Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: BePLoZRUhfQbOej9liWBPlDGWVw4wfsPOaIdlUjftYA=
Subject key identifier: 8A:3C:1B:49:48:DB:7F:74:AA:29:D9:F4:51:7A:0B:FF:92:91:69:65
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01A12BB24B18AFC95506D77E804C6DD2656C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 1A9F
Signing time: Sun 11 Oct 2026 16:01:07 +0000
Manifest this update: Sun 11 Oct 2026 16:01:07 +0000
Manifest next update: Mon 12 Oct 2026 16:01:07 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: X5O0vbz+6mWIl+j8lhIopfktF29ij7Z/D5m+OZq8FLI=)
2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:4b:18:af:c9:55:06:d7:7e:80:4c:6d:d2:65:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Oct 11 16:01:07 2026 GMT
Not After : Oct 12 16:01:07 2026 GMT
Subject: CN=8a3c1b4948db7f74aa29d9f4517a0bff92916965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:73:95:d8:3a:c3:14:6a:92:e5:d6:3e:88:
55:b2:0a:9e:3f:74:a8:fb:c3:85:9c:f5:51:8c:20:
af:fc:cf:04:21:28:7d:ec:27:c8:52:79:d2:23:93:
96:f7:b0:71:5c:f5:86:5b:59:fb:11:a7:bb:f8:63:
81:cf:81:7e:8a:f6:03:15:3b:54:e4:e6:1a:b8:06:
43:50:3b:3f:d6:7e:b0:ac:a2:69:74:b8:ba:63:d3:
11:74:b6:fe:e7:42:92:41:ee:dc:e3:44:8c:32:55:
af:e3:a5:7a:d6:61:15:e6:ca:2f:ce:4b:aa:19:0a:
27:a9:35:e1:6d:4f:5b:ec:2a:51:99:71:0e:f4:9c:
44:68:9e:3d:69:4d:11:80:a6:3a:3c:e4:70:ae:d7:
0b:eb:a1:77:e1:f4:35:62:93:a1:10:9a:e8:0c:4e:
12:d0:29:8e:5d:d8:13:75:ce:3a:01:10:5f:94:ad:
67:23:05:de:7c:c8:ba:4e:66:38:e0:4f:d3:2c:3b:
c8:ff:36:ed:39:84:6c:b0:3d:49:8d:e2:71:b0:72:
98:7f:c2:6c:44:4d:34:f3:fa:c5:55:57:4c:2b:12:
e4:25:b2:f8:c6:47:43:68:a5:27:b3:ef:33:dd:df:
b4:d7:7d:e2:1e:d3:63:16:e2:30:9e:ed:3c:73:92:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:1B:49:48:DB:7F:74:AA:29:D9:F4:51:7A:0B:FF:92:91:69:65
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a6:64:69:f6:31:ce:26:86:c5:68:0c:90:19:94:af:f8:d2:
12:99:ce:5d:87:b0:42:05:9b:8f:ff:27:9d:30:c6:32:52:7e:
1d:b5:63:3b:b8:a4:50:f6:59:87:81:57:fc:dd:1d:d3:77:59:
b7:f5:e9:09:57:d7:08:9b:1d:4f:b0:c0:09:c3:c6:88:37:ff:
cc:94:4d:d6:0c:b4:87:9f:f7:99:f6:1a:3d:d9:bd:95:31:0a:
69:ca:6a:78:c6:b9:72:61:ad:b8:5e:3a:19:a3:dd:45:4c:60:
3b:71:69:9b:3d:71:e5:a9:c6:1b:23:8f:3c:68:81:5b:9c:17:
27:ee:a5:b9:fb:8c:e9:74:36:5c:ee:f6:32:c6:a9:7c:7d:d6:
00:c3:4e:8f:88:8f:60:4a:5b:f4:20:70:eb:9d:6b:0b:f2:82:
9d:d3:3f:97:92:2f:cf:97:2e:71:34:ee:0a:a8:8c:d8:95:2f:
17:b8:47:a7:6a:6a:88:d2:9f:6b:60:bf:bb:b9:6d:7c:84:cb:
56:cb:c9:17:38:76:95:0f:1a:c2:1b:e5:73:a8:99:e3:14:76:
77:c2:6d:2b:77:19:36:ae:c8:4d:2e:19:66:82:df:6b:4b:86:
66:6f:ec:b7:99:cb:bd:2f:93:e0:71:9b:17:0e:77:62:2d:58:
8b:26:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:28:36 2026 by rpki-client