Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: 6l42dIJVX/xFddOtEVy8SCCstZ4XeB2kOBMk2VTZsDs=
Subject key identifier: 1D:DC:B6:72:77:77:C0:81:F9:84:37:B6:E0:9E:16:A1:73:54:6D:7A
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019EBF5A8AD52F299066A50CA436DC1C3966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 1015
Signing time: Sat 13 Jun 2026 05:00:42 +0000
Manifest this update: Sat 13 Jun 2026 05:00:42 +0000
Manifest next update: Sun 14 Jun 2026 05:00:42 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: 89urEKZmnYHd1Nxw0fp5dvDg46pVdh1V7K1ZhLgaliI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:8a:d5:2f:29:90:66:a5:0c:a4:36:dc:1c:39:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jun 13 05:00:42 2026 GMT
Not After : Jun 14 05:00:42 2026 GMT
Subject: CN=1ddcb6727777c081f98437b6e09e16a173546d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fc:37:1a:30:26:c6:b2:c6:86:17:6a:a5:ad:
3f:99:48:af:01:7f:e9:d4:ae:5d:a3:07:14:03:cc:
57:39:30:7f:7b:75:65:c5:9c:90:a9:80:32:44:17:
9f:23:c7:d0:e3:d7:dd:37:84:48:5c:d9:26:32:b5:
1c:56:5b:e3:a2:6b:bb:73:fb:45:01:6d:09:99:59:
fe:4a:cb:01:c0:25:b1:f3:4a:8e:d3:f6:07:76:eb:
45:d1:7b:79:f2:1d:e4:d7:c3:93:98:6a:02:62:47:
0f:6a:06:f3:84:e3:9d:23:ec:bf:09:c4:44:a6:55:
c0:9c:62:57:d8:30:68:3a:b1:2f:24:e8:79:be:9d:
75:49:de:f5:a6:2f:1c:57:2e:ff:d6:09:f0:f5:81:
44:11:16:80:cb:6f:ac:cd:8e:32:ee:62:39:99:50:
5e:d0:30:bb:0d:5e:d4:d2:3f:19:d1:7d:cf:e3:e3:
82:75:6c:1d:6d:6d:10:bf:ba:dc:e1:a4:e3:1d:5c:
48:f2:3c:75:28:59:38:17:55:3d:21:7c:3a:3d:04:
ec:df:90:ed:89:ca:03:f1:9e:be:6c:41:dc:f3:0d:
ba:c8:7c:cd:81:c2:da:8d:af:6f:31:8d:66:0e:b1:
07:af:80:dd:2d:44:54:b0:86:96:ae:6c:57:18:d4:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DC:B6:72:77:77:C0:81:F9:84:37:B6:E0:9E:16:A1:73:54:6D:7A
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:29:eb:01:15:5d:b5:ee:99:87:45:d3:68:6f:0a:19:2c:d3:
e0:c0:f9:72:40:8f:e5:a1:21:54:13:3a:b8:eb:ea:74:87:10:
5f:88:40:c1:3e:71:c5:ef:b5:8f:12:e6:53:40:7f:52:bc:05:
b5:ee:63:73:c6:74:59:3f:93:b2:0e:81:d8:a8:77:fc:b0:91:
ba:a7:76:d5:9e:b6:dd:bc:e0:85:33:65:a9:9c:57:1b:4f:09:
6a:65:84:c5:2d:c2:56:d2:c9:e3:af:2e:46:3f:63:85:30:d6:
e7:f2:36:95:18:ca:ec:3d:1a:28:55:a1:73:f5:23:23:b5:d9:
71:2a:c3:13:df:ba:ea:25:a2:b7:15:e4:98:70:cb:89:b0:23:
8b:80:8a:06:5d:da:2b:ba:c7:06:3a:32:2b:01:95:da:fb:65:
47:57:53:71:ed:90:9e:73:52:91:9d:7f:5b:7a:a2:50:1d:4a:
55:89:3c:81:dd:6b:89:83:6b:ad:f5:99:b2:eb:64:d5:0a:3e:
45:5b:7d:ab:d6:76:70:dd:db:4c:88:52:5e:41:a6:c4:b4:26:
da:b1:fb:4f:72:10:3d:61:34:7b:67:8e:37:4f:41:8a:54:a7:
ac:6e:a4:89:2d:31:7e:d9:51:ba:8d:b7:d9:ca:22:ca:e2:c3:
55:0b:18:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:45 2026 by rpki-client