Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: oDetltyHa5wg5UbWTEnhLDiZQZjL3mWgXMNte3r5E50=
Subject key identifier: CC:6B:E7:90:1E:4A:4C:77:73:BA:92:C1:85:E0:C3:C1:E6:F2:66:1E
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 01A1DE70FF713AF1355ADA32F0A72BD394B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 06A0
Signing time: Sun 15 Nov 2026 09:01:49 +0000
Manifest this update: Sun 15 Nov 2026 09:01:49 +0000
Manifest next update: Mon 16 Nov 2026 09:01:49 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: qwKOrbWBCRpyh846SZU/IdbNLUKfa5+YV1bzL99bGdg=)
2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ff:71:3a:f1:35:5a:da:32:f0:a7:2b:d3:94:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Nov 15 09:01:49 2026 GMT
Not After : Nov 16 09:01:49 2026 GMT
Subject: CN=cc6be7901e4a4c7773ba92c185e0c3c1e6f2661e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:d7:47:31:4f:45:8c:59:5d:f3:e1:5b:47:
ae:85:ce:e6:a1:db:95:55:b5:4f:36:2d:b2:a7:76:
dd:62:b4:1f:ee:47:0a:68:af:f2:7f:8c:ca:3c:58:
56:a7:64:81:0e:9d:e9:5c:ed:4e:c1:a3:8f:0d:bc:
d8:89:0a:b1:96:19:9e:3e:f5:33:14:fe:5f:9e:cf:
e8:5f:6b:e6:06:ac:81:c0:98:6d:d4:b1:8a:a5:f0:
71:b2:4d:3f:8b:ce:1d:b7:01:af:f2:62:84:b8:ad:
c0:b7:4c:57:c6:fc:eb:c6:5e:78:c2:a1:a9:7c:fd:
7d:98:0b:11:4e:9c:2f:d4:b7:86:f3:c4:6f:46:38:
af:de:19:64:23:9f:22:36:e3:02:12:79:6c:1b:66:
a2:43:fd:cd:16:f4:9b:d5:7d:9f:e4:79:13:2a:c2:
1b:0f:5b:02:8c:35:96:b2:39:8d:5c:8e:5d:18:7b:
a7:8a:39:8b:74:b3:b5:bd:ad:a8:38:d3:65:d6:22:
1c:74:29:67:13:1b:a8:4d:3a:92:03:df:52:3c:a9:
b6:67:16:6b:b5:66:9c:66:54:1b:e0:6e:ff:ac:9e:
6a:3b:56:6b:03:1d:c0:89:38:53:77:47:9f:e3:ef:
b3:3e:51:49:02:eb:2d:c0:95:07:11:d3:03:77:b0:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6B:E7:90:1E:4A:4C:77:73:BA:92:C1:85:E0:C3:C1:E6:F2:66:1E
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ff:88:fa:97:e9:c2:e3:9a:7c:d7:33:d9:bb:9a:34:bc:f9:
43:47:ec:ea:72:5d:c4:8b:7f:be:4c:39:06:89:88:d6:85:ed:
03:5e:a6:9c:4e:ea:9e:a2:62:a0:46:61:a9:c5:ca:61:ad:2a:
11:27:a3:42:61:5a:23:d6:af:92:ab:3b:0e:77:a0:fc:1c:0c:
ef:ef:1c:fe:b6:52:00:1a:d4:d4:c4:36:5c:42:a2:c1:ad:78:
eb:d7:77:27:7f:1e:ec:4e:0c:25:5f:6e:36:5b:ce:b9:90:16:
e1:6d:dd:70:22:5f:39:d8:bf:9e:ec:7b:41:ff:fa:2c:c8:9d:
f7:fd:92:7f:b9:4c:fe:53:b8:54:59:d8:b4:c0:03:29:02:0d:
3c:c9:df:6d:3a:22:85:8c:f4:41:4b:0a:de:1b:9d:5f:02:20:
f0:da:61:6a:47:b2:ab:a2:45:e6:30:bb:7a:4f:9a:ae:9b:74:
6b:49:90:06:55:c8:b9:6f:d9:3c:30:6f:3d:e1:ca:30:17:a1:
3e:22:61:4b:2f:d2:cd:04:6f:57:55:45:6c:e4:90:7b:ed:a4:
14:51:d2:51:26:34:42:70:4e:47:47:2b:d3:eb:ad:15:bb:76:
31:d5:4a:7d:65:64:f3:e3:19:b1:88:7f:45:6b:34:93:6f:9b:
74:b5:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:25:54 2026 by rpki-client