Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: YYFhytbYdcuZ7FK6DA3NyUYeo3ecaD1iJknsu50/h3w=
Subject key identifier: 65:54:62:98:F4:74:DF:D1:08:6A:E0:BB:5C:32:B4:4D:31:E7:43:62
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 01A1114DB721707514BEE2F67DAE2792976E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 110D
Signing time: Tue 06 Oct 2026 13:01:08 +0000
Manifest this update: Tue 06 Oct 2026 13:01:08 +0000
Manifest next update: Wed 07 Oct 2026 13:01:08 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: sg3oyLxUbuW/32UrbI5OI45XoWzdbVvIAKnHML6yGtI=)
2: 8YQYzkkWSUbJ3UPPymYSW914MMg.roa (hash: 9lvLYcAIuT8e6AK3a0cVw0sCFSHzJhGpdm+DyXOpWt0=)
3: 96-EzPJNO2K_r89WsSa8F4wKfII.roa (hash: TgdBDufBqmIta91fueVV5ENNB6Zw3/BojYphtII6yZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4d:b7:21:70:75:14:be:e2:f6:7d:ae:27:92:97:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Oct 6 13:01:08 2026 GMT
Not After : Oct 7 13:01:08 2026 GMT
Subject: CN=65546298f474dfd1086ae0bb5c32b44d31e74362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:d5:7e:83:75:e1:c7:60:bc:9d:39:84:0c:
cf:a4:c0:e7:d7:6b:18:63:4b:ce:c4:c7:c4:8a:42:
11:f4:65:19:d3:4d:d7:f4:04:da:83:ba:35:8c:7c:
b2:ac:c1:16:ec:fd:10:97:62:08:ca:9f:2e:83:8f:
01:67:e4:f9:9f:9a:21:1a:a6:f9:11:1d:34:5c:cb:
2d:bd:c7:35:01:96:ea:c6:9b:66:27:e5:8c:94:8f:
13:20:52:1e:8f:26:96:af:71:4a:21:a4:c4:39:93:
25:bf:2f:7a:88:ad:e0:52:22:bb:5c:eb:32:a7:ba:
3c:fc:8a:9c:9d:25:e9:5a:ee:a7:68:7f:48:64:56:
8f:24:69:b3:34:1e:1b:2e:2a:d5:76:88:29:87:ac:
9d:25:f0:36:c1:b3:a8:c1:cf:be:e1:c1:99:28:ac:
31:d9:1e:5f:69:bd:e6:72:84:08:bd:e0:82:c5:d4:
f3:9e:35:c0:b7:f2:77:fd:84:6f:22:6f:2b:4e:41:
1a:c0:56:3c:87:96:97:38:bd:f0:d0:e9:10:de:64:
6c:59:0d:3d:a3:5b:3b:71:59:f8:36:c4:14:f3:63:
75:ca:f6:64:4d:c7:42:ca:9e:c0:b1:1a:d8:81:2d:
5a:97:98:bf:e4:13:7a:5e:a0:06:71:27:76:e0:5a:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:54:62:98:F4:74:DF:D1:08:6A:E0:BB:5C:32:B4:4D:31:E7:43:62
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d8:ff:e2:e4:25:70:0c:ad:d8:e4:9c:74:e4:cf:eb:94:f6:
34:ac:b9:79:1e:8e:b7:53:7d:77:62:75:8a:0e:8f:b5:7e:50:
06:ae:4d:6d:96:26:3d:51:c9:d1:3d:db:76:00:35:f9:b5:38:
67:ff:b2:9a:fa:97:f8:cc:90:f9:e7:d7:4f:6b:06:a9:f6:9f:
d9:7f:30:1f:b9:2b:3c:3d:9c:47:e4:2b:82:b5:17:69:1b:a2:
f9:d6:0f:a6:53:1a:72:f1:6d:b8:01:52:47:8c:27:51:20:c4:
30:9d:6d:70:62:4e:c6:19:e9:ef:a9:05:dd:5a:72:8e:b5:42:
f8:f4:25:7c:4d:07:20:06:71:5e:0e:38:f0:d5:86:18:d2:5c:
90:ef:2e:04:3b:1a:f9:ef:ce:d7:37:d3:ac:0f:18:b7:5a:c4:
e7:93:83:56:65:02:cb:eb:4c:ed:93:0a:51:a4:b5:3c:e4:52:
16:7d:ff:15:87:0c:98:78:5b:9e:6f:12:96:21:a9:1d:bb:2e:
bb:40:55:7e:aa:38:49:68:7c:64:90:fa:54:b7:05:39:51:18:
84:2f:47:c3:1d:b1:61:b0:c5:2b:16:3c:74:ff:85:01:2b:db:
36:75:b7:b9:77:6b:4f:10:8b:eb:fb:0a:60:24:3f:26:85:16:
72:b2:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:10:38 2026 by rpki-client