Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: kd/Oovp/3ik0LzvF+UmqtqcvAhemNfN9D3Bwmdmpptk=
Subject key identifier: 7F:B1:6D:FD:DD:62:8C:5A:28:75:79:34:03:1A:5D:C8:9B:01:68:36
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019DA378A96FFD12BE95BEB484BC47509C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0F82
Signing time: Sun 19 Apr 2026 02:01:27 +0000
Manifest this update: Sun 19 Apr 2026 02:01:27 +0000
Manifest next update: Mon 20 Apr 2026 02:01:27 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: haTxvqpoMvxmUi7kojz/zJgb6iJMFFC4kamiyhU9L24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a9:6f:fd:12:be:95:be:b4:84:bc:47:50:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Apr 19 02:01:27 2026 GMT
Not After : Apr 20 02:01:27 2026 GMT
Subject: CN=7fb16dfddd628c5a28757934031a5dc89b016836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:34:4a:3d:a9:a5:45:72:90:c8:04:58:10:
fa:b7:9b:c0:b3:1b:d8:9a:12:56:b3:1a:4a:be:59:
58:41:59:40:ef:7e:dd:84:81:dc:fc:f6:6c:17:d0:
64:07:8e:0c:c3:76:21:ac:e0:86:67:49:c4:6b:b9:
ca:74:5e:ad:df:5b:da:e9:98:d3:36:1f:64:74:c4:
02:5d:d5:b1:81:ab:91:de:34:70:28:7c:8c:89:e9:
31:9d:5f:ee:97:09:fb:5e:90:9e:a0:e2:82:43:0d:
fc:a6:0b:f1:07:3a:43:23:88:7b:ef:26:98:12:11:
18:73:78:0c:c9:50:6f:3c:2c:bf:73:2a:78:1a:2f:
70:bf:5d:d0:c8:99:67:e3:47:78:58:10:d0:0e:0c:
2c:48:46:6e:e8:e1:bf:b4:a0:a7:dd:92:95:5c:f2:
11:03:fe:1a:9f:1a:cc:a1:6c:e4:6b:7f:67:2b:2c:
62:ca:66:3f:5a:19:24:7f:86:ec:ef:84:da:fe:1f:
f4:34:4c:ff:eb:b7:e4:4b:cb:f9:29:42:60:5e:ee:
0a:69:45:f0:67:7f:da:4f:18:97:86:8d:4d:0c:bb:
28:9c:18:32:ba:e7:59:34:21:e5:8a:bb:23:d4:1b:
6d:a6:c8:4c:bb:90:2f:1c:21:11:e7:32:b5:05:4e:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:6D:FD:DD:62:8C:5A:28:75:79:34:03:1A:5D:C8:9B:01:68:36
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:bd:c9:01:68:96:e7:96:20:cd:13:1f:ba:45:da:1e:27:40:
89:a0:4e:0c:3b:b2:94:37:ad:91:39:9f:98:0a:e6:45:94:47:
e5:cc:15:69:7d:0a:9b:a4:70:5a:18:52:b1:a5:af:2c:cc:db:
22:bb:fe:ca:7a:03:33:e4:55:b7:d7:60:69:fd:3f:a7:70:5e:
f6:9a:fb:5a:74:22:c2:19:f5:3f:f6:11:3e:aa:9e:64:69:f1:
b4:2c:d1:ed:84:83:76:c0:bf:bd:bc:89:12:98:df:f9:8e:0c:
7f:ad:74:93:39:b2:83:e4:22:cc:ec:8c:20:c7:49:b6:d8:91:
05:2b:b3:d8:e7:c5:60:e9:42:4f:e8:fb:06:9e:17:f5:c9:7c:
1f:ea:eb:5d:4a:bc:57:e9:00:41:01:27:24:50:3c:2a:b8:82:
05:da:ea:5a:0b:f5:9f:e6:f7:fd:05:96:10:34:83:21:a2:6c:
f1:d1:db:cc:15:e8:1d:8c:fa:bf:54:b2:9b:2c:a9:19:75:4e:
db:43:2d:3b:c3:8f:ec:ed:34:b8:77:26:6f:6b:aa:b3:02:ec:
bd:ae:de:01:33:ab:91:ef:e7:10:36:b0:eb:98:d3:93:25:e1:
7a:67:ac:a3:ff:08:f9:cc:67:ef:79:91:17:47:07:a7:5c:57:
78:3f:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:54 2026 by rpki-client