Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: CGScsnHxKmjbEnh9c6ehUwzoePClvwdD9XV7ChBDO1Y=
Subject key identifier: 3F:60:BE:83:E8:F4:2E:3D:5B:D5:51:D0:0F:1A:A3:0A:D6:5C:86:26
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019EF94B58EE75F5344600DD361B428DF248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 1033
Signing time: Wed 24 Jun 2026 11:02:05 +0000
Manifest this update: Wed 24 Jun 2026 11:02:05 +0000
Manifest next update: Thu 25 Jun 2026 11:02:05 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: zopF0vm1TKs7Lr0vVXEtYCbAqQcyz90C3U/nt4mS1mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 11:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:4b:58:ee:75:f5:34:46:00:dd:36:1b:42:8d:f2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jun 24 11:02:05 2026 GMT
Not After : Jun 25 11:02:05 2026 GMT
Subject: CN=3f60be83e8f42e3d5bd551d00f1aa30ad65c8626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:2e:58:cc:0f:57:c5:70:ec:82:7e:13:12:
ff:1d:a6:4e:56:02:64:ab:5b:72:d2:56:d5:26:ec:
d9:6c:6d:71:8c:8e:55:65:7e:3d:43:9b:4e:a7:e7:
0b:45:74:4d:12:86:fd:25:ea:be:c5:6c:4b:a8:52:
bb:c1:1a:b1:f6:b4:13:4d:dd:70:b7:3d:e8:9d:ee:
27:67:fe:f7:82:e2:cd:ae:1a:74:94:ec:93:38:50:
e5:c3:fb:ff:2d:5f:03:72:7a:c9:fe:5c:e7:ab:5d:
ea:47:7d:c0:c3:eb:6b:50:48:9f:02:0f:c5:f7:56:
99:b2:46:f2:ae:c4:50:30:50:fb:95:11:91:23:29:
65:1c:4b:aa:57:7b:b2:42:b5:45:bf:3c:07:27:cb:
31:a5:2b:54:6c:2f:d1:0d:a0:1b:f0:d9:a8:ef:44:
97:30:7b:79:b1:9a:d9:d0:43:cd:38:6e:2b:9d:1e:
df:bd:f4:8f:7b:21:b3:9d:f5:d7:c6:ab:e5:d0:94:
2a:2f:79:de:1a:f3:28:f9:1d:3a:34:60:c9:dc:6b:
d7:f5:03:4c:d5:8b:b9:33:d0:93:8e:ff:7b:01:c5:
99:2f:37:b3:bd:f9:45:01:4c:fd:09:d9:a9:24:2f:
83:e0:32:ee:08:a1:77:28:58:a0:09:99:a7:6c:de:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:BE:83:E8:F4:2E:3D:5B:D5:51:D0:0F:1A:A3:0A:D6:5C:86:26
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d8:6e:7e:d8:74:7a:f5:40:ce:92:b6:ad:7c:bb:7f:39:ed:
5c:d2:48:c3:b2:e6:b4:06:1a:fc:3b:ba:f8:c7:3e:77:ef:e0:
bf:e6:dc:ec:0e:86:7f:54:61:79:42:11:2b:40:62:be:11:df:
ac:e0:45:55:20:8e:69:cc:6f:e8:b6:3f:14:87:74:cf:d0:07:
6e:0d:e9:d4:32:35:5e:5c:6d:d4:2b:77:6a:54:2c:75:29:ac:
37:3e:46:e0:32:8e:be:09:90:ce:b5:1e:05:7e:3d:67:b0:ea:
a1:82:dd:f8:b6:69:f1:5e:e0:d4:28:e3:33:06:20:30:61:c1:
6b:f4:a8:0f:d1:e0:25:ac:01:b3:fb:1d:31:42:ef:dc:65:76:
94:e4:4c:9b:ad:74:7f:ab:77:ad:ac:80:16:2f:04:5b:43:a6:
9a:b0:3b:dd:14:29:5d:20:e3:ce:bc:5f:32:04:b3:7a:85:2f:
52:90:0c:fc:5d:7c:2a:e2:94:26:b0:9c:26:d9:75:19:55:d2:
a7:33:84:e6:fe:db:0d:bc:02:bb:51:4c:c3:6e:f8:7d:80:31:
a5:c9:b6:38:70:15:ed:04:6a:bd:8c:15:5a:0a:76:15:4e:8f:
12:5e:d6:d8:92:f4:b4:9a:76:0d:89:29:87:9f:03:18:2a:36:
ce:24:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:57 2026 by rpki-client