Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: joklihCdlytRWevVXDuBj7l1nyKCkcP2AycUcuZnWMA=
Subject key identifier: C1:8F:92:4F:88:AA:A4:0A:B4:00:DC:F5:E9:18:34:C8:1E:F0:D9:36
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 01A0016F8E5952644498B15266A95EDF9EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 17C5
Signing time: Fri 14 Aug 2026 18:01:23 +0000
Manifest this update: Fri 14 Aug 2026 18:01:23 +0000
Manifest next update: Sat 15 Aug 2026 18:01:23 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: FG5kafyKkv1vNfJsT4D1n0LaySeWYrTjnldyUgtOXz8=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:8e:59:52:64:44:98:b1:52:66:a9:5e:df:9e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Aug 14 18:01:23 2026 GMT
Not After : Aug 15 18:01:23 2026 GMT
Subject: CN=c18f924f88aaa40ab400dcf5e91834c81ef0d936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:6e:d0:73:f6:53:ee:0e:7c:a1:0a:16:82:
e6:36:fb:7f:68:f6:a5:4f:70:06:1d:33:61:ad:73:
e1:8f:11:ba:0c:0c:e9:69:49:3e:23:c3:c7:fc:e0:
1f:9d:ed:f3:22:db:71:60:26:01:62:bb:f1:c7:2f:
f0:d6:d7:61:af:97:e3:34:8a:5f:16:6e:09:ea:62:
3d:f9:d4:a5:4f:42:39:a1:f9:6b:81:65:0c:97:f2:
98:7e:8b:89:b4:f0:2f:85:ec:d0:ee:72:1a:5d:b6:
9b:3d:cd:48:30:51:5c:4c:eb:86:a3:54:a1:1a:5e:
75:ce:73:31:7b:f8:fc:9b:20:b1:e7:bc:11:99:bc:
32:0a:d9:ff:d4:3e:42:9f:08:dc:63:78:f0:e2:9d:
b0:e9:26:04:a3:b8:0e:99:08:38:b3:0c:4c:80:5c:
d3:ce:58:b8:c4:3f:54:91:d1:ab:a8:e7:23:13:f6:
e7:6f:e1:19:58:91:21:7a:03:ac:0b:ec:08:74:19:
96:fc:83:9f:f8:26:bb:9b:fb:cd:f9:83:01:2e:75:
cb:f0:7a:76:45:31:32:b8:ac:5e:9e:05:b4:cf:23:
b9:30:71:50:c7:36:35:8a:bd:93:72:3b:6f:19:e1:
64:49:83:d3:0e:80:a9:e3:30:a2:92:e5:87:f1:26:
90:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:92:4F:88:AA:A4:0A:B4:00:DC:F5:E9:18:34:C8:1E:F0:D9:36
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:d4:c3:f6:5e:3f:0e:e3:3f:76:93:3b:1f:de:7c:8d:6a:
91:89:7c:28:98:c1:58:0c:d6:dc:1d:2f:25:79:6f:cf:df:45:
c8:88:11:15:98:d5:21:eb:97:7d:63:8f:8c:67:33:53:14:2d:
71:e5:3b:f2:8f:51:c8:ce:7d:62:93:eb:69:0b:0f:fb:bc:32:
56:4a:b5:45:c4:fc:52:b0:91:eb:5d:c3:8e:9e:21:1d:0c:6b:
2b:07:c2:ea:81:8c:3a:ef:50:b6:41:ad:f5:0d:5d:ad:2e:65:
dc:d8:d0:dd:d1:c2:e3:2c:12:73:58:af:da:0c:55:6c:f2:a1:
23:3a:6f:0f:d8:59:cd:ac:08:34:90:f1:b6:0b:5e:a3:10:1a:
84:92:86:2c:73:4e:8e:97:9a:19:e8:14:be:3f:d9:8c:f7:45:
aa:a2:7f:52:65:b9:90:b3:41:fd:46:15:ff:a9:bf:04:67:c8:
09:83:2e:83:a0:2c:4f:b0:8e:75:db:2e:53:f6:fd:67:a5:6c:
8c:cc:f6:69:f6:67:cd:bf:91:bc:21:c1:72:46:26:2f:7f:10:
42:79:b4:7d:c6:28:84:01:4c:11:75:83:7d:03:95:a4:9f:6d:
67:cf:4c:b6:59:c9:e3:e9:88:09:2b:2b:e3:ad:a3:b9:1e:60:
36:f4:34:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:08 2026 by rpki-client