
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: n6UDgqE76fER7YjAClCPVTuZTa7vF2cLtAUO1tUuqS8=
Subject key identifier: 00:5A:25:7A:1C:91:79:1F:19:1D:CB:B8:2C:E4:AD:3A:13:4E:D8:FE
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 019F189E2807388F5897C65EF7B65F40E8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 198C
Signing time: Tue 30 Jun 2026 13:00:45 +0000
Manifest this update: Tue 30 Jun 2026 13:00:45 +0000
Manifest next update: Wed 01 Jul 2026 13:00:45 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: JUH+P/2vn7DR986EbKfRjSikUDGeZ1IAkK7ljdAxH6s=)
2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:28:07:38:8f:58:97:c6:5e:f7:b6:5f:40:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jun 30 13:00:45 2026 GMT
Not After : Jul 1 13:00:45 2026 GMT
Subject: CN=005a257a1c91791f191dcbb82ce4ad3a134ed8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:42:4f:4d:5a:a5:ba:c9:eb:23:2a:0d:cb:
02:b2:df:5a:12:31:98:44:56:84:df:64:d3:45:7b:
12:91:e6:90:10:3b:80:ee:46:80:3c:c3:11:8e:df:
ed:29:43:05:b1:c5:69:35:19:1a:ce:ef:7c:cb:59:
c7:d3:33:a1:91:eb:a6:9e:56:5c:44:a5:fa:ee:12:
31:6c:bc:dc:8f:66:94:1b:5a:6b:eb:1c:0d:9c:1d:
59:20:06:67:a1:a4:fc:98:74:12:72:d6:da:71:05:
34:40:c2:53:20:91:43:22:69:b8:35:28:51:0a:ff:
a8:a2:e9:d3:20:c5:2e:c2:fb:40:e7:58:4a:b7:1f:
e1:c3:20:8b:b8:61:ae:10:9d:5f:a4:b7:65:44:71:
07:6f:a6:fb:85:b1:91:9f:13:0f:f4:cf:d6:16:8a:
f6:e8:82:d2:9d:58:7e:e1:05:ee:3f:5e:02:1d:e8:
fb:3b:9d:56:81:65:8c:03:c0:ed:42:1c:25:83:a5:
38:0b:27:66:ee:c7:43:d5:f1:47:9f:80:ea:88:1c:
53:f8:fd:d2:22:06:0b:0d:de:6e:ba:e8:c3:06:ef:
f5:25:4c:7c:9e:42:c1:7d:c6:7c:17:35:35:45:12:
7a:17:90:65:5e:25:eb:c6:a3:d1:0e:b4:ae:db:da:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:25:7A:1C:91:79:1F:19:1D:CB:B8:2C:E4:AD:3A:13:4E:D8:FE
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ed:88:9a:4f:45:a7:eb:a2:d0:54:8e:90:b9:65:e4:64:28:
08:11:1d:6d:51:f2:cc:e6:98:6b:49:52:d7:2e:54:50:7a:c2:
6c:69:fc:f3:32:23:6f:dd:6b:80:69:e0:d0:df:38:49:25:c0:
ac:50:cd:34:21:d5:07:b8:c5:45:12:1e:a5:17:b9:87:21:22:
0a:4c:eb:92:69:28:2a:ea:cd:64:d5:23:31:d1:21:f8:a2:82:
18:6b:06:0f:31:26:06:6a:ad:e9:f0:b3:f2:4e:de:c2:bd:e2:
38:e6:40:34:5d:af:9e:af:7b:96:30:39:14:d0:24:89:6b:99:
e7:7d:6e:9e:3a:cc:49:15:b4:0d:4a:3f:f3:b1:a5:54:c0:f4:
ac:f1:29:af:c0:b1:26:71:4b:01:e1:ea:4d:26:7d:bc:e3:63:
29:cb:1f:13:ba:2d:3b:81:5a:f7:40:cc:a8:d0:e8:b9:b5:ba:
e0:b8:da:37:cb:bb:6c:77:10:e4:15:dd:72:fb:a5:fe:b1:0f:
16:86:9b:b4:62:97:54:4a:61:b2:70:92:6c:a1:2e:a0:13:b8:
81:95:4a:45:5b:6a:a6:96:39:04:8e:45:9d:19:dc:c1:2a:f7:
3a:76:5c:c4:63:e1:d9:46:8e:0f:d0:ef:8b:68:a3:60:21:de:
d9:73:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:09 2026 by rpki-client