Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: frjFWoOJQuYlJu6eXFRcXp1xVjP8aYutlnAV2tLo5Ow=
Subject key identifier: 03:2C:9E:82:5B:6B:B2:21:A1:E1:66:AA:7A:2F:47:F4:C8:9F:1A:35
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 019FA14D3D49B03B8516933A5F7C2FE49F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 02:00:21 +0000
Manifest this update: Mon 27 Jul 2026 02:00:21 +0000
Manifest next update: Tue 28 Jul 2026 02:00:21 +0000
Files and hashes: 1: 8R5UNrAqJQPdeejAPTo1fqEGO0I.roa (hash: nmngdkdG7ZF784QABffIgU3OGRFd2RcORgkl7KA2W8U=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: 2QdXVSgKKPX34/omYXotAWPyoppkBxMP39TMcaq3G3o=)
3: eCt1ukGdwDTlQatY4BtcnZOutqg.roa (hash: jUioXzkDEnZcp7VMTk2cW0iuDalR1NZtQ0/IgZsYx3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:3d:49:b0:3b:85:16:93:3a:5f:7c:2f:e4:9f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Jul 27 02:00:21 2026 GMT
Not After : Jul 28 02:00:21 2026 GMT
Subject: CN=032c9e825b6bb221a1e166aa7a2f47f4c89f1a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:f4:10:b5:57:3c:ad:4f:c5:c3:20:ce:08:
9f:8e:95:94:7b:48:4c:07:a6:c0:10:42:3e:8f:d7:
fa:b0:79:26:9a:75:c2:95:20:05:d6:0c:d1:d7:1d:
c6:6d:b3:3e:b7:0e:7e:fd:56:91:20:7c:0a:33:ec:
5f:45:4b:e7:2a:67:59:41:b2:97:dd:a2:19:dc:4f:
78:4d:f7:7e:60:29:2d:d7:49:a2:af:01:ef:ce:8d:
bc:9e:d7:85:a8:f8:71:fa:c6:b9:8e:1e:f2:31:29:
56:be:3c:e6:03:92:08:f7:c1:a7:e0:8f:d8:0f:c1:
a2:89:b9:93:ac:b9:07:d0:f1:5c:c5:b0:11:7e:78:
f2:95:4f:d6:b1:1a:5c:43:5a:8e:a5:ce:b5:0a:ba:
db:42:89:ee:5b:2d:8b:95:da:20:46:63:6d:23:07:
d6:28:6a:59:32:c3:43:72:fb:40:4a:d0:3e:24:c5:
f9:2f:db:21:24:7a:58:e4:08:23:c1:3a:d3:f0:ca:
d8:66:04:ad:18:69:5c:4d:ca:ea:b8:1c:5e:2e:fa:
35:d8:6e:97:35:01:0b:47:f7:c0:43:34:f7:13:18:
79:8c:10:47:7f:1c:45:11:a3:95:e6:0f:2e:44:88:
84:fd:58:cc:ef:ee:9f:96:eb:46:e9:75:00:ca:ab:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2C:9E:82:5B:6B:B2:21:A1:E1:66:AA:7A:2F:47:F4:C8:9F:1A:35
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bc:2b:e2:71:d5:31:61:41:05:16:8c:d3:eb:0d:73:4d:8d:
0a:83:a4:b6:7e:0d:34:f3:75:3f:29:af:0a:7f:1a:39:72:35:
9d:66:d8:4e:90:49:4f:97:1b:d7:a9:14:7b:88:ae:ed:69:52:
48:ad:0e:ea:94:a0:26:9e:cf:08:91:26:f6:b8:76:79:1b:f6:
d8:67:dc:d4:8e:e5:ae:d2:2c:e3:42:6b:96:19:37:eb:3a:0d:
a0:19:8c:ec:2b:6d:8b:98:27:13:70:ff:1e:53:ea:1d:fe:41:
58:36:2d:b1:74:ac:7f:93:aa:a8:f8:9a:87:17:ad:e2:32:6b:
bb:a2:03:a5:ba:59:f4:ca:58:00:b0:52:cc:41:72:80:8f:e7:
1a:76:2c:da:41:45:58:6c:62:16:16:f7:94:f1:f9:51:59:e1:
89:0b:d1:3b:90:ef:e6:20:d3:16:5e:af:70:72:0d:57:35:4e:
5f:28:9d:c6:8e:06:53:82:e8:41:28:ee:ff:59:42:45:fc:07:
31:0c:ea:71:d2:52:df:24:c3:68:fb:b3:59:55:f0:9f:89:02:
4b:57:69:42:81:49:23:1d:9e:72:c1:7a:39:b5:f5:89:5a:39:
db:30:c1:6b:c0:dd:e5:7a:ac:db:58:78:2a:33:df:0f:d4:fa:
0c:dc:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:00 2026 by rpki-client