Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: 80HDwpr9jAgnzc61ma2pFo0FTDaLkeKa7z3JC2TDFJg=
Subject key identifier: 5E:FA:67:7B:AA:22:98:2E:D4:B8:BF:74:5E:B5:2E:87:E5:EC:9C:6F
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019CAA58AD6E9C63FE58A1518F40F90A2B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0F01
Signing time: Sun 01 Mar 2026 17:01:03 +0000
Manifest this update: Sun 01 Mar 2026 17:01:03 +0000
Manifest next update: Mon 02 Mar 2026 17:01:03 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: SzleQhd02HjK2YS291lJVua+vc/AT1hXk0F3CUv2PuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ad:6e:9c:63:fe:58:a1:51:8f:40:f9:0a:2b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Mar 1 17:01:03 2026 GMT
Not After : Mar 2 17:01:03 2026 GMT
Subject: CN=5efa677baa22982ed4b8bf745eb52e87e5ec9c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:5b:08:c7:18:86:75:66:e4:08:58:37:28:
8f:9a:65:37:9e:38:0c:29:87:54:4b:77:7b:bd:a6:
66:d7:f3:a1:51:22:e2:0e:b0:43:1d:57:d8:4a:ab:
8e:33:a1:49:9e:fc:31:00:30:1e:84:29:77:c5:cd:
a9:9c:cb:37:9e:42:69:41:b7:0f:d3:29:e8:ed:b7:
1d:46:31:2d:0b:f5:45:9f:50:bc:43:f9:04:bb:b0:
7c:ec:60:eb:13:77:ed:e9:ae:49:4a:ec:93:4b:b6:
45:bc:ad:d7:f6:0a:61:b7:cf:c5:07:ee:8b:5e:3d:
d5:74:05:43:ec:db:90:55:d1:b3:40:2d:2f:5a:80:
27:a4:75:93:6f:65:32:37:5f:ae:cf:c1:33:1e:c4:
4f:15:c3:8c:c5:8d:93:35:7e:a2:3f:d2:11:a3:73:
68:8d:d3:b4:62:5b:4e:62:c5:7e:28:6a:cc:50:8b:
e5:44:eb:ca:4f:1b:f2:e2:d7:bf:79:d6:9a:bb:f6:
30:f0:2a:88:56:82:be:28:98:d2:a8:1f:d0:d9:a1:
63:91:66:d5:be:4f:5e:3a:a4:0d:70:b8:04:41:9a:
36:a2:a7:c0:f9:57:27:4b:58:4c:bc:f5:5e:dd:79:
d3:6e:98:23:a4:92:43:c7:2e:40:54:4b:f5:f6:d5:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FA:67:7B:AA:22:98:2E:D4:B8:BF:74:5E:B5:2E:87:E5:EC:9C:6F
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e9:58:e3:59:d7:b8:52:43:0c:52:84:46:dc:77:d1:21:10:
11:2a:25:37:7f:32:62:9c:8a:3e:a5:9e:bb:ec:10:b9:9c:bd:
e2:2a:d5:5f:0c:0f:a8:d0:7c:2c:b3:50:28:0a:cd:80:88:5d:
9d:9e:ea:3c:00:16:0e:80:7c:33:81:69:8c:36:c1:9e:9a:7b:
91:e0:1a:73:c2:b9:65:97:ac:54:17:a2:c4:da:f1:32:fc:61:
34:80:e2:1b:f7:f0:72:4b:a6:72:88:03:aa:c5:08:21:3d:a0:
74:3d:08:44:97:3e:e1:ad:ce:fe:d2:9e:8c:b4:6b:64:6a:b7:
29:be:91:ca:4f:0f:85:cb:8d:72:57:0c:91:19:c9:13:0a:b6:
33:d5:15:7c:43:b7:16:20:b0:95:fb:fa:48:fa:5c:07:a5:c3:
d4:72:c2:5c:bb:4e:cb:20:99:f5:26:95:26:c4:b1:e2:12:ed:
99:20:fc:b5:63:8c:91:fe:d4:80:ee:75:ce:0d:df:32:d2:79:
5f:8a:b6:88:b7:85:35:b6:c1:e3:6c:47:2f:da:0f:7c:84:3f:
69:24:cf:18:a8:3b:c0:87:f9:02:17:d1:9c:f5:83:e4:85:1e:
9a:3d:9a:a4:4c:32:94:b8:05:0d:df:bc:b3:23:2a:cd:6c:16:
0a:99:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:50 2026 by rpki-client