Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: T5CY3fDIB/z/beHyYm9QSKOuY+IDl0LX4VTORoV4Yn0=
Subject key identifier: 25:E8:D0:9F:EB:53:F1:95:DB:AA:EB:60:4B:71:E4:33:7E:40:EF:62
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01A13F022C513F9D5985B125AFBA626C02DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 10:01:09 +0000
Manifest this update: Thu 15 Oct 2026 10:01:09 +0000
Manifest next update: Fri 16 Oct 2026 10:01:09 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: MMc/4cjhonevYVkWdkNFCaaPQM7bt/lm/OTxOyLJqRY=)
2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:2c:51:3f:9d:59:85:b1:25:af:ba:62:6c:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Oct 15 10:01:09 2026 GMT
Not After : Oct 16 10:01:09 2026 GMT
Subject: CN=25e8d09feb53f195dbaaeb604b71e4337e40ef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:4d:0a:98:63:1e:a7:73:ed:9e:06:a8:d4:
71:59:e3:2e:54:4c:38:53:6c:8d:a6:ba:30:d7:58:
c5:29:f1:f1:e6:68:32:2a:8f:29:08:a9:9a:28:28:
d3:56:09:17:a9:67:31:ec:a8:1d:55:bd:84:ef:f5:
4c:cd:d5:49:a8:35:31:c9:6f:49:6b:96:bb:79:8f:
9d:29:39:b6:12:01:73:d0:58:d6:d1:be:7f:b3:ac:
94:49:8a:9e:2d:a8:eb:37:55:0c:e9:ce:ec:5a:9c:
03:0b:54:86:76:ca:18:f4:c3:88:88:f5:44:84:6b:
83:a0:5e:8f:bd:99:52:e3:63:32:e4:f4:d2:06:f8:
e4:cd:99:b2:9e:73:cf:32:9f:5b:fd:12:95:ed:b4:
fb:0f:c1:eb:5e:31:1e:cd:04:72:b1:e0:a8:87:e3:
a4:3e:2b:4e:13:c2:63:83:45:ee:1b:ce:93:8c:c8:
f4:40:17:a8:ab:e3:65:12:24:3a:c0:19:68:d3:78:
de:5c:a3:ce:61:e3:c2:f0:23:74:cd:5b:dd:f5:6a:
75:a5:66:41:2f:be:b8:4a:0d:dd:46:e2:46:fb:9d:
f4:95:6a:a5:1d:e5:ad:20:30:1b:d0:3a:a3:48:67:
f2:c9:2e:e0:6f:d2:33:10:8f:23:f5:8f:e3:bf:76:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:D0:9F:EB:53:F1:95:DB:AA:EB:60:4B:71:E4:33:7E:40:EF:62
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:4f:a9:26:04:a7:4e:9f:fb:0b:43:2f:64:26:07:2b:43:
6a:8b:ed:71:b8:01:ad:a4:07:34:46:fa:1c:a0:3d:dd:77:0d:
e8:99:f9:0e:e7:bb:ae:fe:cd:9d:a8:b5:bd:7b:bc:73:d4:5c:
f0:5f:5b:16:56:15:4d:d4:07:30:55:1e:46:92:3d:04:0c:1f:
77:1d:23:2f:95:af:ae:b5:81:98:ed:8f:e2:51:77:d7:eb:dc:
49:2d:b7:ca:22:39:c2:94:f2:bf:ab:ed:66:1c:5e:52:8a:fa:
ed:fd:5d:3a:16:e9:d0:11:5d:45:4d:fc:ab:07:87:9f:b8:20:
74:79:d1:62:91:f7:c7:0b:4c:c6:f2:fc:d8:6b:73:24:33:ef:
df:c3:93:72:29:ff:3e:ae:23:2a:fc:92:4d:2c:92:7b:73:c9:
8b:27:4b:55:a4:aa:dd:41:22:3a:5e:91:c6:37:a8:00:77:a9:
c6:af:d5:cd:ae:26:80:94:82:f8:92:dc:d9:af:5e:f0:3d:3e:
76:b2:14:08:cc:c9:52:79:b3:8d:9f:2a:70:eb:09:b7:50:63:
e3:92:5b:ac:e9:29:87:38:80:0f:e0:ef:40:9c:6a:8a:0f:80:
0b:90:91:53:7a:20:9a:6b:7e:02:3f:ac:63:04:60:b1:96:fd:
53:51:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:22:28 2026 by rpki-client