Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: lpNRzgfevRlYqVSXfuS33DlN5Pgl+vmK0bKpqZ6OmqY=
Subject key identifier: B5:F9:8D:E8:8E:C3:8C:E2:05:2E:DF:59:B3:06:E4:A2:43:71:A3:5F
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 019CAAFD196FCE20267A29A7FB1A84CBCFDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 068C
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=)
2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: rWto6QQn3WkOYLaCVSX8EytGbwEZFbCnvUNE6mPaQkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:19:6f:ce:20:26:7a:29:a7:fb:1a:84:cb:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=b5f98de88ec38ce2052edf59b306e4a24371a35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:d0:a1:11:e6:57:78:e0:b5:30:a9:1e:98:
7f:42:1f:7d:fa:93:e7:9e:04:14:6a:df:a9:12:12:
50:fe:f5:66:cd:9c:5b:5e:2d:ca:bf:4f:c2:88:c9:
48:9c:83:ec:e2:d3:55:a1:38:bc:8c:27:80:c0:a8:
1a:01:6b:58:aa:de:2c:e9:7c:55:9c:a4:0a:b6:f1:
e6:a9:ed:44:af:eb:26:57:24:5a:48:78:21:48:56:
c3:ac:a2:8b:6a:d3:f5:b2:bc:40:5c:69:9b:fc:f9:
a5:70:4b:9c:5c:38:ed:0f:4a:58:93:04:f4:d5:2d:
92:ad:d8:82:93:bf:86:32:fb:69:5f:6a:a9:f1:51:
e4:04:86:59:e0:28:79:6f:b8:a9:fa:e4:33:68:c1:
4e:e4:cb:a9:e4:9e:50:25:c1:fb:45:51:10:1d:14:
e6:07:c5:32:8b:f9:bf:8a:64:dd:b1:99:04:20:fc:
ea:32:5b:7d:c4:20:e6:33:fd:89:37:93:31:e7:a0:
99:a1:dc:9f:f5:26:60:b8:e1:5b:45:45:89:2f:bc:
46:a4:83:93:0b:bf:97:aa:38:f4:d1:64:d3:3a:17:
4b:da:63:f8:75:6e:15:4d:96:93:7b:5e:93:66:0b:
dd:7d:80:38:db:fd:fc:5f:23:8f:d6:64:7f:27:4c:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F9:8D:E8:8E:C3:8C:E2:05:2E:DF:59:B3:06:E4:A2:43:71:A3:5F
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4f:eb:6e:94:26:76:b2:88:f4:7d:99:5f:6b:c4:f6:3e:94:
ca:53:0b:d6:71:48:c4:d6:2f:d8:4d:aa:d7:6e:f7:b6:c2:82:
73:b8:9e:0d:a7:20:c8:30:e7:be:13:ed:92:92:84:fa:b7:c2:
db:a0:5c:28:a3:18:6d:1c:5d:45:8e:8a:c9:60:3c:5a:b6:0e:
9b:7e:72:8d:84:81:1a:7d:66:16:7f:5d:3b:1d:94:d0:26:68:
2c:02:dd:b2:7c:db:df:3e:71:e7:42:45:44:fa:52:53:c9:68:
da:87:be:8d:cb:47:ff:2a:5f:ab:27:81:22:77:83:c4:4f:71:
da:b7:75:fb:46:3c:84:d3:f5:0c:0a:43:d6:ea:c1:81:61:65:
82:db:2d:a0:af:c4:ad:72:ee:a3:51:47:0d:12:bb:71:6b:c1:
bf:db:ae:d6:b9:4d:9f:9c:43:70:fc:bc:dd:be:79:e3:7f:93:
f9:8a:39:72:b5:98:ff:ff:e7:70:83:4e:27:c0:e6:d1:46:f6:
11:04:96:76:1e:2b:7f:58:d8:24:41:22:c0:ce:0d:d6:35:94:
da:37:ed:bb:fe:6c:cd:a9:6d:c7:e7:54:e1:60:42:15:78:14:
bd:ac:dc:45:f2:83:f6:08:75:0a:f3:08:c0:b1:fe:a1:09:4e:
22:c9:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:52 2026 by rpki-client