Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier: GXl5mfC3OJpKQvF510wcgL9uQyD1TEUZfuGaZ8jP2a0=
Subject key identifier: B6:C0:F5:C7:F5:90:D6:C7:5B:69:38:B0:E2:CD:41:FF:B7:22:CB:8A
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 01A0C66A6B031AA831C3007691152DC38D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 00:00:58 +0000
Manifest this update: Tue 22 Sep 2026 00:00:58 +0000
Manifest next update: Wed 23 Sep 2026 00:00:58 +0000
Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: 4LaCOAMQ0NLAlrNb+GniNOyRAsajhF70YVmcMVdJQWo=)
2: L_TvjuvkS8Ae6hr2C351DvSCXtw.roa (hash: iKhq8WVW3Ih/b09mpbpUlZEB5fDDBgm0pJSp3ErD2hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:6b:03:1a:a8:31:c3:00:76:91:15:2d:c3:8d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Sep 22 00:00:58 2026 GMT
Not After : Sep 23 00:00:58 2026 GMT
Subject: CN=b6c0f5c7f590d6c75b6938b0e2cd41ffb722cb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:bc:6d:43:89:13:eb:10:91:e0:80:3c:db:
a9:b1:12:d8:3e:c6:47:7e:a3:ab:a9:50:51:b2:e3:
5f:ed:4c:18:19:b4:57:1b:56:0c:bd:81:f0:7b:a8:
85:64:b0:03:fb:54:aa:48:57:c7:9e:dd:45:f4:a5:
b1:f9:92:e6:13:92:69:1b:9d:70:bb:15:d1:d1:d0:
5e:63:75:0e:3a:22:a5:3d:be:34:37:66:95:a4:0a:
6c:9f:08:b5:e6:81:96:36:d4:58:33:f6:9d:1c:17:
c9:e9:dd:36:15:c2:ad:da:9a:4d:28:41:b8:41:0f:
f3:6f:52:5e:d4:a9:17:55:01:f3:f3:e4:ef:13:dc:
8d:2e:9b:ab:6c:c9:e5:41:4e:aa:5d:07:a0:a7:6a:
f9:34:2e:b0:80:cc:86:a7:19:0a:1b:fb:a4:63:b5:
df:ca:11:4a:33:e4:bd:24:73:36:0a:f6:a8:ac:ac:
a6:e8:a0:cb:e1:3b:8b:3f:e1:2c:db:fd:d4:e6:ec:
0d:5d:fc:fe:61:75:3d:5d:b1:e1:27:1d:54:a1:4f:
c5:7f:6a:0e:c2:b3:1e:3e:ca:1a:7f:47:a7:a6:7d:
7d:a2:47:6e:49:e0:9a:53:4d:8b:50:b2:07:f3:b9:
77:31:3a:9f:ad:7b:77:c5:8b:02:c4:30:e6:f0:7f:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C0:F5:C7:F5:90:D6:C7:5B:69:38:B0:E2:CD:41:FF:B7:22:CB:8A
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:de:2c:79:6d:d7:9a:6c:ec:89:d0:0e:69:b9:e1:21:6a:24:
b4:35:56:37:50:fb:1c:af:0f:d6:9a:ab:c8:86:98:90:6b:de:
bc:36:fb:7f:f0:55:9b:68:54:60:ea:a9:6b:e9:2c:61:05:df:
6f:db:d7:ec:98:a0:c9:2d:e7:83:78:64:d6:38:20:e1:96:fc:
97:0d:7d:f7:b9:95:2a:92:a9:0a:5a:7f:eb:97:64:77:89:5a:
da:7e:f5:48:a1:fb:b3:0e:a4:14:31:52:09:c3:4e:04:64:d1:
6f:59:f0:73:74:d7:32:bd:3d:80:d5:22:6f:90:8a:1f:7e:c2:
0e:76:7d:41:1c:41:95:9e:0d:6f:be:2b:86:9f:ab:13:05:84:
30:ea:20:c9:ca:08:7c:54:a0:37:da:cc:d1:2f:ae:1c:34:42:
a2:3b:32:32:b7:a9:d6:ae:16:7b:82:de:f6:6f:0f:5d:ab:50:
d4:30:b1:ed:b5:1a:3a:2b:83:df:ae:1a:63:f6:3a:09:f3:5d:
ab:26:e2:ca:de:3f:f8:c3:0d:2b:01:77:ab:c2:3c:2a:b9:18:
8c:40:3a:d6:e5:22:ee:47:e7:8a:ab:13:0b:54:03:f1:b0:47:
a6:d1:2a:7a:fd:9d:64:fd:5d:56:b5:0f:70:16:82:b9:8b:83:
00:24:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:49:03 2026 by rpki-client