Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
File: bI0-HD8Fey_LtJrgMEReEurgsw0.mft (raw, json)
Hash identifier: hqk2E3QBAINoFY17ROaJahnKbZzElkMAtkIxMNu3T28=
Subject key identifier: 21:FE:C3:A0:6C:BD:6A:F6:D1:63:1A:A9:02:0C:49:CD:70:6F:39:A7
Authority key identifier: 6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
Certificate issuer: /CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Certificate serial: 01A0C85981E84D55674A1CE51F443A8E8F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:44 +0000
Manifest this update: Tue 22 Sep 2026 09:01:44 +0000
Manifest next update: Wed 23 Sep 2026 09:01:44 +0000
Files and hashes: 1: UDflW4qKHgaeJ7MC9kLoPznsjiU.roa (hash: pJeNm8HWUIyS3A3dKqU3o6igG4hqSi4lZOd1wNQLmxU=)
2: bI0-HD8Fey_LtJrgMEReEurgsw0.crl (hash: NGlOiceLmd/cYMnvKpo5ne2nVEYE3m1tcEMZCIlWGXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:81:e8:4d:55:67:4a:1c:e5:1f:44:3a:8e:8f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8d3e1c3f057b2fcbb49ae030445e12eae0b30d
Validity
Not Before: Sep 22 09:01:44 2026 GMT
Not After : Sep 23 09:01:44 2026 GMT
Subject: CN=21fec3a06cbd6af6d1631aa9020c49cd706f39a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:48:15:3a:7e:81:9d:51:1b:3c:64:d7:92:37:
d2:03:23:45:e3:b3:2c:e6:d4:49:33:67:8b:a6:31:
40:35:14:0d:6a:d8:a1:87:88:b2:f5:75:99:c2:62:
51:c6:8d:20:d4:be:ac:7f:83:06:ec:a6:56:ec:a1:
bf:30:1b:a0:62:56:3c:19:6c:15:fc:86:c6:f4:5d:
94:5a:fa:38:b6:3d:f6:b6:0b:1b:4b:84:ad:80:c7:
65:79:68:5e:45:b5:83:22:b1:45:02:06:d0:78:05:
bb:f6:e7:b5:26:00:af:80:c4:0e:2a:9a:00:45:03:
f3:b3:f8:62:79:65:d1:a2:3f:47:f0:34:cb:f8:05:
95:22:d1:ee:fb:ac:f8:31:75:6a:f9:8b:a8:a4:79:
27:84:d0:2d:45:96:82:b0:8e:49:7b:57:31:70:45:
61:28:6e:0b:b7:9d:73:fe:d6:8c:ea:50:ba:83:5e:
08:ef:70:fe:68:9f:00:a7:72:5f:63:33:24:8a:f0:
fe:a8:c8:ad:3c:c1:4e:48:f5:c0:23:de:70:f8:6e:
d2:db:9a:07:8c:95:d3:ab:85:36:ec:40:5c:2f:18:
f2:99:db:55:8f:29:3f:16:5c:30:1f:09:13:fc:09:
3b:5b:d3:1d:77:50:90:e3:83:1d:0c:8b:77:09:07:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:C3:A0:6C:BD:6A:F6:D1:63:1A:A9:02:0C:49:CD:70:6F:39:A7
X509v3 Authority Key Identifier:
keyid:6C:8D:3E:1C:3F:05:7B:2F:CB:B4:9A:E0:30:44:5E:12:EA:E0:B3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI0-HD8Fey_LtJrgMEReEurgsw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0f419e-942c-4bc4-a75d-2c7d1812ba3e/1/bI0-HD8Fey_LtJrgMEReEurgsw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f6:7f:4a:33:4b:28:19:81:4d:f0:6b:07:86:3c:97:a6:e8:
15:7d:20:73:e0:a8:4a:a4:6c:71:66:70:e1:a6:3d:db:4e:05:
e1:e7:f7:df:43:08:25:2b:cc:85:9b:0f:cc:2d:ac:3d:c1:b6:
aa:3c:78:4c:1b:3c:9b:ca:36:2f:1e:89:66:d0:6c:28:3a:3c:
50:33:d4:99:0c:e6:4c:e5:93:e8:da:a2:8e:56:97:66:6d:c8:
c9:5f:97:ca:f6:b7:58:63:1c:09:38:be:be:43:a2:f5:b7:28:
a6:a7:61:81:62:b2:95:dc:2e:8d:ef:04:65:ba:19:31:a0:97:
c4:a9:18:68:26:8b:00:53:9c:a0:d7:b8:88:1d:7d:8c:64:01:
b4:f3:e3:09:94:70:f4:8d:24:fb:7a:3a:a3:10:c2:61:41:ca:
c9:01:40:3d:c1:31:9b:49:6e:da:23:22:8b:2c:c5:2e:18:c1:
0b:13:51:65:fc:9b:ce:d5:3f:1c:1a:b8:53:a4:69:ff:4f:66:
a9:03:44:e3:41:ac:f5:cc:7c:40:75:09:1e:5a:d8:c2:86:ea:
16:10:0e:f0:0d:1e:f2:3e:02:be:91:1d:bc:96:fa:08:a2:1e:
7c:c4:23:45:c9:e1:bc:71:39:d8:c0:21:c4:3a:4b:17:3b:db:
44:aa:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:08:54 2026 by rpki-client