Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: h5X7M9fFktTxxBr+Qthhi3tDgfwmjG38J3aogbBnuHI=
Subject key identifier: EB:D1:18:74:01:14:1E:77:5D:28:D1:BE:BE:79:F2:FE:D8:28:F6:86
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019D37890C95348B0CC5B5E4C1C478528500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: DqEq5WgmtCraZJaj1M8pHRnsSCWOae+zCmkEoWYCiVQ=)
2: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (hash: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0c:95:34:8b:0c:c5:b5:e4:c1:c4:78:52:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=ebd1187401141e775d28d1bebe79f2fed828f686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:bf:b5:56:8e:78:cd:d9:25:fc:5b:98:48:
07:38:a0:14:3b:3c:c8:65:06:61:84:15:de:e2:04:
7c:70:a4:cc:95:78:ca:7e:fe:1d:4e:c3:36:92:ea:
8b:e6:18:16:34:e2:25:e8:0c:1d:a6:ea:bc:85:0b:
96:9f:f1:62:31:99:f8:29:10:c7:5f:31:54:c3:5a:
e1:cc:bf:85:f7:a2:d4:4b:e7:40:2b:79:df:ae:ec:
77:4e:ab:97:b1:dd:a2:6f:bf:48:89:6a:bb:43:01:
bf:f2:69:2f:8f:11:2a:02:31:f2:6a:02:19:c1:5b:
f3:35:e0:3f:f8:80:dc:aa:09:6b:be:22:d4:87:98:
38:38:5f:36:ec:41:c5:eb:97:6e:4a:34:81:7d:7c:
c3:1f:df:b1:16:b5:a7:85:78:b7:7f:26:ae:28:c9:
a4:fa:08:5a:96:c4:56:7b:9a:d8:d7:94:a7:2e:40:
9a:01:ca:77:42:fa:a0:7e:67:f4:a7:fc:17:0a:8d:
68:e7:0d:54:5c:f9:e4:af:da:62:24:82:85:20:90:
f0:ae:e9:75:1c:fd:65:e1:37:78:52:af:63:0c:bf:
91:f7:1a:93:09:7e:a9:b9:5a:28:70:e4:ad:c6:ae:
3a:06:3b:3a:19:e9:9e:75:10:b1:58:76:f0:6d:cb:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:18:74:01:14:1E:77:5D:28:D1:BE:BE:79:F2:FE:D8:28:F6:86
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:79:c1:f2:5b:62:50:13:d5:9c:a0:2a:46:f7:00:f7:68:29:
c6:e9:d1:53:d4:36:26:1d:d3:97:f8:98:94:4a:e9:41:44:f1:
99:0d:ae:7a:c5:e5:9f:b9:e3:c9:0c:e5:0a:5f:61:07:58:7d:
6c:6e:10:94:a3:aa:26:6d:b2:d3:65:60:fd:29:61:83:0f:66:
c1:fe:02:53:14:c1:df:76:d7:05:62:f1:3d:41:b1:0b:82:a8:
e5:2a:c0:d7:25:40:ef:12:e1:9b:bf:a9:d4:5a:c5:c7:68:82:
8f:ed:d0:03:8a:1a:65:d3:23:c8:f0:69:89:de:c2:61:ae:92:
70:09:ee:d7:58:e9:75:84:32:3f:4f:aa:2b:ab:9f:f5:2e:28:
08:65:a8:81:f6:0f:ad:60:dc:01:a7:02:95:26:45:92:a8:7e:
d6:28:9d:9a:dc:b0:08:98:a6:dd:9b:cd:0c:d6:3f:05:72:62:
8d:4c:4c:06:ec:8d:13:1a:56:d2:3c:75:9f:13:5e:6d:18:26:
14:cd:09:e4:ad:99:44:f3:cb:62:d6:fe:f1:7c:6e:81:b4:b5:
3f:97:42:55:18:1f:4b:01:84:af:e8:87:f2:24:2d:41:c9:41:
2e:ec:ee:18:19:5a:e8:7d:e9:d9:21:3f:bb:f0:fe:e1:bd:f2:
2e:a6:a8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:36 2026 by rpki-client