Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: xnVTBVmBZWKf1WV71NQ5RdHFYuyEoegTYRBvFF6AZQI=
Subject key identifier: 30:55:C1:CC:7E:4C:56:84:64:56:1F:20:BE:FA:C0:F6:B9:B9:61:C3
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 01A10700D3072E3A9D3E769A5184DCDBDFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 1A8B
Signing time: Sun 04 Oct 2026 13:00:56 +0000
Manifest this update: Sun 04 Oct 2026 13:00:56 +0000
Manifest next update: Mon 05 Oct 2026 13:00:56 +0000
Files and hashes: 1: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: m5st3dmOStl9C/M7dfG5GRkqfIfpwLlhwmHrwhUYadw=)
2: u5hJOCynJQAu4PH5D56C-AeKtEc.roa (hash: 53JyrjI2rSv7IJ0kdQIBEc2NY8BsRGlwPaWvUaVHA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:00:d3:07:2e:3a:9d:3e:76:9a:51:84:dc:db:df:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Oct 4 13:00:56 2026 GMT
Not After : Oct 5 13:00:56 2026 GMT
Subject: CN=3055c1cc7e4c568464561f20befac0f6b9b961c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:16:f0:78:ae:6a:22:72:53:20:f7:79:ff:
72:12:3e:e9:0e:e4:8d:93:37:c1:d0:4c:e0:03:92:
87:a5:89:b7:62:a0:5e:19:e1:90:35:62:99:8c:ab:
f7:30:55:a4:1a:38:db:74:e3:70:61:28:72:c2:35:
25:d5:c5:e9:11:2f:9d:f8:63:5c:6d:b3:7e:a4:c6:
96:56:ac:35:60:b7:58:16:ef:b2:a0:a8:dd:81:32:
2e:03:99:92:09:d6:ed:06:02:a0:ff:1b:dc:a0:fa:
da:18:db:5c:4c:43:a2:e4:74:e3:c9:5c:2c:7d:f6:
f5:a3:68:ec:03:3b:a4:d3:9b:a9:6a:db:5d:20:ef:
43:c6:e9:bc:c7:e8:2d:6f:d8:02:ce:57:86:a5:0c:
d6:2f:09:4a:a3:6d:6e:64:9c:45:94:e8:01:18:e2:
a3:b7:7e:98:f4:db:dc:4f:80:66:30:83:d3:3b:29:
89:94:7b:18:03:e4:81:a0:7c:4e:9e:da:22:e1:bb:
b4:35:89:8e:90:df:b7:ab:3e:4f:f2:d1:01:eb:69:
4e:03:32:e4:95:21:f2:37:b4:87:2b:7e:17:65:f1:
76:89:91:cc:de:2c:0d:52:fe:67:79:3d:04:be:c6:
99:57:5a:62:17:d3:a6:a0:50:30:73:34:22:1d:24:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:55:C1:CC:7E:4C:56:84:64:56:1F:20:BE:FA:C0:F6:B9:B9:61:C3
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:17:d6:a5:17:4d:0f:3b:8b:52:78:d7:ab:b8:cb:82:8b:39:
45:6c:68:11:e6:2d:dd:c1:fe:6b:3b:71:c8:81:06:eb:83:31:
da:74:36:21:9d:eb:a5:92:e6:7d:7f:d2:59:ff:77:b4:9e:63:
5c:d4:54:ce:9c:f8:c7:3e:a7:1f:4d:2f:7a:3d:92:81:0c:2a:
03:b9:18:f1:79:4e:a4:0f:36:76:95:aa:fe:32:aa:29:b6:68:
e7:3f:68:db:18:5d:d1:b3:f9:8e:41:5e:e7:db:ea:fb:36:db:
96:77:48:91:4c:b2:d6:b8:8c:89:57:3c:a9:3c:fc:07:bc:d0:
e6:c1:d1:02:f3:c0:0f:39:34:07:34:fe:a8:f0:82:d8:09:01:
19:c9:84:5a:02:00:14:40:3e:08:5d:f8:00:a3:87:8e:f4:e8:
9f:c8:8f:ac:6e:b5:4c:05:51:37:06:3d:6d:c7:85:18:57:36:
ce:bd:26:ad:4b:15:cc:52:14:27:00:ee:80:72:22:29:04:bd:
e2:00:b3:3b:9b:f9:e9:ae:40:0e:77:4f:d3:d7:2e:82:1e:bd:
02:8f:9d:e0:67:8d:3c:fd:23:22:55:4a:2d:95:34:cc:6f:0d:
6d:1c:5a:ff:78:12:67:06:a6:d1:fe:58:1f:08:eb:20:79:f2:
5a:1a:3f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:03:45 2026 by rpki-client