Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: Bh3fe/9Ogl8IWlKH7bQWpu+ZV/SsBdEswajmcPFVj7o=
Subject key identifier: FF:E9:05:6B:35:FB:77:DD:7C:DE:10:A8:B3:2C:10:11:70:FD:E0:1E
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 01A0C2FB2942A5A2F33AFC83EFE65DCCD135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 1120
Signing time: Mon 21 Sep 2026 08:00:35 +0000
Manifest this update: Mon 21 Sep 2026 08:00:35 +0000
Manifest next update: Tue 22 Sep 2026 08:00:35 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: qyGTt3fBI4POA+LQ7MQazdXKdxlpguJoPiuC6fC++aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:29:42:a5:a2:f3:3a:fc:83:ef:e6:5d:cc:d1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Sep 21 08:00:35 2026 GMT
Not After : Sep 22 08:00:35 2026 GMT
Subject: CN=ffe9056b35fb77dd7cde10a8b32c101170fde01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:d8:98:95:32:d5:ea:01:2e:da:54:9a:a6:
cb:c7:ca:6b:f7:45:79:18:eb:95:34:b1:40:c6:c9:
e3:65:71:71:0a:ac:60:ae:97:02:34:bc:d5:7e:57:
33:f7:78:68:2b:a2:40:79:e6:8d:6d:13:6d:ee:38:
ba:15:a4:b0:f7:3d:76:b4:d5:da:33:3f:35:a4:a9:
76:ac:df:88:de:f9:2a:0f:fb:57:94:10:50:1e:dd:
72:2a:c2:b2:a1:3e:fd:39:28:eb:0b:85:a0:6d:b6:
c4:cb:c9:31:41:07:9b:32:33:81:20:b4:07:48:76:
d4:0b:86:70:1f:9d:b2:41:fa:b9:9a:4d:0f:d1:40:
62:d8:6e:c4:64:48:c2:87:e2:da:48:87:2a:20:2f:
2e:b1:63:4d:4e:f2:88:cc:f2:65:a6:5f:b1:90:53:
90:91:6d:56:15:78:b2:62:44:3e:ce:83:7e:44:b6:
56:00:79:35:39:52:4f:f3:8c:da:e4:2e:0b:07:28:
8c:34:b7:e6:3a:71:d8:2a:27:57:05:be:7e:d5:5a:
93:73:8a:4f:4d:2a:c1:5e:df:33:72:97:17:8f:83:
56:43:cd:7f:c4:1e:4e:7e:a6:83:f8:60:7f:fd:7d:
a3:77:80:62:74:6c:60:e3:03:23:b6:20:1c:29:cb:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:05:6B:35:FB:77:DD:7C:DE:10:A8:B3:2C:10:11:70:FD:E0:1E
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:23:6a:26:e0:31:bc:09:40:3c:29:84:9a:a5:2c:be:52:d8:
ef:0d:97:d3:0c:75:87:89:44:3c:ae:a1:d9:8e:c5:c6:cc:ad:
a4:7a:68:11:53:76:6f:32:a9:80:06:2f:9a:bf:d2:0c:d6:0a:
d8:08:f2:9f:6a:c0:90:70:72:3b:ff:ea:75:cb:8c:45:2b:83:
1f:d4:28:7a:bf:8d:fb:fc:66:6f:79:83:7a:46:7b:02:3e:24:
43:70:60:25:f5:40:8d:98:24:e0:78:8e:a2:51:01:b7:e3:fb:
63:2d:49:41:1b:c1:35:d1:f2:03:1b:71:41:b3:3b:2b:e8:ac:
a7:97:20:ce:2f:da:65:aa:ee:8e:91:bb:c5:81:7e:30:01:5a:
f5:aa:f6:98:d5:15:ed:c1:ff:11:b7:8c:60:bf:03:ce:c2:63:
2a:e4:50:06:a0:42:7f:84:df:bd:bd:f8:51:39:97:42:61:80:
94:0d:25:39:0b:f7:30:6a:98:cf:76:da:e6:8e:b4:0a:d3:44:
df:74:1f:07:15:f5:82:6f:81:20:b4:34:06:84:26:49:16:5f:
8b:5d:4e:0f:5d:9c:c3:3a:f2:92:85:4e:8b:7a:9e:89:9d:03:
b6:41:0c:6f:5f:b7:9b:2e:e5:eb:23:cb:b1:60:a2:51:42:62:
11:93:aa:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+ylCpaLzOvyD7+ZdzNE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi
ZGI2NDAwHhcNMjYwOTIxMDgwMDM1WhcNMjYwOTIyMDgwMDM1WjAzMTEwLwYDVQQD
EyhmZmU5MDU2YjM1ZmI3N2RkN2NkZTEwYThiMzJjMTAxMTcwZmRlMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5fYmJUy1eoBLtpUmqbLx8pr90V5
GOuVNLFAxsnjZXFxCqxgrpcCNLzVflcz93hoK6JAeeaNbRNt7ji6FaSw9z12tNXa
Mz81pKl2rN+I3vkqD/tXlBBQHt1yKsKyoT79OSjrC4WgbbbEy8kxQQebMjOBILQH
SHbUC4ZwH52yQfq5mk0P0UBi2G7EZEjCh+LaSIcqIC8usWNNTvKIzPJlpl+xkFOQ
kW1WFXiyYkQ+zoN+RLZWAHk1OVJP84za5C4LByiMNLfmOnHYKidXBb5+1VqTc4pP
TSrBXt8zcpcXj4NWQ81/xB5OfqaD+GB//X2jd4BidGxg4wMjtiAcKctkawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/pBWs1+3fdfN4QqLMsEBFw/eAeMB8GA1UdIwQY
MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt
NjZjYTU3Zjc0ZTBkLzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk
LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyNqJuAx
vAlAPCmEmqUsvlLY7w2X0wx1h4lEPK6h2Y7FxsytpHpoEVN2bzKpgAYvmr/SDNYK
2Ajyn2rAkHByO//qdcuMRSuDH9Qoer+N+/xmb3mDekZ7Aj4kQ3BgJfVAjZgk4HiO
olEBt+P7Yy1JQRvBNdHyAxtxQbM7K+isp5cgzi/aZarujpG7xYF+MAFa9ar2mNUV
7cH/EbeMYL8DzsJjKuRQBqBCf4Tfvb34UTmXQmGAlA0lOQv3MGqYz3ba5o60CtNE
33QfBxX1gm+BILQ0BoQmSRZfi11OD12cwzrykoVOi3qeiZ0DtkEMb1+3my7l6yPL
sWCiUUJiEZOqSQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:21:42 2026 by rpki-client