Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
File: 1-ItEPpksZlZYlC5okNKY1ozeZCU.mft (raw, json)
Hash identifier: G5i/HKA9Oue0QaACbxShM6Gg4EWPog/0ZWTcI0gMo74=
Subject key identifier: BC:C6:FA:1C:01:A7:84:62:22:A4:F9:F1:10:3B:FA:7D:31:26:F4:24
Authority key identifier: F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
Certificate issuer: /CN=f88b443e992c665658942e6890d298d68cde6425
Certificate serial: 01A03C71830ECA349EAA0E914266A00A8847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
Manifest number: 01CC
Signing time: Wed 26 Aug 2026 05:01:07 +0000
Manifest this update: Wed 26 Aug 2026 05:01:07 +0000
Manifest next update: Thu 27 Aug 2026 05:01:07 +0000
Files and hashes: 1: 1-ItEPpksZlZYlC5okNKY1ozeZCU.crl (hash: U75iG2t015Ke8merSlu5YIExADBwiPy599jDehtZ5DE=)
2: 560UvqVud9DEuhQPr1x60Rz_4no.asa (hash: R22iZnCp/y6i8IZet00/Fkh5m7KFKy8c2ikVMY1ramc=)
3: Kf9QvVgVrtl0XM8frEpJ_fd4yfM.roa (hash: fg4f8lm5urIblTtWM6P0oF5ZkLFnBYAOFc4g9paZJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:83:0e:ca:34:9e:aa:0e:91:42:66:a0:0a:88:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88b443e992c665658942e6890d298d68cde6425
Validity
Not Before: Aug 26 05:01:07 2026 GMT
Not After : Aug 27 05:01:07 2026 GMT
Subject: CN=bcc6fa1c01a7846222a4f9f1103bfa7d3126f424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:ba:6b:f0:4a:ca:fb:da:d0:ec:25:5e:69:
18:2f:fc:46:55:49:9d:1f:ae:d2:e4:a6:48:42:4c:
c1:ce:b0:25:99:49:2b:f8:88:2e:2c:0d:58:f7:f8:
b3:7b:5a:13:5d:52:19:45:b6:77:61:79:21:74:f7:
72:e6:ec:da:4d:f8:88:b2:5f:ca:4c:d2:ed:47:6c:
90:5b:52:06:cd:53:2e:76:66:ff:c1:0a:9b:17:1a:
9f:b9:e4:6b:09:28:cd:56:91:c0:a7:a3:bf:24:cb:
f0:ba:30:b8:5a:18:9e:eb:a0:5d:2c:f1:1d:6b:41:
a7:91:7c:09:be:58:bc:8b:b7:c7:83:8f:87:bc:79:
49:d0:ac:58:84:56:2a:82:e1:9a:c9:b2:d7:5f:67:
e1:c7:80:ae:49:3a:fa:be:b3:f1:e3:02:e3:8f:c7:
34:1b:24:51:0a:13:ba:09:21:e1:81:39:5d:7a:36:
37:a7:f4:d9:8a:0a:58:44:92:e8:c2:c1:11:a1:3f:
f6:e4:cf:ae:c9:d2:bf:d1:da:a7:8f:84:64:24:c4:
0a:22:9e:1b:9b:57:10:82:4d:09:27:91:97:bc:dc:
f6:9c:08:f6:e4:05:9f:84:06:35:13:30:63:cb:a9:
79:c6:fe:04:b0:04:cb:38:59:88:39:49:c6:a2:fb:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C6:FA:1C:01:A7:84:62:22:A4:F9:F1:10:3B:FA:7D:31:26:F4:24
X509v3 Authority Key Identifier:
keyid:F8:8B:44:3E:99:2C:66:56:58:94:2E:68:90:D2:98:D6:8C:DE:64:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ItEPpksZlZYlC5okNKY1ozeZCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/bfb542-4f67-46c5-9710-694252f029f1/1/1-ItEPpksZlZYlC5okNKY1ozeZCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cc:11:a2:1b:9f:f8:df:5b:91:ad:b6:8e:27:04:bb:fa:ae:
d8:70:af:e7:ca:ea:20:cb:20:c8:19:bb:70:b4:44:ba:42:d8:
13:92:8e:c7:08:ea:81:e7:91:42:7a:97:63:28:a2:ee:bb:e3:
8a:53:e5:78:ad:40:75:40:22:62:e4:69:00:03:bb:cf:f7:10:
e5:9c:b3:40:31:1d:b8:a9:2e:10:33:0d:18:b3:9a:11:7e:2b:
08:19:9a:c0:75:84:02:6c:74:48:34:d1:fb:6d:00:a1:a5:b7:
97:19:97:e5:9d:28:f1:53:ef:be:74:e4:e1:9b:99:5a:7f:0b:
d1:85:98:0c:b7:e9:10:00:f3:ef:ca:99:77:1e:c2:39:fd:28:
ef:d5:90:5d:4f:3b:ab:64:8a:64:08:48:76:89:7b:b7:ac:3c:
72:26:e3:10:74:40:e2:1b:20:64:de:f0:00:00:14:79:c9:d4:
39:37:2e:60:91:92:18:a0:1c:e7:f2:5e:a4:45:f0:92:50:45:
9d:02:c7:c4:48:8c:17:67:82:e7:8e:cf:ef:af:83:b7:28:91:
d7:4d:86:57:9f:e6:66:24:aa:29:8b:61:0f:3e:6b:81:3d:e9:
d2:0c:84:7d:57:3c:77:18:af:02:c7:41:b7:00:d2:f0:24:40:
25:db:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:17:14 2026 by rpki-client