Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: fPafI29LJzZhHiL2etlr3vCHgC/Aabb0varb1bTGd/w=
Subject key identifier: 46:40:17:32:07:D1:86:09:1B:2C:2A:22:96:65:AD:F5:A5:2E:15:FE
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019E2F9642213010B63544FF294573022801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 13A4
Signing time: Sat 16 May 2026 07:00:36 +0000
Manifest this update: Sat 16 May 2026 07:00:36 +0000
Manifest next update: Sun 17 May 2026 07:00:36 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: WqQgEQJm2XxAsXYwBpuqd4a5cXEeLZ0C3zMHjNGtrXA=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:42:21:30:10:b6:35:44:ff:29:45:73:02:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: May 16 07:00:36 2026 GMT
Not After : May 17 07:00:36 2026 GMT
Subject: CN=4640173207d186091b2c2a229665adf5a52e15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:70:29:61:51:47:af:0a:f2:72:b1:2c:32:7a:
00:74:98:3e:ca:13:0e:6f:11:32:5b:e3:03:23:7f:
19:df:11:c2:fa:eb:94:d7:00:04:ee:7d:41:28:59:
7f:3a:3d:8e:5e:a7:09:a4:8e:8b:85:5a:73:2e:9f:
97:9b:f7:65:8b:1a:1c:c5:f2:70:eb:e8:9f:a4:f6:
d4:f4:a6:64:e2:9c:20:c0:74:82:8b:ac:81:8e:59:
5a:a6:7c:e0:06:fb:11:20:f5:70:15:ff:3c:d9:4a:
3d:e1:bf:f0:96:ef:a1:9b:e3:60:4a:da:30:36:2b:
e2:83:cc:04:7c:e3:74:c1:13:46:97:e7:66:9a:9b:
e8:b3:61:c5:68:87:09:ae:dd:f0:b8:46:e8:08:dd:
73:40:2f:5c:43:b6:39:83:81:2d:fa:71:3b:2e:b9:
07:52:e0:88:e8:70:b1:65:90:3f:8d:d2:51:20:2b:
64:0f:59:f1:eb:5e:9e:9d:47:65:4a:1d:74:45:4e:
31:56:d7:a2:9c:34:de:4d:12:79:f4:38:8b:8f:9b:
53:c0:40:95:d5:2c:53:7b:99:44:b5:4e:81:06:3b:
e9:66:b8:46:a4:7d:ad:77:5f:9c:f7:2c:60:cf:4b:
b0:da:7a:13:d4:72:13:81:ef:d3:fd:c6:44:51:04:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:17:32:07:D1:86:09:1B:2C:2A:22:96:65:AD:F5:A5:2E:15:FE
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:62:7e:97:4e:a6:61:fd:d4:08:7a:69:11:7b:46:ab:dc:8c:
23:b3:72:45:00:03:f1:3b:85:58:31:ab:43:70:35:69:24:06:
0f:cf:64:bf:3f:e6:5a:39:e4:b9:8f:4d:2b:b5:33:70:ef:68:
b1:cb:e4:d0:44:ab:ac:2a:03:f8:2b:73:9c:41:4e:49:63:a1:
4f:91:e9:ec:2d:ab:df:ce:61:63:85:dd:e0:10:ca:89:07:18:
31:84:41:38:a6:c2:2a:9f:b2:f6:7e:eb:f3:d5:9d:6f:99:2a:
ca:f4:a0:29:be:d2:ee:cf:d5:a1:fe:07:66:1d:74:73:67:13:
5f:92:8d:ca:92:01:16:3e:cc:70:6e:61:bf:c0:f7:6a:98:5d:
af:7c:71:48:84:8d:d0:59:6c:cd:8e:27:ca:cb:73:08:c3:f5:
d4:08:05:16:b1:c2:1c:ef:88:2d:bc:6c:a5:36:b3:02:a3:0f:
d9:c6:7a:94:63:4a:14:03:05:fe:de:c7:77:06:fb:4b:36:06:
71:69:3b:01:9e:fb:b8:c1:e9:99:1f:18:9f:ea:58:cf:57:90:
a3:12:87:86:3b:e5:79:75:f8:f0:60:ca:97:be:d6:d9:78:3c:
f6:9d:bb:17:96:8b:87:56:ca:00:df:48:e4:bd:7c:c0:97:d2:
d2:42:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:33 2026 by rpki-client