Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json)
Hash identifier: 6pgjcvtapui3ToS+3Tl1JWn4TJXwO/vxcij+OCmzx/g=
Subject key identifier: 89:B8:78:C0:E1:AC:EB:56:A9:1C:53:07:26:62:DD:41:3D:D9:1F:B1
Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d
Certificate serial: 01A0C47BD6740DBD49C96D074A53CE904D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
Manifest number: 060E
Signing time: Mon 21 Sep 2026 15:00:45 +0000
Manifest this update: Mon 21 Sep 2026 15:00:45 +0000
Manifest next update: Tue 22 Sep 2026 15:00:45 +0000
Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: h1U55UEWzdNrZrDwRyUUB9dYfHXNESxwxhPOXpsdhtw=)
2: Fb3aBBcJ_RU5gPWUY71udWZuQ_o.roa (hash: VnpK440llW/db9ofXXkT+hMi7FL519qaQ5nOCrY4q+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:d6:74:0d:bd:49:c9:6d:07:4a:53:ce:90:4d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d
Validity
Not Before: Sep 21 15:00:45 2026 GMT
Not After : Sep 22 15:00:45 2026 GMT
Subject: CN=89b878c0e1aceb56a91c53072662dd413dd91fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:52:01:f8:f4:71:7e:5c:fc:44:ab:6b:a6:
83:37:26:81:c7:6b:d4:f7:ee:0b:50:2c:a1:7f:fc:
9e:e0:8d:5d:07:ea:d5:5a:1a:ca:d0:82:58:ab:46:
f4:a1:de:2b:17:7b:4f:b3:e8:4a:f1:99:89:d1:ed:
89:f9:d8:e3:5c:32:1a:2f:b0:33:6a:ab:5c:66:87:
50:51:a7:d0:80:05:3a:40:77:85:8f:c3:4c:63:37:
26:88:c8:27:66:71:ef:59:e6:48:9d:30:81:a5:77:
7b:22:fc:0b:ef:ef:f1:47:58:1e:ea:31:0c:d7:b5:
43:7e:e2:54:db:87:49:bf:07:3b:07:ac:c0:de:45:
13:71:9e:b9:d6:f1:5d:a4:90:9e:db:bd:7d:2f:be:
0c:09:5f:56:89:99:6b:e8:ca:82:69:6d:ff:15:63:
44:32:85:be:26:7f:02:40:44:6f:98:d4:47:93:54:
7b:1b:96:80:b7:e7:1f:68:fd:9b:8b:6f:ef:c3:0a:
bc:89:08:d7:4b:d9:61:89:55:b7:79:2b:c2:df:42:
ed:77:6d:e2:76:6b:f1:b9:a3:64:c7:b9:88:49:b0:
7e:5b:93:0c:e0:98:03:19:55:e5:30:a3:55:2e:25:
67:5a:e7:e9:d2:77:71:b8:9c:a3:ce:22:3c:99:37:
70:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:78:C0:E1:AC:EB:56:A9:1C:53:07:26:62:DD:41:3D:D9:1F:B1
X509v3 Authority Key Identifier:
keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5b:10:bb:ba:91:ce:e3:7d:eb:58:19:71:65:2c:57:2d:86:
53:44:56:a5:63:6f:a6:aa:9d:29:d3:46:87:6d:f6:0b:d5:21:
ec:e7:ac:f4:ec:59:18:b7:59:4f:6a:fa:13:7b:c2:ce:33:43:
a6:8f:b9:94:58:72:a2:f2:1f:d2:96:ad:aa:5f:5f:ec:88:76:
a4:d0:94:73:f4:65:66:79:b5:99:c9:79:ad:b5:8a:44:cc:48:
89:4d:16:56:34:5c:83:c1:74:86:0c:0a:66:8e:21:0a:73:c0:
dc:04:74:b8:6f:ec:96:69:e8:5f:bc:e1:da:1d:1b:6c:46:bd:
e6:db:0b:c1:7a:04:a5:f7:e5:40:d9:e2:4a:15:ad:50:04:71:
60:16:aa:1d:bf:6f:2f:7c:a6:f9:de:16:ea:86:5a:49:62:3f:
f8:30:6d:c3:f0:78:95:64:c2:f1:97:3c:8e:97:5a:6a:1d:c9:
4c:34:0e:9d:43:2c:e3:a6:90:5e:18:bf:e3:4e:93:95:68:db:
61:02:f5:98:1e:4b:a3:6d:ea:a6:49:6a:ca:45:6c:52:3a:c3:
7a:11:1e:84:80:4d:ef:47:fc:ab:e6:61:e0:d0:de:de:d1:26:
40:af:f7:ca:5f:78:15:56:0f:d3:a7:db:29:a4:13:56:60:2b:
d5:ef:3d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:30:31 2026 by rpki-client