Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
File: bI0-HD8Fey_LtJrgMEReEurgsw0.mft (raw, json)
Hash identifier: /Q2dDKmvs4nFMZM3O/GbwAXf/Lx2X878DjA4qGfNYjI=
Subject key identifier: 68:8E:75:E8:8E:D5:B8:8E:59:07:5C:E6:C7:69:95:53:11:88:8E:E3
Authority key identifier: 6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
Certificate issuer: /CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Certificate serial: 019F954A34EDA7362995426AF1339A32C6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:36 +0000
Manifest this update: Fri 24 Jul 2026 18:01:36 +0000
Manifest next update: Sat 25 Jul 2026 18:01:36 +0000
Files and hashes: 1: UDflW4qKHgaeJ7MC9kLoPznsjiU.roa (hash: pJeNm8HWUIyS3A3dKqU3o6igG4hqSi4lZOd1wNQLmxU=)
2: bI0-HD8Fey_LtJrgMEReEurgsw0.crl (hash: hfA5e2dUK92ApuQqxsUZ+uKSzGUYXBH+9Bj18EMoZgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:34:ed:a7:36:29:95:42:6a:f1:33:9a:32:c6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Validity
Not Before: Jul 24 18:01:36 2026 GMT
Not After : Jul 25 18:01:36 2026 GMT
Subject: CN=688e75e88ed5b88e59075ce6c769955311888ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:a1:59:72:d3:28:3f:3e:71:17:83:72:74:
99:62:ad:8e:b7:8f:f4:1b:c4:9d:7d:94:0d:de:7c:
72:53:8a:20:d3:b2:2c:1d:7b:3a:0f:da:7a:e9:d6:
00:b5:43:e3:ae:e9:c1:09:9e:a9:13:fa:ce:5f:8c:
b8:f2:b7:e3:e7:b6:00:4a:ed:15:cd:db:30:eb:20:
02:a0:81:7f:92:2e:65:88:c9:95:2d:c3:d5:da:99:
cf:c2:3e:62:a7:14:9c:87:78:85:3f:99:f8:57:0a:
c2:b9:64:80:c1:2a:46:56:78:01:03:fb:a9:ec:3c:
eb:28:e2:5f:0d:e9:a4:ea:15:41:a6:09:bb:da:b8:
5c:79:11:b7:dd:e3:81:d0:03:37:5a:6c:83:ff:f0:
3a:9d:1e:ae:0a:62:79:40:b1:4b:d4:54:ba:17:bd:
0a:6c:bf:24:6e:c4:3e:0a:35:73:68:dd:3d:45:68:
8f:28:6a:e6:a5:76:b9:f3:0d:f9:19:85:71:84:c1:
2c:90:46:78:c4:bc:67:32:0e:ea:06:9c:3d:28:25:
17:e7:ad:ec:ef:a1:c7:a5:a1:34:35:18:36:5c:68:
49:da:a0:ed:05:c4:53:21:4e:3c:5c:df:a1:44:72:
99:8b:44:92:10:ba:98:57:85:cf:27:15:31:7a:5e:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8E:75:E8:8E:D5:B8:8E:59:07:5C:E6:C7:69:95:53:11:88:8E:E3
X509v3 Authority Key Identifier:
keyid:6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:f1:09:12:0f:7a:7f:b9:25:88:b5:bd:eb:88:96:c6:ff:
e6:97:40:b3:78:b6:bd:4c:4b:6e:0a:34:b1:0f:04:a9:ea:79:
5c:a6:d5:9b:d1:c7:ab:18:b9:c0:da:7c:44:00:c7:31:aa:b0:
37:93:50:08:91:5c:0b:47:7f:94:f7:be:76:18:d3:72:b9:11:
76:36:c7:4a:54:df:e9:00:40:c1:a4:57:03:77:4d:2f:c6:fe:
17:99:c8:a7:77:dd:59:5c:14:1b:ee:85:1d:40:cc:18:03:ce:
34:31:03:c9:a4:dd:ec:df:aa:40:e8:7f:8a:67:e0:8f:b8:fc:
42:06:79:e4:36:33:8f:ce:15:68:80:01:41:88:50:5f:f1:ac:
a3:ee:c6:75:13:fc:73:24:2f:80:7c:9f:b6:f3:71:dc:95:b8:
8c:18:db:ed:c7:b9:2d:78:0a:88:d4:6d:89:d5:e9:6c:6d:03:
45:c7:87:e9:b6:68:a9:6b:6b:1c:19:7d:6f:12:3c:14:b2:16:
d8:ce:31:2a:52:fe:21:bf:cc:bb:3c:30:cf:94:28:27:dc:33:
0c:ab:8b:3c:75:33:42:bb:62:f3:78:0b:78:f4:ec:f8:81:6e:
57:35:9f:15:1f:df:18:9f:f0:b3:2f:5e:8b:45:ab:b5:d5:3a:
c8:0d:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:24:55 2026 by rpki-client