Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: uemzIdCWumG7FHO2a7CuYgBOt/rCxIKCF5inO8CYH7w=
Subject key identifier: 97:73:78:6B:0F:04:61:CD:98:9C:4E:2B:B5:17:31:99:06:DD:49:1D
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01A1032423FFEBD5DF86030981E595555006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 1A8A
Signing time: Sat 03 Oct 2026 19:01:02 +0000
Manifest this update: Sat 03 Oct 2026 19:01:02 +0000
Manifest next update: Sun 04 Oct 2026 19:01:02 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: IAQx+qXbJGAOEIQG8ZCG43Qa6OtlH11tc7gSi36wuxI=)
2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:23:ff:eb:d5:df:86:03:09:81:e5:95:55:50:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Oct 3 19:01:02 2026 GMT
Not After : Oct 4 19:01:02 2026 GMT
Subject: CN=9773786b0f0461cd989c4e2bb517319906dd491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7f:83:18:9c:5f:cd:30:78:80:04:95:49:f6:
9f:2c:9f:a8:9c:5b:37:39:7b:71:bd:33:7d:55:d7:
ee:3f:60:79:91:60:0c:5e:ab:c9:08:5f:7c:e6:ac:
ce:6e:72:1c:a3:ae:f4:3d:9d:5a:c8:6c:39:80:e4:
38:1b:50:2c:f6:72:2d:7a:4b:4e:8a:6d:5a:65:80:
f2:50:29:03:41:99:a4:41:b3:54:d5:ad:a9:64:2a:
c8:43:cd:16:e0:00:36:6c:2a:9b:4c:a3:48:f6:62:
21:e9:6d:ed:b5:6b:d0:b1:46:5c:9c:f4:20:89:0c:
0a:fb:64:94:f9:e4:3e:11:a9:a0:d9:98:0b:28:dc:
33:82:cf:26:74:39:dc:50:5b:e5:d1:2a:a8:55:68:
66:23:cb:07:97:58:dd:ad:46:15:0f:b9:bc:03:bb:
1b:e8:a9:5c:c5:4b:26:47:a3:97:21:4a:7f:a0:bd:
0d:a3:3f:67:13:6c:a5:da:cb:5b:0a:14:40:7b:48:
e1:7d:db:2d:e5:ba:16:2e:b2:0d:ce:f7:2f:db:25:
de:4a:4b:44:5f:9d:3d:4d:4c:1a:a7:3e:35:a1:e9:
ec:af:95:2f:93:00:92:8d:02:66:af:0c:4f:33:61:
1d:fe:9b:97:ce:7a:27:c5:b6:dc:2a:ff:26:04:05:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:73:78:6B:0F:04:61:CD:98:9C:4E:2B:B5:17:31:99:06:DD:49:1D
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c0:06:76:47:f9:d9:f4:62:a5:0d:c3:0c:9e:fc:f2:96:42:
1c:66:f8:58:29:7c:5b:ce:4d:d2:72:c0:c6:1a:14:66:00:e1:
55:66:38:40:15:71:3b:83:b5:d3:f7:28:1e:9c:16:77:34:ce:
84:de:4f:61:26:8d:6e:73:a4:8e:2d:0f:92:0b:66:4c:42:36:
59:cc:23:2e:ff:ee:cd:d2:3f:fb:ad:c8:d0:cf:1d:30:42:b3:
20:13:0a:95:1d:93:8b:38:d4:bb:b9:ec:3b:41:ff:cd:3e:bd:
3c:5c:9b:ae:e0:85:0b:38:29:f9:12:22:5e:c0:29:54:98:03:
b1:51:87:e8:a3:bd:63:5c:11:4d:8c:bb:ab:ec:02:a7:5c:24:
22:36:fc:de:cd:f7:b0:a0:a0:9a:55:1c:e6:bf:d6:67:78:30:
3e:86:31:81:4d:21:8a:31:3c:a1:7c:c8:fe:95:98:65:87:79:
7e:2d:96:2c:1d:1c:51:36:e6:97:99:fb:79:b7:aa:46:d1:55:
66:7b:34:a9:37:03:73:fd:1f:47:22:8c:c0:fa:c5:b3:59:07:
7a:a1:dd:37:66:dc:3f:b1:cf:50:09:bc:3d:03:29:6a:91:20:
fc:d4:a4:cd:1a:8f:ae:09:27:ec:2b:20:63:56:64:1f:cd:90:
14:74:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:54:52 2026 by rpki-client