Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: /3eP+Nm9CZBV13Bv0rgyShlBdgYDv4m8l476RzoQew0=
Subject key identifier: DF:89:E0:89:6F:16:61:AB:D9:F2:FF:CA:7A:59:C1:C4:E9:E8:69:F6
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 01A117F3D708A4A9B87231DA0B4D3E61913F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 114C
Signing time: Wed 07 Oct 2026 20:00:18 +0000
Manifest this update: Wed 07 Oct 2026 20:00:18 +0000
Manifest next update: Thu 08 Oct 2026 20:00:18 +0000
Files and hashes: 1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: e82+O/mUcz/F8aZhg+jEavv2obCkV4VoojsDyTtl6/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f3:d7:08:a4:a9:b8:72:31:da:0b:4d:3e:61:91:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Oct 7 20:00:18 2026 GMT
Not After : Oct 8 20:00:18 2026 GMT
Subject: CN=df89e0896f1661abd9f2ffca7a59c1c4e9e869f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:da:49:c2:3a:7c:40:15:45:41:55:c4:81:
40:32:db:81:a0:55:93:64:a0:d2:ed:ef:58:59:c4:
e0:5c:5a:4f:c5:a0:b8:70:bd:75:3d:78:e6:9e:ae:
a9:3b:76:a8:67:f7:c5:d2:15:e1:7f:91:6c:be:a3:
64:dd:55:db:6e:17:6a:ba:f0:f9:4f:f6:f6:65:56:
6e:e5:bf:86:d1:c7:b7:34:61:89:a5:2c:98:d1:ec:
49:a9:2e:03:b2:4e:cc:22:f5:b7:cd:ca:e8:ab:99:
85:bc:3c:90:7e:4d:cc:6a:5f:4a:4a:8f:8a:74:9a:
de:8e:75:5f:5b:aa:70:59:af:c6:a4:57:c1:c0:1e:
ce:25:ce:e0:9e:75:e8:43:e0:97:6a:e2:0f:e0:32:
38:a2:f6:bc:76:42:85:e2:54:c8:c1:ea:6c:c7:d4:
0b:99:6b:e3:cf:b6:18:1b:fa:97:a0:bb:b1:1d:11:
de:99:31:c4:28:30:cb:67:04:b8:15:e3:a1:e6:9d:
7e:fb:11:ed:46:4b:b1:ed:65:9e:bc:3f:6c:4c:c0:
3a:11:14:57:eb:01:cf:aa:e2:11:4f:f6:14:78:45:
da:75:3c:4a:7b:46:82:0a:9b:3b:a4:8c:b9:6e:9a:
18:3c:af:7d:8d:97:4a:29:91:c5:c8:21:6e:6b:76:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:E0:89:6F:16:61:AB:D9:F2:FF:CA:7A:59:C1:C4:E9:E8:69:F6
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:81:b6:cc:26:22:83:25:2b:87:6a:ff:ff:42:5a:cb:fe:a5:
de:81:52:35:31:4a:af:21:0f:18:b7:bc:64:09:0f:9e:04:bf:
60:ea:bf:80:79:34:88:37:11:d0:fb:8a:d0:3e:b6:f6:d6:d8:
ec:24:d4:ed:8e:79:2b:45:d3:7e:c3:86:1b:d6:bd:17:15:50:
16:5a:84:e5:05:71:5d:db:c9:59:f7:75:44:42:ff:d4:34:8d:
b9:ee:d7:f4:2e:5b:fc:9c:18:a0:e6:06:95:ea:0e:52:4e:03:
5f:97:cd:eb:9c:d4:33:cd:0f:9e:40:87:5c:b4:49:7a:f4:26:
7d:bf:50:0b:60:5d:62:cf:34:7a:5f:c8:8e:4a:74:f0:c5:86:
52:d7:d7:08:53:b1:a1:3e:70:bd:b0:39:3c:73:b0:4b:93:1e:
7e:8d:c3:35:f1:78:7a:1f:67:0c:07:32:e9:6a:68:df:a7:b3:
a9:e3:51:c7:fc:de:27:4c:f2:93:1a:25:3e:e6:be:d8:ab:dc:
6f:05:5d:28:9a:fc:77:66:c5:ea:c7:2e:b8:90:92:e5:84:a0:
47:b7:56:54:7f:b3:7a:17:a7:5e:0b:be:7e:aa:8c:0d:64:95:
75:e0:d4:d8:77:be:7c:c6:2e:b1:ec:21:f8:be:62:06:17:92:
a3:8e:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:53:24 2026 by rpki-client