04:
5d:9a:0f:35:97:c7:f5:16:d1:05:95:b2:0d:6d:c4:
df:0d:d0:b0:1a:12:86:70:d5:a2:5e:72:7c:24:60:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:5F:A7:9E:0C:54:82:E4:D7:B8:9B:49:06:D9:01:D7:CB:4B:F2
X509v3 Authority Key Identifier:
keyid:6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:aa:52:f5:33:0c:29:ab:20:6f:fd:c0:a3:34:4b:43:de:4c:
94:13:e6:bc:4b:df:84:a1:9b:ab:ac:17:53:0d:9c:22:d4:a9:
e1:60:99:a6:7e:6f:79:71:ab:a0:bc:0b:ab:20:98:36:09:70:
eb:1f:bc:eb:dc:b9:11:94:fb:e3:d0:39:d0:8f:f2:e1:fe:8d:
75:9c:c9:f6:5a:78:8d:b9:83:ca:20:8d:61:fa:fe:8b:f1:25:
c9:30:49:9f:f9:3b:a9:25:b8:11:29:83:d8:51:a7:12:97:3c:
64:ab:c2:27:2d:98:58:21:e6:e1:25:a9:59:2c:c5:86:1f:97:
48:d2:de:af:65:93:e1:93:7f:86:68:e6:61:49:5f:49:cd:24:
f9:37:c1:2c:76:ca:d9:5b:20:df:fe:12:fa:d6:96:97:88:99:
4a:87:d1:a9:a0:19:6b:95:13:ef:1f:5c:9a:66:7e:12:c6:4c:
97:d7:64:cb:79:16:b8:92:76:27:01:fb:c0:44:6b:d2:3f:5b:
74:66:76:1e:c3:1e:bb:de:8f:b9:e1:b3:bb:a9:60:e8:ea:78:
df:f9:a4:35:0e:6b:31:61:58:93:26:12:b4:bf:72:d0:c1:97:
61:d3:46:2d:6b:89:69:63:d1:3c:b1:48:82:6e:d0:ae:1e:bb:
7a:ac:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:28:07 2026 by rpki-client