Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: umCo9rsyb6zGiYP3TCVxgf6SItWK+t7VCV9/QgLkumQ=
Subject key identifier: 22:46:E9:70:37:43:DB:56:A4:E4:58:1D:6D:1F:59:F5:3E:4E:18:A8
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 01A0D83B82ADE316639905BD24B0482A4D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 1A05
Signing time: Fri 25 Sep 2026 11:02:53 +0000
Manifest this update: Fri 25 Sep 2026 11:02:53 +0000
Manifest next update: Sat 26 Sep 2026 11:02:53 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: 9F2zffBvICXAavFxgVs3GnnvI8tsMt4pyUX8Mm9JuM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:82:ad:e3:16:63:99:05:bd:24:b0:48:2a:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: Sep 25 11:02:53 2026 GMT
Not After : Sep 26 11:02:53 2026 GMT
Subject: CN=2246e9703743db56a4e4581d6d1f59f53e4e18a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:e4:59:71:4e:60:90:72:26:ae:e2:e5:66:
b6:be:08:f3:4b:97:6f:73:9a:a8:f1:69:74:29:ad:
2c:6a:a4:ce:62:95:94:3f:61:91:22:de:2c:be:47:
04:bb:43:0a:23:40:63:3f:a2:04:79:be:3e:f3:05:
61:c1:c0:33:af:91:c2:bb:da:b6:1b:59:f5:54:12:
34:47:f0:f0:e3:25:62:1e:be:d8:cc:6a:9a:78:c7:
86:92:e5:89:f6:3c:e4:1b:90:9b:91:79:5f:b4:0a:
92:55:bd:9b:57:bf:9e:46:d9:d1:9c:ad:71:35:80:
4d:08:0f:13:78:4d:09:1a:15:3a:85:85:42:98:e5:
7e:e2:4d:84:57:88:b9:64:f4:93:eb:88:f4:03:3c:
81:24:e6:f3:f6:79:23:8a:93:59:24:f2:78:a3:dc:
3b:b1:30:dc:79:39:ec:63:24:d4:4e:57:cc:fc:22:
57:6d:c2:6d:9b:95:0c:2f:7b:5a:88:bc:2f:3e:e8:
51:f2:9f:24:03:55:66:94:14:49:52:79:ba:d3:c5:
cb:97:c7:d2:00:08:97:bf:a8:99:6d:6a:2f:c8:24:
3f:44:f3:67:8e:10:ab:bf:7e:9f:3a:11:4d:27:2e:
3c:30:cd:8d:f2:b9:cf:05:f2:d6:20:18:5f:d8:7d:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:46:E9:70:37:43:DB:56:A4:E4:58:1D:6D:1F:59:F5:3E:4E:18:A8
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2f:d7:4d:13:4b:06:a5:a2:25:0d:b0:cd:00:c7:3e:4a:02:
8c:1e:23:64:a8:bd:ef:9a:8a:88:63:ce:a4:d6:87:21:cf:38:
89:17:43:84:f5:78:3f:20:5d:ef:b0:7e:10:17:9c:64:9e:d8:
ca:36:60:30:5a:db:b1:54:04:37:47:00:10:e8:5e:2a:5b:57:
52:30:bb:23:7d:e8:e7:ed:57:70:a6:c7:f2:9e:53:3d:77:a9:
cb:6f:ca:55:e8:c6:41:02:a6:22:06:91:61:76:73:7e:22:d4:
e3:41:eb:0d:07:1a:0e:ff:1b:49:d3:05:e8:80:42:7a:ff:65:
ad:96:97:31:52:3d:b9:bc:e8:bb:b1:b3:f5:42:ec:da:94:46:
a4:c1:f1:6f:da:87:e9:a1:f1:f6:38:61:cd:19:17:7d:3e:3d:
04:75:a9:83:e0:fa:11:56:e0:bb:d2:fa:bc:db:22:9c:1e:44:
a1:cc:a1:da:fc:ba:c1:01:a7:91:ee:05:af:4e:ae:67:60:8a:
9f:3c:46:43:aa:33:3e:e8:f6:1e:26:71:5c:ff:90:ce:44:1c:
fa:55:2a:91:6d:cc:4b:19:68:76:66:3f:16:66:6a:54:9a:02:
ee:e2:c1:c0:e3:91:71:a9:e6:ec:ef:6c:f5:86:50:24:10:99:
b8:af:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:11:22 2026 by rpki-client