
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: hB/LTMOvk/HoSJD8XWwjMemYoOJBMUNfNrH+Xty6x+I=
Subject key identifier: 23:95:A3:82:9A:2B:EF:1D:33:92:72:F8:0A:F8:36:89:8F:B0:08:0C
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 01A001012F913AD99ED144CEF17BF6A85D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 1495
Signing time: Fri 14 Aug 2026 16:00:49 +0000
Manifest this update: Fri 14 Aug 2026 16:00:49 +0000
Manifest next update: Sat 15 Aug 2026 16:00:49 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: mhjW+ZOpCuh5A3sbbJRWwMbeAXJu2qd64QS02kEfh2c=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:2f:91:3a:d9:9e:d1:44:ce:f1:7b:f6:a8:5d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Aug 14 16:00:49 2026 GMT
Not After : Aug 15 16:00:49 2026 GMT
Subject: CN=2395a3829a2bef1d339272f80af836898fb0080c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:56:4d:c9:d9:c6:af:b7:1c:60:e6:b7:79:86:
2d:05:5d:c7:9d:8c:c3:c8:ae:08:4b:10:9d:e2:04:
16:17:16:8b:e0:78:f0:51:83:09:46:de:22:9e:aa:
71:5b:5f:1d:54:f1:a0:cb:f3:23:e3:e4:fa:04:7c:
2b:e9:92:b2:d5:1c:25:5c:73:fa:3d:04:01:14:f3:
46:71:d6:f1:1f:82:f8:55:43:a7:6a:5a:a3:8f:af:
64:a5:80:06:b3:b0:f2:10:e0:25:a7:1d:08:6e:b2:
be:63:cc:55:11:c0:d3:d8:60:b6:ab:6e:94:12:81:
fb:dc:8d:2e:79:f3:14:68:43:9c:ca:7f:97:fd:45:
02:de:5e:6f:c6:67:5f:85:2b:af:39:e8:0d:7a:7a:
06:aa:a5:53:e6:dd:bc:91:6e:d5:ff:2c:9d:80:a8:
13:e9:5f:0b:48:64:85:05:f4:55:31:b4:ae:3d:6c:
ed:02:e7:31:17:18:96:99:d3:bd:9e:76:58:dd:63:
09:2d:26:ef:f6:44:a9:e9:17:63:41:79:32:b4:e8:
cb:39:c0:a3:d1:d1:c5:a1:69:6f:fb:a9:41:63:cb:
25:77:b1:a5:c7:17:3b:9d:f9:9a:1b:50:dc:b3:7c:
5b:93:1f:45:b5:4b:24:db:90:ed:bc:e3:9c:63:da:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:A3:82:9A:2B:EF:1D:33:92:72:F8:0A:F8:36:89:8F:B0:08:0C
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ed:07:27:6f:35:84:6c:09:4b:6c:be:dd:f7:c4:f5:55:bf:
a5:83:df:b0:20:e6:b6:dc:02:ab:0b:7a:40:63:e6:37:2e:52:
95:29:b4:6c:90:0a:62:e5:a3:d6:67:db:da:b8:97:c1:f7:18:
2e:cc:09:b5:19:85:36:38:97:b9:1d:ba:59:78:57:96:7d:0a:
53:76:98:de:14:94:63:1f:30:32:3a:fc:5d:33:5e:6b:65:f3:
56:81:6d:6e:97:18:23:01:dd:a0:1a:33:8a:13:36:d7:d6:f2:
42:a9:11:ec:71:23:97:7c:aa:be:f7:91:45:1b:38:21:17:85:
fe:02:c0:81:4e:5b:4e:82:ef:72:0b:4c:b6:4f:a7:2b:4a:ff:
9c:80:4c:60:c1:35:6a:30:39:16:43:b3:d0:31:3d:cc:4b:10:
9d:e4:13:f8:93:25:5a:1c:2d:dc:34:16:6a:39:60:82:46:75:
e3:c3:ce:7c:68:c6:f5:7b:0c:af:fb:29:27:ed:ec:c0:38:5f:
78:17:f3:22:6d:ce:a7:20:b8:cc:7c:86:c3:de:1c:c2:7b:b2:
56:14:2b:a8:d1:62:5b:b3:a3:a9:84:25:05:99:61:2a:6a:cd:
9a:6f:8a:23:db:ec:14:b0:53:7c:d6:18:c5:c5:cc:b1:27:0d:
49:b6:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:10 2026 by rpki-client