Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: oATDlbxnaHIdBziPzteQ7gHzi686/94zqbz10mUKUyQ=
Subject key identifier: 0F:65:CE:E2:42:19:65:19:C7:E8:36:2B:B4:51:9B:5A:3E:9C:70:E6
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 01A1765E207B6F3A9FB5BACB0641572413B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0FA1
Signing time: Mon 26 Oct 2026 04:00:42 +0000
Manifest this update: Mon 26 Oct 2026 04:00:42 +0000
Manifest next update: Tue 27 Oct 2026 04:00:42 +0000
Files and hashes: 1: SGmRPs7E_Ar65qS0PZ3szYEetUo.roa (hash: wn4/5O7naNsigvGqXsvxbt3WPlLI3oIhfBuN4K6i6Ro=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: PmXLUQVVmRDMYgc9clmYgeNcOvu+Ab0nPvUOat+MtUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:20:7b:6f:3a:9f:b5:ba:cb:06:41:57:24:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Oct 26 04:00:42 2026 GMT
Not After : Oct 27 04:00:42 2026 GMT
Subject: CN=0f65cee242196519c7e8362bb4519b5a3e9c70e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:8e:ac:3f:6a:5a:c3:9a:f1:c4:ce:2a:4e:
2b:23:88:0a:ff:8c:ad:6f:4c:9e:72:e5:30:70:39:
2c:70:8a:e0:1e:3d:e2:d1:2b:fe:b4:f1:e0:7e:c2:
d4:77:b0:89:0b:c6:51:9c:0c:a7:09:48:d8:40:b8:
47:47:52:54:78:1b:8d:f9:44:43:7f:52:5e:a3:33:
08:f0:02:f4:44:9e:5e:c5:ba:dc:ab:96:f4:7c:f8:
5d:95:ce:de:d7:74:fe:2d:b8:dc:87:ae:76:72:b5:
ae:ff:df:47:95:45:fa:82:69:e9:5a:7e:4c:d1:4f:
ae:bb:b8:df:b0:f4:25:6f:65:15:f9:1a:6e:7e:8b:
26:d1:8d:05:e8:2e:10:66:4e:45:08:48:b0:4c:5f:
d0:2f:d5:9d:7f:f0:04:29:cb:c6:de:91:5d:bd:04:
39:8a:93:de:7f:8c:f5:84:53:00:85:5b:ae:54:8b:
4d:31:e5:51:45:5c:01:f4:d7:e9:80:56:6a:28:ce:
38:21:cf:9b:e7:b6:29:38:c8:08:e0:c9:3b:1f:50:
18:cb:53:26:5c:24:e4:c7:b1:fd:22:e2:12:a0:b4:
20:bc:e2:75:a8:53:b0:ba:d9:5b:63:ea:ad:4e:6f:
b9:6f:4a:dd:c9:8b:ca:46:a3:a2:ac:33:9b:37:98:
c5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:CE:E2:42:19:65:19:C7:E8:36:2B:B4:51:9B:5A:3E:9C:70:E6
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:96:27:ce:96:17:fd:8e:41:a3:07:8d:fa:1d:ea:df:90:ec:
c5:bd:ac:20:aa:d0:f3:58:55:49:1c:64:0b:7b:3e:44:8d:94:
08:a3:58:6b:68:49:58:c0:45:ed:0e:1a:bb:6e:92:3c:e0:20:
c5:02:ae:a1:06:37:c9:39:60:02:28:b7:71:c7:1a:28:7d:7f:
ba:7f:57:4b:14:64:9b:26:37:2e:df:27:1f:b7:4f:57:be:c6:
c0:3b:5b:93:a5:31:84:86:22:16:2c:eb:63:8e:e8:12:25:e2:
63:34:c5:ac:2b:ae:be:5e:f9:f1:9a:34:34:b0:eb:53:b3:99:
03:78:4f:ec:09:64:0c:a9:83:1f:bb:b7:ac:9d:66:18:63:f1:
51:22:6e:9e:b5:b7:da:5c:a7:ca:14:b2:a1:c9:53:17:85:fd:
4b:e3:89:dd:49:04:a0:3f:50:6c:ba:c5:ba:56:94:cd:3c:b5:
4f:54:21:d1:1a:a4:b5:c8:21:2d:58:8b:b2:85:69:ec:d3:e5:
11:06:9f:51:6b:d6:5b:11:5a:39:f2:35:04:d0:80:ed:4a:75:
d9:f4:47:e4:74:89:ae:13:1b:e2:33:82:a8:0b:9d:b1:39:2a:
3c:5c:08:b4:9b:22:41:ff:92:cc:1c:85:e2:43:dd:f7:b1:2c:
8b:e1:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:11:41 2026 by rpki-client