Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: 9FuVkvtXCxHfvs9HZstJqgIiTV8+wTlOa/AcPpc8b5A=
Subject key identifier: 4F:D0:7E:9E:46:4E:CE:AB:4A:CD:36:3D:61:63:BC:68:59:2F:C8:4D
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 019D382EA0347629455D705AA2DD845A18D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 0B1F
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: 1z2nisseP5L3CROyJ3LkDISwyZv1sXbDOt4dcp5ACYs=)
2: lm3OTOwIvXSXM9pioR3a9JAWpbo.roa (hash: jQABbYTjEwoFiegPBkd7R4azYt9ZrDtGw7Anzr3WHlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a0:34:76:29:45:5d:70:5a:a2:dd:84:5a:18:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=4fd07e9e464eceab4acd363d6163bc68592fc84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:5a:90:f4:f6:3a:ea:55:01:51:8e:c2:03:
56:7c:20:8d:5c:88:1b:db:18:a8:92:0e:72:e5:1c:
b6:96:26:03:00:e4:c0:d2:d1:3e:c7:3d:7b:f0:c0:
d8:d3:4f:7b:b6:87:ec:83:f6:2e:98:9d:7b:3e:05:
22:22:c4:97:ec:5b:a7:7d:bb:c7:0f:a1:d8:b3:53:
5b:e5:9e:2d:55:37:50:fa:40:98:db:de:c9:9e:cc:
16:7b:b3:64:5b:86:63:56:ec:e2:8a:f8:92:ef:6d:
8c:61:fb:7b:7e:96:3c:49:5c:f2:3f:09:20:c4:93:
22:ec:f9:e9:15:a2:ba:dc:2e:2a:f5:6d:27:ea:00:
02:5e:b3:f8:08:b6:90:12:60:6f:f3:cb:4d:e6:80:
8f:33:75:f5:39:f8:5c:4c:e6:86:f6:2e:a1:51:b4:
51:d0:2b:24:d9:d4:7d:22:91:dd:1c:57:c2:00:e8:
60:a6:0d:4a:bf:68:29:b4:72:50:11:46:8d:d0:8f:
5d:c2:7b:ac:09:68:90:64:d1:9d:ed:50:a1:fb:34:
72:c7:20:35:13:3b:4a:f2:d8:e7:91:7d:2b:4e:06:
c5:00:4a:84:e7:1e:f2:68:fc:c8:19:fc:70:05:d1:
ba:b6:fc:9b:be:3b:38:d1:aa:21:04:09:05:a0:6e:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:7E:9E:46:4E:CE:AB:4A:CD:36:3D:61:63:BC:68:59:2F:C8:4D
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:fc:c2:70:58:e1:93:a6:c4:64:a8:dd:a4:08:23:ef:0d:
da:63:03:80:b6:6b:30:df:ea:e4:10:e8:30:92:1d:c7:5b:17:
59:6d:37:06:f7:37:54:68:98:d2:23:e9:4d:26:12:72:8f:e4:
4a:c0:71:8f:13:71:dd:2a:03:1c:b9:e6:75:a1:44:0c:8e:d8:
61:f3:c7:67:a7:b6:8a:f1:af:b3:31:fd:c3:e0:e7:14:30:30:
4b:5a:4f:a0:60:b5:2f:3b:ab:af:96:a0:1e:e2:8a:2b:c6:43:
60:21:40:08:56:f3:96:25:fe:ac:86:60:47:8a:07:43:c1:88:
e4:65:2f:c2:0a:39:54:1c:e2:ce:cd:bb:fa:57:c5:e1:91:2e:
a5:c3:e3:fd:41:07:b7:75:60:75:e9:fa:70:b2:04:be:33:5d:
2a:d4:ae:b4:50:18:b5:c5:a6:ea:55:38:eb:58:b5:cf:b1:46:
c8:65:df:5b:a7:c2:b3:bd:dd:20:7f:d0:78:f8:e7:30:95:39:
29:df:fe:07:a5:66:3f:17:6b:aa:81:cf:78:93:0d:8d:0e:17:
f8:f1:a5:a7:ad:b8:43:0c:03:a0:7a:43:46:19:69:c5:63:a8:
4b:63:11:28:ec:73:17:7b:66:33:1d:ed:59:03:8f:1d:6e:f3:
dd:24:b9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:09 2026 by rpki-client