Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
File: hB6IIdAaloi57nryrruVnLvtBys.mft (raw, json)
Hash identifier: 8DiLzZm3NrZ8OcP3zsnqVYZI95x+5A3zzLk9GkThEoI=
Subject key identifier: B2:41:F3:C7:58:04:EC:84:37:CF:44:F1:DE:DC:26:51:DA:04:E8:A8
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Certificate issuer: /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial: 01A11CAC959056AE7869BCAE8289F51F9C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
Manifest number: 02CA
Signing time: Thu 08 Oct 2026 18:00:34 +0000
Manifest this update: Thu 08 Oct 2026 18:00:34 +0000
Manifest next update: Fri 09 Oct 2026 18:00:34 +0000
Files and hashes: 1: OBBBpbRLtAoopWvDF4V0_36vRjc.roa (hash: rORQCAXSnhZhLeVmf7l/rxG4Y1xlgxBiqBOAQvHavUw=)
2: hB6IIdAaloi57nryrruVnLvtBys.crl (hash: FSqVbrHXZis4owIABWPHV1YH/Jj/k5X0VNXl151MNHY=)
3: n-u3pAbtCpun8Sd3e8bI1PdPQbA.asa (hash: UfFTiG8cIxuK4yk1unwjFoEQCnOqxLEmjULdwQNY6gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:95:90:56:ae:78:69:bc:ae:82:89:f5:1f:9c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Validity
Not Before: Oct 8 18:00:34 2026 GMT
Not After : Oct 9 18:00:34 2026 GMT
Subject: CN=b241f3c75804ec8437cf44f1dedc2651da04e8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:72:bb:3c:f9:cb:a2:fc:c5:6b:bd:83:41:
bd:9b:69:b7:e3:a5:8f:9b:46:b1:f9:6d:2e:75:27:
d7:cf:61:34:70:7d:22:21:1b:eb:82:6d:38:a9:e9:
82:4b:0a:be:e5:fe:ac:70:0e:17:b8:59:87:85:08:
43:38:95:00:60:85:c0:56:3d:85:d2:aa:c8:f8:b3:
3c:a6:03:f0:a5:eb:6f:07:05:e3:79:01:55:e3:6e:
2b:80:5b:9c:87:25:b8:c1:b0:30:a7:22:da:c1:eb:
1b:32:43:c9:60:d1:df:49:52:34:50:df:c3:8c:5d:
9f:05:ed:5a:81:e1:1c:14:b4:70:b7:52:20:12:77:
16:81:c2:12:3f:9f:cb:06:d7:f2:31:15:75:e9:a4:
11:7c:27:b8:3c:cd:a2:f8:9f:a1:df:d1:f1:63:04:
1b:71:fc:46:1e:5f:47:97:da:48:14:81:f2:56:45:
40:3c:28:f1:e0:1c:bc:5f:c8:be:cf:5f:03:4f:da:
23:7f:fe:c4:78:66:9e:d4:5b:fc:e3:74:24:f7:a5:
26:84:f3:d4:d6:da:ed:e6:01:cd:35:22:bb:64:bd:
f7:53:91:8e:00:9f:71:1c:a3:5b:a4:e1:00:03:8b:
66:f6:95:fa:d1:a1:eb:62:19:97:ae:e8:fa:f0:49:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:41:F3:C7:58:04:EC:84:37:CF:44:F1:DE:DC:26:51:DA:04:E8:A8
X509v3 Authority Key Identifier:
keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:23:ea:6b:eb:61:bc:d9:9b:de:57:c1:ed:97:2e:cd:27:49:
e1:9f:88:3f:3d:c1:2a:1e:0c:77:8d:f8:95:65:93:91:70:a6:
08:dd:94:99:dc:ca:83:85:19:82:26:16:13:9d:df:e6:b8:15:
50:1f:c4:8d:5e:47:bc:6f:07:57:ed:a6:d3:b8:6f:a6:fc:be:
34:e9:bc:18:88:4f:17:dd:4e:55:f0:aa:cc:44:5e:eb:ab:e6:
d1:69:79:e2:52:71:3d:d8:b0:05:71:82:bf:cc:22:fd:0c:2b:
15:0c:21:8c:89:b0:15:b9:f4:60:d4:3b:a7:46:1c:0f:da:1a:
f3:e5:8f:25:25:d5:66:c3:09:ab:f0:7a:32:88:1a:b3:12:df:
b5:d3:80:89:1d:e6:ec:9c:f1:26:46:0b:a3:aa:a3:df:88:e5:
7c:db:51:2d:41:c1:23:ce:cf:9e:39:7b:2f:7c:5d:1e:2c:90:
6b:6b:70:0a:9b:bc:f9:a4:03:a0:9d:79:a2:7a:90:7e:a6:1b:
51:ea:21:68:b8:1f:98:8a:de:4c:63:6f:8f:bd:7e:e8:a5:2e:
31:88:3d:81:d2:5e:bc:ca:37:81:28:fe:9e:84:9e:29:1d:07:
cf:32:7d:30:c4:c0:bd:41:21:54:4e:b6:fb:1f:19:5d:71:c0:
25:c3:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:19:05 2026 by rpki-client