Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: 6mihQlorH8TZuZuULgasLr1S94y5a5MeM5aaQmmGsKQ=
Subject key identifier: 63:92:E2:6E:12:79:DC:6A:82:78:1B:3A:D4:23:0B:21:D4:F9:F3:21
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019FA906D1851F9BAFA92F51BC284B2563A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 108E
Signing time: Tue 28 Jul 2026 14:00:24 +0000
Manifest this update: Tue 28 Jul 2026 14:00:24 +0000
Manifest next update: Wed 29 Jul 2026 14:00:24 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: bqlxKeJw8lCnixq6p6z0qSb4PICHHte8NaVgsurX96E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:d1:85:1f:9b:af:a9:2f:51:bc:28:4b:25:63:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jul 28 14:00:24 2026 GMT
Not After : Jul 29 14:00:24 2026 GMT
Subject: CN=6392e26e1279dc6a82781b3ad4230b21d4f9f321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:c3:4f:78:4b:85:ef:f5:1b:d2:49:bd:b6:
9b:e6:5f:8c:ef:e3:14:40:d9:ce:59:fc:c9:6d:68:
5d:39:60:14:c1:2a:1e:a0:5d:94:e8:0e:e9:6c:b6:
0a:00:48:c0:93:58:83:7f:77:52:1d:13:37:ec:6a:
36:bf:a0:ac:f9:f6:6e:07:f2:cf:b9:2c:27:7a:61:
da:27:cb:81:8d:f9:7c:c9:53:e8:a3:ca:24:8f:6d:
2c:77:40:b6:6b:68:2d:e1:ba:57:59:78:7f:51:3f:
72:97:b4:84:1d:44:1f:fe:11:fd:8e:68:af:17:85:
80:f3:75:13:b4:0d:98:63:2b:e7:96:52:bf:b0:60:
b3:71:13:dd:84:88:0f:9a:a2:aa:1c:7e:5a:f7:46:
85:a7:c9:46:2d:25:65:45:cc:14:5c:24:80:cf:c6:
6f:1a:d4:da:90:a1:c3:b9:bd:2e:a5:31:42:ad:a6:
f7:5e:f7:f0:da:77:44:92:e6:56:3c:52:9b:cf:a1:
be:c8:c9:a7:a2:16:50:9f:f1:c0:28:ba:5a:bf:23:
88:ff:fd:98:14:e4:35:2c:00:2a:9c:d7:ba:c3:00:
e4:ac:0d:9e:82:e8:9b:76:ea:28:2c:2a:8c:da:25:
39:50:2a:28:58:4a:b7:13:76:7d:56:7c:5e:40:8b:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:E2:6E:12:79:DC:6A:82:78:1B:3A:D4:23:0B:21:D4:F9:F3:21
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0c:c6:99:bb:89:8d:58:13:36:4d:8a:8d:23:a9:ef:c2:d4:
f4:03:c4:07:14:5a:35:88:cd:7f:ec:54:51:b1:fb:6e:15:99:
86:a5:02:b9:54:fa:6b:18:22:80:93:9c:ff:96:6e:d6:84:73:
f7:24:d0:0c:27:a6:f7:2e:86:ac:53:8c:48:e0:92:46:be:08:
45:35:3f:4f:7f:cf:88:e5:9e:55:87:a5:fb:32:c2:8f:d3:a1:
89:e2:a5:78:3e:c9:29:55:04:3d:ab:84:f1:fa:e6:bd:8b:c0:
7b:66:b9:15:23:37:71:c4:dc:1d:dc:ac:1b:0d:6d:99:32:22:
d9:0c:5b:f8:2a:c5:35:88:0d:20:e5:84:fe:d5:de:12:ff:66:
4a:11:85:00:c1:3e:41:58:c5:a3:b2:63:82:b8:76:8c:44:dd:
c4:f9:63:e0:24:1d:b6:fe:80:e2:4d:ce:05:9d:a7:0f:89:ba:
66:73:b4:c1:d6:3e:ec:24:04:0c:6e:cf:1b:d6:ba:dc:8a:37:
3a:53:2e:eb:f1:96:92:95:30:9c:1d:fd:6e:7f:df:15:be:d1:
9f:19:90:dd:0f:5f:f7:60:07:3a:32:6b:b3:db:b0:2a:27:df:
70:e8:11:a0:f6:c8:ca:a9:eb:7b:ee:be:04:c8:bd:60:24:08:
3c:18:f8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:06:04 2026 by rpki-client