Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier: 1vKkfE7hLiZOlVaCZCImPJkAxBYhKNseArSEjce1ccA=
Subject key identifier: A2:E3:5E:BC:08:59:14:EE:9E:62:B2:BF:BF:3E:3C:91:0F:BC:76:EB
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 01A1133C1BCE2EE2D36A4152C974F76735C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number: 04AA
Signing time: Tue 06 Oct 2026 22:01:08 +0000
Manifest this update: Tue 06 Oct 2026 22:01:08 +0000
Manifest next update: Wed 07 Oct 2026 22:01:08 +0000
Files and hashes: 1: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: NIpMl1EqAELZscLO1xbh+D1eaHP2gaY83Tku/fSCjVI=)
2: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (hash: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:1b:ce:2e:e2:d3:6a:41:52:c9:74:f7:67:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Oct 6 22:01:08 2026 GMT
Not After : Oct 7 22:01:08 2026 GMT
Subject: CN=a2e35ebc085914ee9e62b2bfbf3e3c910fbc76eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:6a:5a:aa:8e:19:bb:5a:0b:8a:24:a2:cd:
e7:fe:6d:0e:c0:44:b8:82:02:4d:b6:2e:bc:f5:39:
54:e6:ed:9a:b1:35:9f:2d:b9:fd:12:17:23:40:36:
1c:7b:fc:e4:4f:aa:3d:65:75:6c:69:94:49:95:38:
a5:37:e0:d2:b1:05:91:b1:cf:c0:06:3a:a5:1f:c5:
fc:e0:23:ba:ea:3a:f6:9b:9d:54:a2:f3:e6:99:d3:
0a:ee:4e:25:5f:58:04:65:e4:d9:60:2a:8c:79:94:
7e:8e:46:b0:6b:29:05:4e:64:20:4b:58:be:0f:80:
51:f5:a0:ac:a8:20:e6:50:f9:7c:a9:d5:26:48:5b:
5d:ba:5e:91:59:7e:0d:56:ad:a9:98:ed:eb:0f:90:
76:79:8e:02:c7:d4:62:57:57:ee:52:a7:3f:a2:dd:
b9:7d:e2:6c:f8:7e:fc:c8:82:69:71:ba:0b:6a:64:
4a:fa:00:26:d5:43:53:19:a3:48:e8:8e:8b:67:25:
68:25:59:c0:69:0d:ae:2c:e4:cd:fa:2d:ac:f3:21:
dd:ac:64:6b:7d:63:bf:15:04:a5:0b:80:26:3b:1e:
9a:a8:68:02:72:d2:55:bd:65:78:7e:93:18:ce:94:
0c:99:72:6a:d6:d1:99:03:4f:00:4a:10:f2:a5:91:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E3:5E:BC:08:59:14:EE:9E:62:B2:BF:BF:3E:3C:91:0F:BC:76:EB
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:51:43:36:54:01:a6:11:8a:d8:a2:90:4e:02:3e:a6:df:5c:
66:8f:1d:ee:b4:44:d4:8b:ad:e5:a6:6b:d6:79:a9:88:28:c5:
b4:74:22:fd:91:5b:8b:83:8f:c8:a8:f5:32:32:6e:f3:ea:5e:
ee:b9:b6:86:93:c5:6c:43:bf:c6:76:61:29:7d:f6:25:68:4d:
be:39:1c:c3:14:3e:7f:03:88:ca:d4:a3:29:98:63:09:fc:0b:
45:1a:36:1f:1c:ff:6e:f1:d8:9a:f4:16:a9:7d:a5:59:ba:9e:
b0:71:41:4f:eb:22:bb:0e:21:f4:d1:8b:30:8d:4e:82:df:a4:
35:20:ce:ae:8d:fd:a0:51:96:18:30:a3:6f:51:ff:24:81:0c:
c0:31:04:60:49:bc:a2:07:42:bb:5c:42:35:b3:0c:0f:a4:12:
53:81:a9:c3:47:07:9d:81:53:90:0c:dd:87:1b:71:50:c0:4d:
11:0b:11:a4:f9:f3:94:e8:96:ab:db:cd:06:9d:20:e0:89:cc:
b0:a7:08:1a:1a:68:a4:32:d2:8e:6e:2b:42:e2:65:5d:ca:c1:
1b:ba:cb:27:ac:26:cd:b6:a8:94:8e:90:b0:b4:28:03:51:2d:
f4:b1:3d:b5:08:03:36:7c:c1:38:08:f9:ed:f5:e9:58:73:4d:
15:d2:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:02:20 2026 by rpki-client