Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: QrmTixtgKVeM1Jbbo7HOJyHF5jHx0LnnS8V8AYwq6Yg=
Subject key identifier: F6:D8:F9:E1:B5:53:B8:22:49:61:95:4E:30:83:04:5A:08:DF:7E:B7
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 01A17C604C771B6D8776C268EED47973A97F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 08:00:48 +0000
Manifest this update: Tue 27 Oct 2026 08:00:48 +0000
Manifest next update: Wed 28 Oct 2026 08:00:48 +0000
Files and hashes: 1: 8R5UNrAqJQPdeejAPTo1fqEGO0I.roa (hash: nmngdkdG7ZF784QABffIgU3OGRFd2RcORgkl7KA2W8U=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: zkyU70HXkuhEaH6g6I9Exf0tFRNqvsG3Yps5WCLMgjA=)
3: eCt1ukGdwDTlQatY4BtcnZOutqg.roa (hash: jUioXzkDEnZcp7VMTk2cW0iuDalR1NZtQ0/IgZsYx3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:4c:77:1b:6d:87:76:c2:68:ee:d4:79:73:a9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Oct 27 08:00:48 2026 GMT
Not After : Oct 28 08:00:48 2026 GMT
Subject: CN=f6d8f9e1b553b8224961954e3083045a08df7eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:69:c7:6d:e4:fe:75:b3:1d:e0:fc:c2:31:
0a:fb:2a:8f:10:16:53:6b:69:18:e2:fc:9e:05:e4:
52:0c:cd:24:94:58:aa:b4:d6:69:fc:4d:fb:df:d9:
e4:cb:9c:c4:99:db:9c:fd:51:8f:a4:43:d1:a9:8c:
b0:e8:f1:87:07:0a:79:4d:a5:49:d5:29:2b:ca:9a:
5b:f8:55:33:b1:e6:83:39:04:c5:2d:69:7d:c2:d5:
1d:47:37:6a:f4:85:12:7c:b9:95:0c:71:ea:93:0f:
1e:59:3d:4c:c3:4c:a1:3d:fe:7f:0a:08:f7:74:0f:
bd:1f:4d:0c:ff:07:05:4a:35:88:1a:54:0f:12:42:
df:a8:2b:ab:55:dd:ad:77:bc:c0:3a:bf:7b:0c:3c:
64:8a:4e:26:1e:7a:e1:e4:c9:16:96:b4:86:24:20:
9a:95:c8:7d:1f:61:55:32:4b:9f:d7:f9:38:26:9d:
25:b1:1c:7a:8d:e0:79:e6:f6:60:4e:39:98:f0:c8:
1a:66:13:ee:54:f9:17:a1:21:d9:a3:d4:f9:8b:0c:
3b:20:24:f6:0d:80:80:56:70:07:59:88:88:f8:67:
02:6c:7c:af:53:6a:b5:66:6a:3f:64:7d:65:5b:1e:
2c:07:6e:7d:55:d3:32:f3:31:f3:60:54:a1:db:2d:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:F9:E1:B5:53:B8:22:49:61:95:4E:30:83:04:5A:08:DF:7E:B7
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fc:8a:b3:60:55:5a:9f:68:a1:8b:bf:a9:12:5f:5d:04:ec:
f1:29:4c:11:e5:a3:37:f9:cc:b4:c9:df:ff:3a:ca:80:3a:41:
f9:fb:44:13:18:7f:99:c8:73:7a:f2:90:35:5c:59:cd:0a:26:
8c:6b:42:92:7d:82:36:c5:57:56:50:40:70:7f:c7:b9:74:8e:
b3:a4:92:f8:ec:c2:b4:f2:14:a1:56:0d:93:8a:33:b1:85:b0:
12:75:88:95:15:8b:62:7b:28:29:e0:f2:9e:3c:c6:16:50:16:
d9:44:a7:7a:0b:a0:eb:8e:95:13:05:4f:4a:ec:48:08:d6:e1:
49:df:71:c0:83:57:4e:d8:13:9f:c8:a5:fb:b1:20:82:d8:78:
c3:b5:c3:29:b3:5b:09:a5:14:b6:2b:8f:71:8e:0f:70:8d:c8:
85:7c:47:76:9a:ac:41:5a:92:57:55:bf:96:ec:33:5d:e9:a1:
1d:64:f3:dc:7f:13:fe:9a:80:67:c3:19:d9:47:de:19:c6:a6:
5a:c9:bd:90:53:70:20:58:64:e8:e1:d7:d9:01:d2:ca:a9:14:
17:e0:53:c8:35:9c:3b:3e:04:1f:a7:db:1e:6e:fc:65:b5:aa:
85:5f:a9:fe:1e:7f:45:b1:34:4d:bb:73:9d:36:9f:1d:d9:33:
7e:f4:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:55 2026 by rpki-client