Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
File: 1BOwVNiCtNee47m306uy98Wycb4.mft (raw, json)
Hash identifier: Nk27BaVYYHvlBqdm7PNPjF49qA9+CGiFMhCW5GnFjUE=
Subject key identifier: 38:86:FD:DF:E6:B2:E0:6F:51:16:58:B7:FD:70:36:2A:6A:8B:46:D2
Authority key identifier: D4:13:B0:54:D8:82:B4:D7:9E:E3:B9:B7:D3:AB:B2:F7:C5:B2:71:BE
Certificate issuer: /CN=d413b054d882b4d79ee3b9b7d3abb2f7c5b271be
Certificate serial: 01A0DD29B51A8295356710BC2CF04811C41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
Manifest number: 0122
Signing time: Sat 26 Sep 2026 10:01:32 +0000
Manifest this update: Sat 26 Sep 2026 10:01:32 +0000
Manifest next update: Sun 27 Sep 2026 10:01:32 +0000
Files and hashes: 1: 1BOwVNiCtNee47m306uy98Wycb4.crl (hash: R8z48tLaCuynJcVCoDe9ktfuC6awErdsrWqxvLtSYDo=)
2: E-afr4F2Q1-YX2MSxrM7oF618aU.asa (hash: DyeMjeNi1YFyAHlDQKwQ+V3mc3ffjKyYa2gMYLJ2l18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:b5:1a:82:95:35:67:10:bc:2c:f0:48:11:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d413b054d882b4d79ee3b9b7d3abb2f7c5b271be
Validity
Not Before: Sep 26 10:01:32 2026 GMT
Not After : Sep 27 10:01:32 2026 GMT
Subject: CN=3886fddfe6b2e06f511658b7fd70362a6a8b46d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:fc:4b:b5:5c:48:99:e6:8a:79:94:1c:54:
75:bf:b9:c2:c6:b7:24:d2:06:d4:a6:e4:f9:09:3f:
d7:0d:0d:17:1e:10:73:bd:d1:cc:95:ef:09:36:fc:
1a:7b:df:06:0e:84:f6:f9:41:95:73:68:d8:19:2e:
c5:f5:ae:c6:68:7b:f7:a6:c3:3d:5e:ad:58:07:68:
ac:85:69:6e:7a:44:8f:d8:24:ce:e7:10:45:f4:9a:
cf:d1:ce:40:b7:06:ef:b2:38:d8:43:f5:3d:50:63:
86:9b:1d:8c:24:a4:e2:01:4d:2c:46:cd:a6:85:9b:
8b:e8:7a:47:4b:f9:f7:e1:14:16:10:83:c1:af:03:
bf:00:d1:5d:c2:89:e2:fb:52:e1:99:48:b4:94:4c:
dc:6e:d5:ee:84:86:e7:c8:52:69:57:3b:1a:f0:a7:
4b:e6:3c:af:86:24:91:f6:45:1e:83:0e:aa:39:f1:
7e:99:8b:c9:0b:e8:0f:b4:57:e1:39:d7:dc:37:c7:
70:a9:a1:47:8d:8a:b6:0e:91:c1:72:09:f7:af:f0:
cd:fa:7a:1a:f9:c7:84:4e:02:1b:ee:5f:56:e0:3a:
db:e1:60:d8:44:7b:fd:ae:39:d5:2a:c2:c1:84:8b:
f3:03:1e:80:72:44:9b:f0:9a:f7:6a:33:3d:c7:fb:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:86:FD:DF:E6:B2:E0:6F:51:16:58:B7:FD:70:36:2A:6A:8B:46:D2
X509v3 Authority Key Identifier:
keyid:D4:13:B0:54:D8:82:B4:D7:9E:E3:B9:B7:D3:AB:B2:F7:C5:B2:71:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BOwVNiCtNee47m306uy98Wycb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6aa46b-6e08-4be9-8ee8-52c6404aa6d2/1/1BOwVNiCtNee47m306uy98Wycb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b4:f1:58:07:41:9a:5b:5e:f7:bf:45:6b:58:0a:30:f8:78:
7e:7f:1e:8d:6b:14:0f:e0:d8:e0:37:7e:7b:c1:10:df:ba:f3:
68:8e:89:12:19:8a:63:75:59:fb:0c:c3:af:90:af:93:0e:52:
a8:e6:1f:64:88:d8:39:b9:15:2d:e1:15:46:68:a1:34:e5:ac:
29:09:f9:c6:0a:57:c3:3b:d8:c5:91:39:53:dc:97:01:a0:ce:
22:d7:83:bd:c0:a8:65:44:5b:40:68:8b:30:54:c4:82:ee:37:
91:0f:d4:5c:91:00:08:08:c7:df:94:cd:2a:04:a0:13:d3:e1:
14:76:59:12:55:4f:86:46:d6:04:4e:c6:22:ba:c2:c3:cc:67:
f1:7e:95:d3:07:b1:78:96:e7:e8:ef:01:b8:b7:36:4e:93:ca:
76:ed:74:62:7e:fa:4e:97:21:23:9f:07:de:71:44:8c:cc:14:
c1:40:06:60:85:f1:98:77:9c:ce:70:62:d7:a6:e0:5d:be:71:
b5:a7:42:40:74:d3:12:be:41:cc:ea:c5:e6:16:c4:47:be:d7:
62:b8:72:52:c0:cc:6c:65:2e:df:7b:ca:b6:5b:4f:85:fb:6d:
a6:64:f6:a4:45:74:8d:db:89:c7:7d:bb:7e:eb:dd:3a:13:1b:
36:0d:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:56:31 2026 by rpki-client