Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier: HmzMbG0spd1SriRxqd2yxVxaESYsDcF0YncUxX1yhXQ=
Subject key identifier: EE:0B:F1:2C:13:21:11:8F:59:8A:B0:EA:1C:82:51:5F:85:CC:31:99
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer: /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial: 01A0CF36AC6E5FCD8B76FD1B07CCA88D0B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number: 08B1
Signing time: Wed 23 Sep 2026 17:01:01 +0000
Manifest this update: Wed 23 Sep 2026 17:01:01 +0000
Manifest next update: Thu 24 Sep 2026 17:01:01 +0000
Files and hashes: 1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=)
2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: TsXW68OA0cfmPlNlONTfX8XgUnHrBZKSq1aX5NvdhC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:ac:6e:5f:cd:8b:76:fd:1b:07:cc:a8:8d:0b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Validity
Not Before: Sep 23 17:01:01 2026 GMT
Not After : Sep 24 17:01:01 2026 GMT
Subject: CN=ee0bf12c1321118f598ab0ea1c82515f85cc3199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:51:ee:b7:51:84:91:2d:50:9d:f7:8d:21:
fd:66:26:29:23:60:23:3b:07:65:03:c5:01:16:6f:
10:df:eb:b6:1e:3c:12:a2:22:40:4a:0e:0f:cd:8f:
a0:f4:ad:bd:7b:7e:5e:04:f1:1c:4e:13:30:64:a2:
cb:1c:ce:ab:58:a4:fd:4c:e7:84:1b:36:4c:2f:83:
8b:fe:ce:99:4e:ab:6f:88:93:95:dc:72:59:be:ff:
e8:f5:e7:d9:e0:3d:52:d5:c8:0c:6a:f5:09:eb:87:
20:fc:68:0e:f6:e8:7b:de:47:be:67:9c:18:78:e0:
4a:54:96:04:51:bf:fa:6e:a9:5d:1a:d3:85:01:44:
c1:be:27:92:6f:04:b2:a4:cf:78:1a:33:1b:00:66:
81:22:42:2a:4d:48:83:e1:89:f9:1a:53:fb:3b:c3:
e8:6d:20:6a:91:5d:01:fd:a8:24:25:c9:7a:de:19:
41:28:7d:93:d6:6f:75:ac:f6:9b:04:cc:a1:15:c4:
44:aa:4c:52:13:de:11:6a:6f:d6:fc:8c:4f:ed:32:
6d:45:d3:71:c3:92:8e:15:cc:5a:a7:b7:70:d8:be:
62:c9:83:ec:25:a2:a3:56:1c:f5:4e:4a:6e:a5:0a:
0e:a8:35:9a:aa:e0:64:5f:16:7f:f0:ea:59:48:2f:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:F1:2C:13:21:11:8F:59:8A:B0:EA:1C:82:51:5F:85:CC:31:99
X509v3 Authority Key Identifier:
keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9c:e3:63:01:ec:76:8b:ca:9b:c6:ce:88:1f:bc:03:10:16:
b0:ae:ce:34:00:98:e2:90:55:49:13:33:2e:41:24:b1:40:eb:
af:ee:d8:c4:6e:7a:b4:c6:da:d3:4a:b9:4a:e5:1d:90:cc:b5:
5d:64:eb:e0:ce:4b:de:a7:ab:16:b1:75:d5:62:98:07:6c:40:
6a:81:44:f5:bb:db:ba:a4:6d:87:5b:2b:67:0a:6e:ea:01:2a:
24:56:51:d0:02:69:7c:44:9d:5d:1c:13:db:cc:3f:8c:85:8d:
d0:2f:0a:eb:ed:70:87:0a:dd:20:cf:e9:cf:5f:5d:95:32:a7:
29:14:1a:d4:f0:10:19:a9:af:e2:96:f1:8c:f2:a6:35:29:be:
d2:14:23:67:6e:d9:85:60:42:66:57:b4:cf:a9:d8:fc:fb:f6:
6c:db:b4:54:f8:e9:c2:78:b8:a3:ec:0c:02:df:e9:43:b8:40:
84:24:b8:c2:2c:45:5e:44:ef:62:43:ca:a2:d8:aa:e2:77:c4:
b7:40:fe:4b:c1:a5:06:7b:f4:3f:a3:9b:a0:7e:46:76:31:ad:
dd:81:f7:2b:ac:0e:a8:92:01:60:d7:b1:d8:cf:d4:6f:7c:f5:
fb:7a:77:7f:18:2d:30:97:2d:7e:f4:f2:ef:f4:38:06:d5:ba:
3c:fe:fa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:00:29 2026 by rpki-client