Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: R6a87oi+oX4ieyJjl38xDxU3Zn0KefDZ7VQpOHpBaFU=
Subject key identifier: 1F:BD:CC:AA:90:70:E0:26:5A:95:2C:54:8D:53:CB:9A:C3:27:09:33
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 01A18C4154D3667E45038949DE70E0BC9486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 1AD0
Signing time: Fri 30 Oct 2026 10:00:54 +0000
Manifest this update: Fri 30 Oct 2026 10:00:54 +0000
Manifest next update: Sat 31 Oct 2026 10:00:54 +0000
Files and hashes: 1: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: 87s868if9e6xkP6knEqKaVjMmFhpVicf0oMO6nlpYOw=)
2: u5hJOCynJQAu4PH5D56C-AeKtEc.roa (hash: 53JyrjI2rSv7IJ0kdQIBEc2NY8BsRGlwPaWvUaVHA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:54:d3:66:7e:45:03:89:49:de:70:e0:bc:94:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Oct 30 10:00:54 2026 GMT
Not After : Oct 31 10:00:54 2026 GMT
Subject: CN=1fbdccaa9070e0265a952c548d53cb9ac3270933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:94:01:8f:78:23:dd:bc:86:ab:a1:e1:8c:
22:07:6f:ca:fd:cc:9c:55:0e:86:46:cf:b7:5c:f0:
70:57:ba:48:a8:92:5a:53:e0:e9:50:73:43:8d:02:
85:40:3a:4d:dd:46:a7:c9:9e:df:16:7e:b5:3c:26:
90:60:f5:4c:11:03:41:f6:78:67:85:d4:bd:b9:01:
43:64:2d:8f:00:7a:43:d4:eb:a8:f8:4c:e1:cf:da:
93:2e:1e:a5:ca:67:32:df:91:fe:c3:49:6a:45:4d:
e0:da:d9:18:54:f1:ba:95:77:c4:f4:ad:1f:22:db:
fb:f2:d3:ca:bb:a2:72:0e:81:2a:a7:71:78:70:79:
f8:8c:6f:01:91:d2:96:0d:ac:c9:e3:76:14:f4:43:
47:5e:7c:c6:94:b1:a9:e9:10:51:3a:a2:91:67:b6:
b5:bf:2a:9e:d7:a0:ef:4c:f4:4d:a3:be:d1:4f:75:
22:a4:e0:3f:b3:df:24:26:bb:df:68:5d:5d:50:6d:
05:b1:bd:9a:b3:06:bc:17:79:e7:a0:0d:f7:6f:a2:
16:a0:d4:21:62:7f:0e:d0:b4:41:ec:a2:7e:75:64:
7e:7b:a5:cd:b3:7e:77:5a:7c:27:25:19:f7:0c:a4:
c6:42:e1:6e:3e:12:1d:f2:63:96:7a:ea:b6:fa:3a:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BD:CC:AA:90:70:E0:26:5A:95:2C:54:8D:53:CB:9A:C3:27:09:33
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e4:45:99:cc:7c:86:d4:25:8a:db:3f:80:04:16:4c:78:57:
ea:26:95:29:33:a7:e8:07:8a:b8:24:f2:43:20:01:32:9c:9b:
30:e8:b0:20:14:5a:47:d5:86:b0:6d:2f:52:fd:91:11:54:94:
e2:44:fc:fc:2f:52:f3:89:ec:db:de:51:24:c6:a2:f4:ee:c4:
f9:b6:52:49:1a:c8:04:62:ad:2a:0f:4d:99:ae:2d:04:86:19:
c4:93:60:ea:bc:d7:3a:f6:f3:5e:01:90:4c:b2:e8:c9:37:6e:
48:d9:87:ac:64:27:9f:c6:cb:d5:07:fd:c4:80:2a:f7:1f:b4:
79:01:25:7b:35:4d:06:86:94:63:0e:0a:20:94:d1:96:aa:1b:
72:1e:d6:e9:d0:26:cd:f1:e5:c1:5c:f7:d1:33:9b:b6:13:d2:
48:32:85:58:8d:3d:28:1a:0e:ad:12:2e:fb:ea:80:ca:1a:22:
27:42:23:96:ec:51:d3:87:91:e6:23:ee:c6:d7:c7:aa:43:98:
e2:79:4b:d0:69:0d:fd:50:18:64:52:2b:5b:32:f2:c8:d1:08:
c9:7a:5b:bf:f9:67:62:29:65:f4:c0:33:1b:61:24:dc:28:8b:
2c:f6:9c:03:38:c1:0a:48:24:95:4f:04:34:16:ba:fc:3d:96:
22:c3:f4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 17:17:44 2026 by rpki-client