Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: h4Zgjcpkni6G//XBMmPTYqJaRYC6uZG5QZGOYaEHEJg=
Subject key identifier: 67:D6:F6:96:67:2A:64:F9:F0:71:23:5A:45:B5:04:62:8E:8E:77:19
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 01A0CAB471180E31AC39715DA98FCFAFE146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 20:00:18 +0000
Manifest this update: Tue 22 Sep 2026 20:00:18 +0000
Manifest next update: Wed 23 Sep 2026 20:00:18 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: kUGuY7GvxhigRLn7FE70BN7Rwf86RoqWxoglFGEE3Ps=)
2: 7Se3cx4TBdWjHAwq4txVyQrcrpQ.roa (hash: qn754SyayB45Cx33yiucDcB81nUdDdHn60qsbH3DxoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:71:18:0e:31:ac:39:71:5d:a9:8f:cf:af:e1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Sep 22 20:00:18 2026 GMT
Not After : Sep 23 20:00:18 2026 GMT
Subject: CN=67d6f696672a64f9f071235a45b504628e8e7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:5a:5f:ab:a2:4d:04:80:59:c5:1f:0b:1f:
db:41:2d:38:76:1c:29:b5:18:55:cb:8e:0a:a9:f2:
b6:78:de:c9:bc:c0:82:08:dd:10:9e:84:06:c8:1f:
ec:c9:e0:85:68:d4:00:37:ae:4e:3b:ac:cc:e7:09:
95:31:1d:3a:00:d0:9f:2f:06:7f:19:a7:96:e1:82:
15:cd:ab:49:c3:5c:43:26:bd:c2:23:1f:1a:ac:95:
f5:8f:e8:4d:fc:0c:66:44:e8:dd:d6:15:be:21:d8:
6d:fe:c8:63:8b:f0:58:c7:86:d1:ba:5e:cb:a7:0b:
da:a3:14:d4:48:d8:8b:57:5f:be:55:fc:ed:e7:17:
e6:db:28:25:40:84:b8:5e:cb:1f:f5:ad:f2:c8:82:
e9:af:2a:54:c1:f5:e7:c4:91:ec:e6:df:b5:30:1e:
42:4f:8f:e9:3c:4a:7a:1a:4d:5b:9f:aa:70:b6:f9:
58:bf:ec:36:f6:81:2f:fd:3c:6c:60:71:dc:84:5f:
3d:a4:d9:10:6b:05:08:c2:ea:da:f7:29:dc:af:b6:
93:b1:5c:99:5d:79:8e:77:54:7d:41:16:db:bd:38:
14:37:c1:71:05:65:23:86:d6:7e:0f:c3:10:c2:79:
b9:9c:38:b9:19:e1:4e:8a:00:13:d6:d7:9f:83:0b:
2d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:F6:96:67:2A:64:F9:F0:71:23:5A:45:B5:04:62:8E:8E:77:19
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a9:67:99:40:9f:2c:68:0c:6d:e0:ba:6b:f1:a4:d5:a1:03:
f0:bc:5a:66:7e:83:bd:a1:22:80:c8:b9:5d:ec:5f:26:34:b4:
98:5d:3f:14:45:23:34:f2:3f:b7:02:a0:3a:8a:32:c0:72:54:
b2:12:71:e2:55:fd:cb:bb:d2:86:9a:6b:aa:ed:c4:89:15:2e:
c4:a6:67:58:5d:55:ac:64:76:9a:b1:df:57:f1:bb:5d:e4:95:
ce:b8:57:dc:27:30:20:ae:05:7f:62:96:ae:b9:6b:84:09:4d:
2e:61:72:91:de:e1:cf:97:75:64:98:1f:56:d9:ab:83:fa:73:
b5:b9:d3:22:67:5d:8f:f7:23:61:e5:97:91:1e:af:8a:21:1e:
39:7b:c5:e8:7a:ff:5b:80:8f:dd:3d:88:14:b2:f8:9e:2b:aa:
76:06:19:b4:86:cd:38:93:2b:92:e6:9a:7a:9f:00:85:90:94:
f5:cc:6e:18:3d:87:2d:30:36:1d:bd:ac:d8:a0:3e:5a:d2:ec:
c0:a7:e4:fe:51:e8:f8:77:12:f2:53:a6:7f:c0:34:32:01:fa:
ba:2d:0b:1a:c3:56:bd:74:9b:04:47:e9:f0:eb:87:7a:29:f1:
26:79:d8:34:03:5e:fe:84:dc:c0:73:46:0c:18:5c:4f:75:ce:
12:b7:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:35:23 2026 by rpki-client