Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: KWnHgh9fUP+6/d7eATkGTbr2dqzeQ9HSU7XF5gCmS4o=
Subject key identifier: E2:22:9A:96:A3:40:E7:9D:12:44:A7:A8:CF:C2:E1:53:15:52:7A:22
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 01A13DB8714D5D3EBC48A5E356427CCD7A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 04:01:00 +0000
Manifest this update: Thu 15 Oct 2026 04:01:00 +0000
Manifest next update: Fri 16 Oct 2026 04:01:00 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: lMRggkQZekM1dW5Vn7/aM9Qy6ro6lBH8xICGzoDkAGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:71:4d:5d:3e:bc:48:a5:e3:56:42:7c:cd:7a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Oct 15 04:01:00 2026 GMT
Not After : Oct 16 04:01:00 2026 GMT
Subject: CN=e2229a96a340e79d1244a7a8cfc2e15315527a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:93:f7:d2:cf:f2:eb:a8:02:7d:91:5b:ed:
c9:41:49:77:94:e2:06:fb:b9:b2:a4:dc:a1:02:87:
45:3d:d2:f7:38:c0:58:97:18:c7:9e:67:e5:65:3d:
dc:c1:8b:ad:bd:e3:c7:83:83:55:a8:7c:a2:03:5c:
b5:bc:85:b2:de:2c:1b:6a:a5:cc:60:1f:09:2f:ee:
6d:ec:e7:07:2c:6e:64:c2:9d:9c:1a:ce:cf:60:55:
16:a3:89:ad:cc:07:34:3b:aa:66:91:ee:b3:6c:f2:
40:2c:b0:d6:c1:f8:0a:30:28:80:01:c0:97:9b:ba:
f7:46:8e:90:e7:cb:d3:9d:be:6b:a0:cc:6f:83:96:
0a:57:84:18:2c:1a:86:43:ab:bd:61:be:36:3d:f7:
14:57:93:4a:9f:2e:ba:2b:5a:a1:1f:4b:9f:2a:e3:
2b:e2:c2:ba:f6:ac:6c:45:ea:a1:97:8a:f1:f7:c4:
d5:09:db:5e:e7:82:29:1a:9d:c4:ec:0f:ff:b1:7d:
76:aa:e1:de:c4:93:b3:c0:cf:de:fd:02:ad:c3:7f:
92:fb:c8:07:6b:a2:bc:42:c4:42:24:ba:7a:d3:62:
e2:49:66:ea:42:3c:93:ea:b2:cb:35:8b:bc:ac:68:
01:bb:82:89:4c:93:d2:72:89:8e:cb:13:b9:bb:32:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:22:9A:96:A3:40:E7:9D:12:44:A7:A8:CF:C2:E1:53:15:52:7A:22
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:72:36:b4:e6:5c:68:37:c7:5e:ba:b8:21:68:5c:9c:27:
31:dc:b3:e5:af:4e:13:88:08:b1:fa:72:7e:05:a8:09:b8:cd:
81:ce:59:09:62:3b:8b:32:54:ae:a3:9e:8a:df:a1:92:60:d3:
75:11:3f:88:35:84:4b:54:4d:5d:6e:02:42:b0:0d:fb:1e:88:
4d:82:c8:64:5c:2c:36:71:5a:66:71:1e:80:72:c0:75:e7:57:
d2:9b:dc:88:e3:87:5f:ea:69:c0:2b:5a:80:af:6f:ef:f3:b4:
21:75:83:4e:74:ca:08:37:b3:bb:f3:83:fe:d8:45:2a:d8:68:
37:83:01:ad:bb:b8:58:4f:60:03:ea:bb:58:fb:8b:5a:da:14:
4c:ae:cb:6d:09:26:3b:3f:fc:d7:02:f8:89:67:df:74:7c:dd:
40:80:c2:d3:6e:55:2c:c3:55:cc:f8:e6:10:dd:8f:10:90:1c:
bd:4f:7c:e9:62:6b:dd:62:c4:30:5c:31:d5:c0:29:69:7c:bc:
33:0b:bd:f8:61:6a:72:83:6e:ee:b5:6f:33:ab:63:5a:be:25:
93:9c:7f:9f:9a:d0:b8:7c:b9:be:e1:c4:01:48:76:80:d2:61:
a3:6a:f2:3c:a5:6d:46:d7:7c:48:9c:61:d3:86:22:1e:3b:7b:
2a:f7:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:50 2026 by rpki-client