Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: TBAOOk6qC4ibUEYLWpyNqlVw9Nqzt5jlfuMrjdeG7Io=
Subject key identifier: 67:F3:15:3F:68:25:9D:18:5E:AC:F5:E4:4C:DA:52:DF:48:F4:69:9C
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 01A020C31158E3B6802A2E675669D750CD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 10CC
Signing time: Thu 20 Aug 2026 20:00:49 +0000
Manifest this update: Thu 20 Aug 2026 20:00:49 +0000
Manifest next update: Fri 21 Aug 2026 20:00:49 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: WBd7GWFL2vI3IyUhvvI8ZoHcGp3n8j+8wbERGYcS8TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:11:58:e3:b6:80:2a:2e:67:56:69:d7:50:cd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Aug 20 20:00:49 2026 GMT
Not After : Aug 21 20:00:49 2026 GMT
Subject: CN=67f3153f68259d185eacf5e44cda52df48f4699c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:2f:61:94:32:5f:2b:f7:3d:6c:ac:28:62:
4d:6d:79:56:c6:fa:bb:d9:22:dd:6c:ea:52:a0:b9:
80:be:94:72:c5:8d:9d:5a:c6:19:1a:c7:0d:0d:d5:
16:c0:9b:92:e4:75:ee:71:b7:1a:c3:da:70:03:ba:
e8:a6:85:2b:5b:7f:5a:cf:c4:e8:44:76:18:c5:a4:
ea:12:24:6b:22:45:cc:11:1b:dd:04:56:31:3c:1e:
6d:48:20:da:5b:72:e9:60:75:ac:a6:1c:d4:be:ec:
e5:9d:5a:a9:2d:3a:e3:6a:63:0f:20:b7:bb:7b:bc:
85:8a:74:2c:65:aa:dd:0e:5e:41:4f:23:f0:7e:d9:
52:17:6e:4d:97:34:ae:84:1b:c0:57:ef:3e:61:fc:
81:10:ea:71:e5:94:8c:27:48:29:47:5c:e1:9d:e3:
fe:be:bc:ec:eb:e6:32:02:ef:e2:fe:d5:90:ba:38:
42:38:a1:01:37:68:f2:10:59:da:a5:fb:4b:ba:9a:
3d:47:01:33:20:d7:8e:fd:d0:7f:03:61:81:ad:2c:
a2:5b:2d:14:05:1f:b2:a8:3f:7b:28:33:69:46:c0:
19:82:25:f9:11:01:b4:78:5b:78:20:d2:e2:97:73:
ba:8e:68:b0:a4:c0:70:7c:a1:ec:bd:fc:9d:6a:94:
0d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F3:15:3F:68:25:9D:18:5E:AC:F5:E4:4C:DA:52:DF:48:F4:69:9C
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9d:46:ac:65:81:6c:09:e8:8a:b5:6f:c9:a2:b7:a1:56:cc:
b7:a0:2e:71:1b:50:52:1c:0a:92:99:b0:5b:56:31:59:0d:89:
6a:18:3a:d4:87:b1:a0:0a:83:61:f2:c3:9e:4f:ca:ac:a6:79:
d5:38:53:3e:d1:f7:c5:23:50:b2:1e:26:e8:f9:4e:91:d9:e0:
61:ea:99:7c:21:7d:e3:91:b2:4c:22:e4:17:ee:1c:37:d4:ce:
ad:34:dc:11:fb:5b:88:1b:5a:18:4a:04:ca:fb:dd:db:55:a7:
33:c7:bd:c5:de:fd:4f:77:47:d0:65:fa:26:d4:04:93:d7:2b:
b3:4a:36:7a:78:a6:8d:3a:7a:68:95:3a:df:e7:a8:eb:54:0a:
d9:b9:7c:64:1f:ac:2c:0b:bb:e0:97:20:06:47:32:d8:91:b3:
e9:81:81:55:55:7a:4d:de:a7:73:1c:f2:0f:8d:7a:7d:3e:7f:
6c:1c:f8:4f:ac:74:ee:a2:aa:6b:9f:64:c9:89:b9:0e:86:fc:
42:3b:3b:98:1b:f4:a9:da:26:4d:85:de:e1:56:a7:8b:f9:e2:
9d:2c:54:9a:4f:63:e1:bf:1c:d6:7e:56:d0:bd:de:d8:00:04:
25:49:51:10:f1:d5:3f:98:1c:c2:e5:32:e5:f5:c1:be:ff:94:
a1:b7:83:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:58 2026 by rpki-client