Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: YVxvSH4N+httBuWrfiHY61dGaInWmm0faDdx79Lko+0=
Subject key identifier: 6C:44:6D:C0:5B:6C:45:BB:3B:9E:33:05:71:10:81:5A:60:1F:F2:CD
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 01A13FDE87AAA3CE7FE6B36C5E8554BA59A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 12A6
Signing time: Thu 15 Oct 2026 14:01:50 +0000
Manifest this update: Thu 15 Oct 2026 14:01:50 +0000
Manifest next update: Fri 16 Oct 2026 14:01:50 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: g5mBveMOFz4i7T+PSKzBYDNDdHqkE4vMZcEKd7HfqE8=)
2: BBKAblizkGIJV_f06RIh70XLtr0.roa (hash: EDuWd1ayZXpmIRskDvDc511OzhDthWRGsbu0u3My31o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:87:aa:a3:ce:7f:e6:b3:6c:5e:85:54:ba:59:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Oct 15 14:01:50 2026 GMT
Not After : Oct 16 14:01:50 2026 GMT
Subject: CN=6c446dc05b6c45bb3b9e33057110815a601ff2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:7d:ce:3e:cc:55:c5:47:07:c2:4b:c9:54:
51:c7:e7:81:3d:1a:d1:36:6e:f7:ba:fb:51:0d:ae:
1e:c5:9e:9c:ee:44:68:04:af:af:77:c6:d9:cb:b9:
18:db:dc:e4:74:c1:36:86:96:db:4d:47:92:80:8f:
e8:2b:1c:ee:4c:48:e5:22:23:b8:75:26:8f:bc:36:
47:56:34:50:da:ba:94:12:55:ca:9c:41:25:79:af:
4a:93:89:cd:c4:61:5a:1e:6f:2f:23:1b:5f:5f:64:
9f:eb:bd:be:9d:de:c1:f1:61:1d:b6:73:9d:7c:36:
83:09:c1:17:36:6e:78:db:5c:c1:74:ca:f9:94:3f:
b4:c9:45:f2:ea:dc:c8:f1:c2:43:6d:a7:d1:62:a2:
8f:eb:9c:5f:c2:85:97:4d:22:c1:2f:ec:33:b5:68:
cb:43:7c:57:04:0e:4d:38:28:80:4d:6e:db:07:67:
e4:69:62:80:10:18:3f:e2:ca:f4:57:39:38:c4:0b:
00:6d:61:b4:b5:23:9c:76:6f:a6:01:8d:d0:53:ec:
ab:34:06:fe:a8:bf:e2:7f:4c:77:ed:34:97:b5:04:
c9:72:79:a1:ea:d2:79:23:c3:fa:df:1e:e7:cf:b1:
57:af:1d:78:e9:bd:0e:ba:1c:09:db:3c:61:24:5a:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:6D:C0:5B:6C:45:BB:3B:9E:33:05:71:10:81:5A:60:1F:F2:CD
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ba:9a:12:8b:b6:ab:d0:db:e5:4d:9f:15:76:e1:42:6c:fb:
d8:5c:f0:fa:74:2b:34:ee:6b:ea:15:32:49:91:72:e1:6a:53:
92:94:60:94:15:0d:ad:09:14:84:d5:ab:25:e3:19:5d:4d:0a:
3b:39:57:17:b9:b5:b3:af:6c:41:3a:96:6a:c5:90:4f:30:aa:
ab:71:ea:2f:c5:ef:f4:e5:7a:83:0f:86:f1:ab:05:02:25:a1:
6e:00:90:00:6f:d5:f5:76:76:5c:a9:37:33:5a:73:68:81:6e:
f4:64:77:ec:6a:2f:80:f9:4c:13:8b:b2:04:f7:0d:29:e4:e3:
5d:62:b9:89:63:f1:18:ec:d2:1e:cf:e7:42:0d:84:1d:bb:75:
63:45:e5:15:42:86:f7:0a:69:9b:f4:62:d0:c5:3b:96:58:fb:
e8:16:2c:78:49:c2:4d:a2:7a:dc:f9:ea:95:44:63:c0:b6:bf:
e1:36:cd:30:7e:8d:57:67:c2:cc:4f:22:7e:53:f5:52:82:e0:
f6:ed:6c:96:3d:c2:c5:ba:44:7c:30:fa:57:44:4a:0e:9e:58:
06:d1:50:11:86:c0:5c:5e:14:75:4d:2d:9a:01:6d:93:ce:85:
22:1b:b8:36:35:4a:b2:62:14:75:cd:6c:68:04:bd:ee:96:d3:
62:74:7a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:48 2026 by rpki-client