Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: R9xRgRXYbflBjSa+jIpghkfK5WM4xfcLb6y02Yk2DjU=
Subject key identifier: AF:27:DE:CF:54:33:69:7F:5E:25:52:09:38:24:B9:D5:30:96:4D:01
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 01A0DC84830F1C71820CF12261BBE6148FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 07:01:06 +0000
Manifest this update: Sat 26 Sep 2026 07:01:06 +0000
Manifest next update: Sun 27 Sep 2026 07:01:06 +0000
Files and hashes: 1: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: bw3IxuDjB2O6VU0B/vc2paGB4ZP4WHefBNPSaWWgdx8=)
2: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (hash: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:83:0f:1c:71:82:0c:f1:22:61:bb:e6:14:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Sep 26 07:01:06 2026 GMT
Not After : Sep 27 07:01:06 2026 GMT
Subject: CN=af27decf5433697f5e2552093824b9d530964d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:3d:ec:e5:ef:4f:e0:38:18:df:84:a4:5f:
1f:ae:d7:33:24:89:fc:68:b2:37:da:2a:5c:4b:b8:
59:99:bd:f9:9b:ee:54:ed:19:00:3a:85:e4:e3:01:
be:01:9b:06:80:1f:89:f6:08:ba:b3:f7:a5:8c:67:
95:9b:8b:36:98:a1:53:4d:2e:30:a1:7b:e9:e1:e6:
63:59:3b:9d:c6:ec:c4:b6:af:f1:7c:d5:48:4a:1a:
a6:42:ed:28:a4:1a:11:6c:c6:99:9d:36:fc:e5:eb:
3a:c9:9d:2c:55:a9:95:cd:dd:32:d7:f6:02:ee:e1:
40:30:91:61:81:f9:50:c0:40:00:e0:46:ff:72:f2:
07:bb:6b:8c:a0:7d:61:36:e9:4d:f7:41:3f:36:24:
5e:35:8b:a8:05:18:07:bc:e7:b5:a1:ef:44:a3:db:
ad:6b:76:f5:96:dd:cb:4d:1a:1a:2f:99:34:3c:d5:
63:c9:a2:49:16:86:18:11:60:60:d7:ed:43:c1:ed:
9a:b7:d5:e1:8c:83:69:1f:fc:40:c3:cb:d3:46:cc:
57:51:c1:9a:6d:24:74:ab:ea:b0:10:af:1e:62:13:
10:b5:14:4e:71:55:fd:62:48:65:b3:7d:f0:d1:a7:
69:ef:28:b3:2c:f6:9d:4c:a6:c2:33:fb:8e:81:e6:
0f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:DE:CF:54:33:69:7F:5E:25:52:09:38:24:B9:D5:30:96:4D:01
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c8:d9:e3:73:77:5b:1e:76:a1:5d:0a:0f:39:56:1f:a7:a0:
eb:e7:35:fe:ee:15:57:d1:a0:80:4c:8a:44:8e:8c:1a:5d:c5:
f1:23:89:d0:67:27:30:c9:c6:d1:4a:4e:c5:ed:9c:7a:70:cb:
d7:ae:74:70:ef:75:7c:fc:fc:4f:4a:70:1f:ee:da:92:96:11:
18:09:a8:75:55:96:6a:88:c7:0d:ec:d1:f9:ff:41:34:61:9b:
e5:3f:0a:0a:44:6b:8a:5c:b9:ea:55:f8:36:55:61:98:4e:18:
61:f7:64:5b:10:91:82:b5:08:bf:02:9b:58:3c:0b:da:92:ed:
68:42:47:ed:f4:3e:17:35:e8:35:1b:fd:eb:7f:fa:3a:ca:f7:
83:3d:8b:b2:6e:d7:fb:f0:c8:7a:78:48:9e:48:97:6d:7e:be:
59:6b:ef:a6:95:70:80:56:4a:d1:ce:c0:b4:68:f7:9d:c9:6c:
f6:80:f7:2b:8e:09:4b:05:ed:d1:32:d7:cd:0a:3f:21:c5:a4:
d6:29:01:81:5a:be:bc:dc:80:60:6d:a0:5a:94:31:05:70:d9:
f1:ea:b4:3f:fa:ad:3b:e6:18:68:c9:61:37:bc:5a:28:d1:59:
68:1f:45:fb:a6:04:82:ca:d2:68:48:9f:f8:d6:c6:6d:29:d4:
61:65:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:36:32 2026 by rpki-client