Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: HVFzhXbdRL66tqdmmchGh7f84iMvA15URvh1vRvmqZE=
Subject key identifier: B8:19:CD:EF:3B:93:15:DD:BF:8B:2B:F5:90:F3:42:4F:92:61:53:FB
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 01A0CA4707296D75EA6CA3D8096DAA005260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 0611
Signing time: Tue 22 Sep 2026 18:00:47 +0000
Manifest this update: Tue 22 Sep 2026 18:00:47 +0000
Manifest next update: Wed 23 Sep 2026 18:00:47 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: bMNrODsSxtP4J8cxqY8YjZRUmHnS7wxSDSE/RNcJSpc=)
2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:07:29:6d:75:ea:6c:a3:d8:09:6d:aa:00:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Sep 22 18:00:47 2026 GMT
Not After : Sep 23 18:00:47 2026 GMT
Subject: CN=b819cdef3b9315ddbf8b2bf590f3424f926153fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:53:37:ec:37:a6:d7:72:86:9b:db:01:4b:
0a:f0:2b:61:ed:39:db:d0:21:75:10:b4:99:55:71:
7b:9d:1d:b4:23:ae:43:78:2d:c9:14:45:35:a1:02:
2a:e8:4c:ed:33:73:f7:21:bd:6b:0a:c1:58:c2:e6:
2c:75:29:a9:9f:7b:5d:37:75:b6:65:24:09:46:31:
4b:87:3c:28:9b:6e:d7:b5:fd:58:b8:87:d6:1c:d9:
c0:d4:ae:47:65:9a:42:86:ca:40:8f:56:c8:08:ba:
c6:99:28:17:52:04:e3:72:1d:e2:b3:41:3b:83:bb:
27:55:34:19:fb:a8:3e:3f:4f:77:6f:c3:75:78:73:
68:fc:2c:81:c2:90:2a:6a:43:4a:02:c7:32:9f:40:
8c:1a:83:45:4e:59:21:9b:55:ba:62:af:b2:3d:0e:
37:4e:b7:6a:cf:b9:51:96:11:8f:ba:fa:ff:a2:2a:
3a:15:5d:9c:9e:52:37:c0:ee:bf:33:59:5d:cd:5d:
93:2a:2d:29:4d:ef:31:04:ee:23:f9:1a:02:82:a7:
91:52:d0:10:e4:07:f8:b4:09:84:e0:95:9d:7c:f2:
99:1e:4f:ba:8e:14:2d:2b:f7:ea:9b:d4:68:c6:fa:
9d:e4:a4:fd:d5:36:ec:3f:f1:f1:50:2c:78:85:3b:
d7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:19:CD:EF:3B:93:15:DD:BF:8B:2B:F5:90:F3:42:4F:92:61:53:FB
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bf:22:09:8e:90:e2:9a:94:5b:34:f8:12:80:69:4d:fe:58:
9e:b3:43:de:3b:a9:a2:01:ab:09:70:a0:05:07:0a:fd:96:40:
f7:3f:1b:01:ae:18:46:8d:c6:44:55:f0:70:0e:1b:ac:99:1a:
68:05:2c:a6:03:80:97:89:8b:b0:e0:c5:d5:4f:72:7b:0c:7d:
b8:74:f5:17:91:f4:26:81:e3:54:75:44:c2:a0:ef:14:00:1d:
b7:a6:e0:f8:4c:4a:88:41:d4:b7:12:a2:1c:0a:b6:0b:88:d2:
72:bc:93:2d:12:f0:65:21:26:d7:82:32:d0:fd:dd:0e:b5:5b:
64:44:58:8c:31:9b:f1:4e:ec:79:e9:1e:21:36:0b:78:fb:6a:
51:06:17:a7:3e:5d:71:a4:e9:0a:72:2d:06:35:06:75:ce:0e:
86:26:3c:fe:50:2e:8e:9d:f8:d1:d6:8b:13:3f:ef:e9:15:c8:
ee:6d:9c:a7:08:d9:ac:72:c9:7b:db:ae:32:9d:10:57:ee:12:
4a:f6:5c:02:94:b0:bd:2d:90:d8:6c:ca:cf:e7:ab:25:84:31:
76:93:eb:77:6d:52:c3:6f:04:f2:e0:a2:9d:00:2c:76:c6:5d:
43:62:78:7d:96:39:09:dd:28:e4:72:81:48:da:db:19:e6:c9:
8b:5a:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:36 2026 by rpki-client