Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: L1qiviPaj24W3lv8hz3xGy/mEVXUK9aSt1dxGUFA0wI=
Subject key identifier: DF:6D:07:71:9E:92:40:9F:39:31:D1:A2:2F:97:26:8D:E1:C1:A7:6F
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 01A000255795DD0D19E72041DA13315B6441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 12:00:42 +0000
Manifest this update: Fri 14 Aug 2026 12:00:42 +0000
Manifest next update: Sat 15 Aug 2026 12:00:42 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: yd7nWG9Y3ipIpvqok8wqq9Q4T+EQOQJ/jxG+sdYWuV8=)
2: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (hash: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:57:95:dd:0d:19:e7:20:41:da:13:31:5b:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Aug 14 12:00:42 2026 GMT
Not After : Aug 15 12:00:42 2026 GMT
Subject: CN=df6d07719e92409f3931d1a22f97268de1c1a76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:77:94:d5:de:2f:ee:e3:dc:df:a7:d7:df:
05:06:04:98:01:08:be:ea:e9:f0:b5:83:1b:52:bf:
72:98:7c:22:5c:48:15:62:e7:68:c3:30:fd:77:9d:
48:e5:4c:8b:28:a3:06:28:a9:80:4f:b8:02:66:d5:
75:4d:2c:27:ce:d6:b0:ef:50:91:ba:99:83:2b:f9:
1e:fe:a7:78:1a:a8:27:21:f4:54:84:3a:37:bf:af:
37:d2:55:f6:a2:21:c8:00:9a:81:27:2e:38:43:38:
f5:d9:c5:cd:7c:da:6b:17:73:f9:91:53:b3:cf:d9:
90:4e:fd:54:a9:0b:6e:1d:a6:06:cf:af:9c:2c:9e:
2d:66:2b:13:3e:6d:f2:53:29:20:09:00:7f:76:f0:
11:e2:94:3e:8d:08:f0:f7:cd:04:96:06:b6:96:5e:
86:54:bb:14:44:83:ae:f7:d2:29:c6:34:c8:ab:b2:
93:60:b2:ae:df:97:46:d8:13:f1:49:2a:a8:33:9c:
76:3b:4e:29:15:f0:fd:44:22:e1:3b:f0:94:8c:ce:
e4:e1:2a:a0:df:3c:c2:95:03:27:b5:86:7f:4b:0a:
66:9b:8c:c2:80:3f:fb:f2:a4:9d:df:48:fa:b7:cc:
61:11:5a:7a:6d:ee:70:e3:40:6e:8d:26:43:81:62:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6D:07:71:9E:92:40:9F:39:31:D1:A2:2F:97:26:8D:E1:C1:A7:6F
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f4:8c:f1:a3:c0:df:1a:76:0e:5e:02:86:1e:fc:ef:41:70:
2d:73:fb:fd:1d:2b:ef:4e:4e:76:11:6d:e4:3a:4f:a7:34:2e:
10:31:18:16:96:e6:c9:83:f8:d7:8c:fb:a6:14:ab:39:25:3b:
38:3c:39:09:09:db:12:1d:62:ac:3b:3b:a7:08:fc:27:08:2f:
67:98:bd:86:6f:9f:f0:60:5e:2d:53:47:36:e3:ea:a6:00:9c:
92:50:0f:c7:d1:d8:66:39:26:d9:ce:2a:42:23:ca:1f:0d:68:
12:0a:fb:f5:8a:aa:f3:73:29:81:03:09:be:ee:86:29:6a:bd:
e8:3a:40:77:f7:b4:fe:d5:2d:b7:ab:50:42:83:37:66:b3:57:
53:5a:be:15:09:11:3b:90:2d:e5:64:3a:db:33:a5:4e:2a:7e:
a4:dd:84:11:47:41:c0:01:3e:b3:e2:ad:f4:13:56:33:8f:d2:
e3:80:0e:b8:53:6a:c3:7c:21:49:5d:dc:16:c3:f2:c0:2d:1e:
34:21:b6:7f:5c:e9:db:44:9e:90:2a:48:07:5b:e2:ae:c7:1f:
99:45:ca:3c:90:fe:66:b3:f1:02:3d:3a:39:29:d1:21:e3:90:
07:70:3d:2c:40:4f:57:52:3a:50:24:15:7d:5b:61:20:fb:c2:
22:45:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:32 2026 by rpki-client