Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: G9I4saHvR8K4SvbtdgX/UOzlxA6k0KaGHCEBeo1wfic=
Subject key identifier: E1:BF:C2:F0:38:CA:78:B3:DB:95:2A:A1:85:B7:8B:48:58:30:6A:8F
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019D3866546A819E7D53D4B4C325D52DFC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 1324
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: g7lhM5fuUvrSKrXWHl8zwv2UHJ3lttBWEMLf04/hH1Y=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:54:6a:81:9e:7d:53:d4:b4:c3:25:d5:2d:fc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=e1bfc2f038ca78b3db952aa185b78b4858306a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:80:16:5a:60:ca:66:2b:c3:af:83:4b:82:
bb:be:f1:16:f3:50:ef:35:09:86:91:f6:bc:c4:9a:
0b:01:44:3d:e5:bd:75:4f:73:ad:00:6d:ae:a9:01:
bd:db:99:dd:79:e3:8e:7e:0a:4b:dc:f6:7b:bc:9d:
7f:3f:e8:f1:76:33:55:d7:96:3e:32:57:b1:12:dd:
59:77:f2:7a:6d:72:03:59:06:e6:ae:59:e0:c7:c0:
e4:75:46:4e:3e:00:15:8e:19:f5:db:22:64:4b:3a:
01:59:e7:f5:59:c3:a8:23:23:de:7b:d7:fe:22:bf:
15:ef:88:e6:3a:0a:db:fa:49:73:2c:b3:d0:2e:b5:
09:62:59:9f:3f:02:9a:c4:97:2d:4e:8d:55:8c:c9:
48:d8:8b:55:80:b9:45:d3:48:1c:12:ad:07:58:1b:
0a:2f:d3:cc:a2:76:6c:47:c0:b2:b4:4a:5a:5e:47:
e1:a0:81:35:39:fb:7f:f8:a5:9f:d7:e3:6c:82:e9:
20:63:e7:21:63:6b:df:ac:2c:02:7c:3a:ae:f2:64:
aa:69:ca:82:f6:02:a2:65:1b:e3:e3:49:25:48:e7:
e3:08:ba:09:53:5d:60:f6:67:1f:58:2d:be:d6:45:
d5:d5:05:cf:c5:40:b0:7e:93:a8:ce:02:e2:e0:74:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BF:C2:F0:38:CA:78:B3:DB:95:2A:A1:85:B7:8B:48:58:30:6A:8F
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:74:a4:e9:02:08:92:2b:5d:e8:d0:eb:2e:6e:0e:a8:67:3d:
8c:e7:9b:40:1b:16:4e:c3:76:73:00:6f:96:f4:82:c2:63:b8:
40:4a:34:35:63:00:18:3c:7b:aa:95:ba:88:bc:1d:60:37:1f:
c1:07:95:11:04:fe:e8:5f:6f:58:e0:7a:b0:83:97:29:31:c9:
90:92:35:ae:d4:8b:4a:b2:19:88:b0:a1:8d:cc:e0:62:b6:76:
39:ea:64:63:65:a3:bf:da:1e:31:90:79:40:58:1a:40:fe:24:
97:8d:8a:86:2f:bf:08:18:ad:2b:a9:db:2f:89:54:88:40:16:
53:40:ac:5b:65:b3:bd:3b:1b:93:40:7b:6d:a8:ca:bc:30:56:
f6:b3:0a:99:67:4f:d8:c4:e9:0c:4d:42:ea:8a:dc:19:3b:dd:
3f:07:2b:b3:de:1f:f4:37:08:76:94:4a:8a:3d:22:d2:8d:4a:
42:e2:9b:2b:5a:b5:97:51:0b:7a:38:3f:59:db:7f:c8:06:36:
67:ac:ee:79:c9:e8:25:6c:fb:b3:df:bb:db:ed:8e:8a:47:5e:
d4:e6:a7:a1:b8:1b:94:c9:22:40:00:59:1e:57:9c:7c:98:d5:
95:59:fa:15:56:b4:b0:92:14:06:b6:48:34:7b:80:12:3f:19:
39:9c:5c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:52 2026 by rpki-client