
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: NyRAEJnShsCt/V+9bHPyszAi9CFDVWXq9mxSOWEhYU4=
Subject key identifier: B0:81:39:48:D9:23:E4:1C:EB:06:61:90:BB:AC:4E:D2:D0:02:8C:48
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 01A0E51A58C239521CDF8CFF4EA0C5A13EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 086B
Signing time: Sun 27 Sep 2026 23:01:44 +0000
Manifest this update: Sun 27 Sep 2026 23:01:44 +0000
Manifest next update: Mon 28 Sep 2026 23:01:44 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: DszoWjPyXGGFf1spFVuSwor0wnyTMKEg/bAISheAF9c=)
2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:1a:58:c2:39:52:1c:df:8c:ff:4e:a0:c5:a1:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Sep 27 23:01:44 2026 GMT
Not After : Sep 28 23:01:44 2026 GMT
Subject: CN=b0813948d923e41ceb066190bbac4ed2d0028c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:21:c8:15:2a:89:17:bf:ff:fa:fb:49:0a:
b9:0b:59:db:56:79:46:a0:de:20:65:d8:5c:40:43:
87:70:c7:a9:f3:5f:25:55:fb:e6:69:31:1e:02:e3:
3e:80:1b:f1:03:66:96:1d:1a:3d:58:81:21:49:b5:
25:ac:36:67:b1:89:f0:ae:fb:c8:89:f3:e8:f6:4a:
03:18:2b:07:6c:5b:40:3a:6f:54:af:02:eb:1a:6a:
66:64:80:56:c7:45:7a:3e:fe:61:55:c5:f1:4a:77:
6a:91:77:c1:d2:fd:cb:3b:ff:a9:2e:f3:d2:3c:71:
54:8a:f2:42:d5:2b:ad:61:0c:06:01:3a:69:94:55:
fa:8e:3f:2d:01:45:42:2a:46:29:da:54:d6:88:83:
df:fe:41:2c:ff:db:6c:f1:cf:2a:5f:44:e3:e5:5f:
49:d1:b5:59:77:5a:8f:f5:fd:6f:30:aa:91:2d:a8:
8e:a8:3d:c2:f5:33:41:1e:6e:97:e8:a5:51:87:78:
53:ef:2f:75:a1:80:59:ff:d4:b7:36:62:bc:68:41:
48:ea:1d:dc:9a:32:ac:85:f7:48:8a:f8:f3:c1:33:
dc:1e:5b:af:75:79:6e:61:4a:ec:e0:5a:4a:ef:6c:
c5:26:a3:04:dc:2c:17:a7:42:ce:d8:2e:5c:22:69:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:81:39:48:D9:23:E4:1C:EB:06:61:90:BB:AC:4E:D2:D0:02:8C:48
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:65:e3:8c:3b:0c:3d:e9:13:d1:12:f7:a0:40:5b:76:92:6f:
35:80:29:a9:d2:9d:2f:dc:a4:0a:05:70:20:71:26:5e:91:1a:
78:69:a9:55:d9:79:a5:15:cb:a5:72:49:77:b9:b6:76:95:aa:
0d:00:00:52:b0:e2:56:be:09:1c:ce:2f:2e:57:19:71:24:02:
49:f4:5a:56:56:fb:f3:f5:49:2d:ed:b6:03:b4:02:5a:29:d3:
84:ab:d1:27:be:09:0b:94:b9:9e:36:72:28:af:ac:79:21:b0:
fc:f0:d3:62:b6:52:9b:86:10:e1:ae:eb:ca:a9:58:b8:c3:d1:
d2:9c:f9:9c:88:19:9e:34:9e:2e:a8:54:de:b4:05:86:31:dc:
c7:73:a7:41:37:0f:55:0b:e2:d6:23:b5:bb:10:c5:34:87:bb:
15:22:57:79:fc:54:ed:0c:5b:58:f3:9c:9c:44:f6:c2:29:82:
da:7d:30:c1:c5:e6:1e:d8:43:1f:d8:3e:60:b0:d8:bc:2c:3d:
96:c2:4a:0a:ce:9f:12:94:62:76:f3:28:91:6d:35:3a:c6:80:
a2:32:34:73:c6:86:2e:a4:93:5f:60:70:f1:6b:63:3e:84:3d:
3b:e0:0c:76:dd:ab:2e:6f:29:ed:f1:e2:49:4f:6a:da:14:5c:
f8:ae:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:06:18 2026 by rpki-client