Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: yQSbKIMaM7sV3jpI/h3Rr+jTPqNS0+1i9wMBmqAYIQY=
Subject key identifier: 1A:0F:9D:D9:15:50:38:1F:B8:07:5F:E5:53:83:44:97:CF:FE:FD:A3
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 01A0C6A1047B09E135125AD473A41C7CEDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 01:00:36 +0000
Manifest this update: Tue 22 Sep 2026 01:00:36 +0000
Manifest next update: Wed 23 Sep 2026 01:00:36 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: 8ccdNV5LWbpSy3o+OtEDUYMtXstMriqe2IVNfUH4vk4=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:04:7b:09:e1:35:12:5a:d4:73:a4:1c:7c:ed:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Sep 22 01:00:36 2026 GMT
Not After : Sep 23 01:00:36 2026 GMT
Subject: CN=1a0f9dd91550381fb8075fe553834497cffefda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:52:8b:47:8c:89:88:68:12:f4:9a:0e:9a:
1b:94:6c:46:08:c6:ad:fb:b6:39:35:6b:5d:f3:de:
63:41:92:71:80:d2:03:8a:c4:2a:2b:8c:fc:d3:69:
cd:db:8b:49:2f:5e:28:af:fa:e8:1b:9e:9a:02:1c:
e5:25:8b:3e:9f:ee:df:98:09:cf:74:28:e0:23:c7:
5e:39:c8:1a:8f:96:0f:f1:78:0e:61:53:d5:63:e1:
e6:37:b1:58:13:28:8a:fe:2a:bb:dd:a5:4c:d5:73:
5a:c9:d3:d2:d0:09:fc:b9:97:18:7c:ab:95:23:c8:
24:1e:ef:6d:c7:b8:0c:01:a0:9a:e2:6e:35:97:68:
7c:f2:ce:66:a0:64:fa:f6:db:e1:66:05:9a:e9:8f:
94:f5:ea:63:9e:64:dc:70:86:bd:5c:66:b7:a3:37:
dd:ca:99:d8:77:18:6d:e4:21:90:f7:8a:ea:ed:97:
8a:26:e2:8f:25:28:bd:64:b3:0f:80:da:3f:8e:63:
2e:93:dd:62:65:7a:68:f8:f9:78:a4:7a:1e:a1:7b:
3e:23:c7:2f:a6:bf:69:e9:f3:53:a3:d3:7c:2f:5a:
57:a5:2e:7c:2d:b9:e1:dc:2c:cd:36:db:86:89:7d:
dd:13:9a:3e:74:f0:c2:ec:b8:59:55:65:ba:91:ea:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0F:9D:D9:15:50:38:1F:B8:07:5F:E5:53:83:44:97:CF:FE:FD:A3
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:bd:82:65:86:d3:f4:60:1e:f4:a8:f2:f6:8a:13:ff:59:9b:
cc:72:dc:6e:40:80:d5:84:fd:13:b0:99:25:6c:3b:d7:b7:db:
01:f7:49:2e:ac:e5:f4:05:3e:9d:47:db:c6:98:27:f8:0e:bb:
1f:e1:9b:30:42:5b:9b:32:56:51:40:53:98:21:38:1e:e1:85:
57:92:0a:3c:30:3a:cd:72:52:38:55:a6:8b:8f:2d:74:7b:da:
27:34:a5:ef:df:ae:eb:ef:8d:78:2a:f2:fc:d3:3e:9a:08:9a:
c0:b5:97:51:09:24:b2:1e:41:5f:63:86:b3:49:34:c3:1c:17:
04:4e:3f:ff:47:62:39:36:38:5d:d3:d3:f8:4b:84:81:ed:0c:
d9:7a:0f:8f:be:e9:a5:70:30:f0:d3:34:30:39:21:51:01:81:
61:80:9a:81:3d:3f:b2:0a:32:7d:94:50:65:ff:8c:6b:94:bb:
b2:6f:af:1f:ac:56:3a:28:6a:6d:90:21:e2:9c:01:a5:cb:31:
4e:e3:92:0d:29:e3:24:86:80:01:00:4a:63:62:cc:58:2e:94:
6e:8c:98:ce:7c:83:9b:37:fe:60:d6:33:2a:9c:0e:8d:51:60:
f9:19:bd:20:d7:f4:6c:4e:8f:fd:8c:65:2c:6c:85:2e:be:1f:
27:29:84:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:16:05 2026 by rpki-client