Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: tDhvVc/wPtJzweztL6JiSCTpKSdzsKa9AVylX9bYl3E=
Subject key identifier: D8:57:C8:3C:3C:65:85:6D:05:AE:B0:AA:A4:49:24:05:B5:3F:5A:C7
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 019D051D0A50ED7E3BBC196D1F723EAD30CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0F30
Signing time: Thu 19 Mar 2026 08:01:22 +0000
Manifest this update: Thu 19 Mar 2026 08:01:22 +0000
Manifest next update: Fri 20 Mar 2026 08:01:22 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: cr+YHnnH79LkFO8TPduHgTlL9oYKyfVKkbSEjc/nP64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:1d:0a:50:ed:7e:3b:bc:19:6d:1f:72:3e:ad:30:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Mar 19 08:01:22 2026 GMT
Not After : Mar 20 08:01:22 2026 GMT
Subject: CN=d857c83c3c65856d05aeb0aaa4492405b53f5ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:c6:e6:ed:53:ee:da:58:b3:71:4e:92:13:
bf:2a:18:4f:a6:1a:97:49:26:15:97:f5:cf:cb:9c:
ec:96:32:9f:66:ea:2e:fa:e2:ab:05:bc:2d:25:48:
c9:8b:61:4e:94:60:87:2b:64:ea:01:d8:d9:f0:ce:
b4:6e:d8:74:95:e3:99:63:9f:ab:81:3a:e8:a6:f8:
9b:80:9d:c6:47:1c:72:60:6e:5b:4e:2a:7d:1d:c5:
d9:8a:ad:eb:28:13:70:19:91:ad:c6:15:06:d5:40:
30:91:57:48:e8:0e:76:c1:c9:44:8b:18:d9:93:7d:
90:0a:40:52:49:63:60:58:c5:a9:d1:b0:f9:00:2a:
fc:06:e5:2a:8e:af:52:3c:95:fd:db:17:4d:cd:80:
2f:69:05:9b:7f:37:b7:90:1c:36:82:0a:49:10:bc:
3d:14:46:89:fc:56:0b:54:d5:6b:35:56:b1:10:28:
0e:8a:78:85:a6:82:51:0d:6a:46:14:99:94:e2:fd:
fa:36:0f:a0:2a:22:1b:3c:21:24:91:6b:0a:db:20:
c2:7b:ac:3a:d1:ae:db:e3:f9:75:34:34:60:01:91:
d9:6b:07:ef:d0:0d:c1:77:15:07:1b:07:32:bc:be:
51:0d:6a:06:b1:d3:91:ca:9f:c7:5e:86:30:8d:01:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:C8:3C:3C:65:85:6D:05:AE:B0:AA:A4:49:24:05:B5:3F:5A:C7
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:04:58:44:a6:27:53:46:3c:63:5d:42:ea:c7:10:59:8e:4a:
ea:0a:8e:1f:b9:fc:a6:b1:82:10:6c:45:7f:f5:2c:b2:24:11:
0a:59:5f:00:21:80:91:ef:b7:9f:e4:db:3f:a8:1e:a8:9d:ce:
53:f2:50:db:91:03:ba:26:19:a6:bc:d9:fb:ea:26:a3:2d:5e:
ab:52:06:4a:02:3e:4c:c9:50:df:3e:e1:ab:e1:9f:a2:e3:ac:
23:33:3f:0f:00:62:85:dd:ef:a8:25:30:e4:bb:66:56:b8:6f:
69:e4:87:6a:3d:c3:50:2c:8e:3f:40:eb:99:bb:71:73:74:2b:
7b:22:3b:53:25:3c:be:c1:9c:74:18:fd:6d:cc:8c:de:b2:86:
9b:e6:18:09:f5:1b:10:95:50:45:4d:2b:51:05:b0:d9:42:2f:
fb:66:c1:3d:73:55:5c:cd:bd:90:d2:4e:38:9d:67:ae:71:b3:
38:67:be:ee:65:1c:45:1b:6e:ef:a4:98:cb:fc:ce:c3:6f:b0:
83:74:86:0e:57:52:e6:13:e4:ba:97:da:71:b3:55:b0:4b:e4:
74:36:d0:a7:87:b3:8c:83:ee:b3:88:f5:5f:25:6c:fa:40:8b:
0b:ce:ea:77:97:be:da:b6:e3:19:75:b1:e6:d8:58:0d:36:ab:
13:fd:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:45:09 2026 by rpki-client