Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: mTfpqIGn+9Lcq2ySBOrsljPm6UQC7SL975WyrE5LQ/Y=
Subject key identifier: 5B:05:6B:92:70:34:CF:A8:9B:87:B6:35:26:91:6A:D0:3D:04:C8:77
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019DCC3D68B21A52ABB8289C46E153BB3C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0C21
Signing time: Mon 27 Apr 2026 00:01:09 +0000
Manifest this update: Mon 27 Apr 2026 00:01:09 +0000
Manifest next update: Tue 28 Apr 2026 00:01:09 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: P6T8O+lBdPq1w8e9NzuTUXD8voynQzs9JDxfCopxWaU=)
2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:68:b2:1a:52:ab:b8:28:9c:46:e1:53:bb:3c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Apr 27 00:01:09 2026 GMT
Not After : Apr 28 00:01:09 2026 GMT
Subject: CN=5b056b927034cfa89b87b63526916ad03d04c877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:88:e0:96:68:e7:f6:ed:37:67:85:c7:bf:b5:
09:07:65:45:14:b9:6d:7b:a3:d9:93:5d:ac:5b:98:
95:af:7a:4a:47:06:c9:a4:b9:91:90:ec:8d:2c:2f:
c6:fc:5f:78:33:77:86:9e:24:45:4e:fd:86:75:ec:
62:b0:6d:ac:25:d5:85:7d:6b:7f:6e:1e:29:83:0f:
a7:5b:6e:c7:b9:d2:f7:0b:ce:e2:2d:5b:c7:c0:3d:
c6:ec:62:d1:ff:7a:f4:8c:77:90:a2:4c:d1:2b:75:
e3:29:d5:9d:62:5b:10:df:47:a8:c0:1a:78:b3:a9:
3e:d8:ac:86:9a:5c:c1:d4:8e:aa:7b:be:72:c5:ba:
a2:a0:9c:79:45:53:96:4b:11:ab:f7:b9:c4:b6:81:
98:98:3c:d8:00:8d:13:e6:dc:a4:9d:24:7f:19:6d:
ce:1d:b6:20:99:84:76:1b:6f:50:f8:7d:db:90:29:
c9:f0:12:13:91:78:94:3c:aa:72:bd:e3:99:02:88:
d1:92:20:53:29:cd:1b:8b:d2:11:59:13:8b:e9:5d:
41:a7:5e:3f:a8:ce:63:73:60:7f:9a:ac:31:c4:7f:
fc:d7:e3:2a:46:5d:c5:33:c0:f4:fd:49:8c:26:dd:
cb:38:54:2a:e4:c0:1d:04:2f:99:cc:d0:7a:8f:6b:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:6B:92:70:34:CF:A8:9B:87:B6:35:26:91:6A:D0:3D:04:C8:77
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:c4:2c:d2:82:e7:6c:b5:b2:0d:71:ee:45:3b:de:bc:15:
73:c5:67:b1:15:91:66:59:7c:a4:de:06:cb:14:dc:e7:b4:90:
68:21:45:06:2d:7b:45:9f:04:54:e8:36:d7:99:fe:11:1a:db:
d8:97:0e:c3:2e:d4:f7:30:46:46:2a:91:86:45:85:d0:0a:59:
2a:08:11:50:06:22:f3:5c:a3:89:27:d5:ca:0c:7e:66:34:9c:
05:0c:6f:6a:c7:9a:0b:00:30:2d:17:3a:3b:d0:08:6d:9a:98:
a8:da:22:80:aa:b6:27:eb:b3:3e:85:25:86:72:4d:dc:0c:0d:
4e:69:71:dd:2d:64:ab:1e:4f:00:0d:d4:a7:77:88:3a:16:97:
0b:68:85:59:f8:7e:f5:97:0d:95:79:27:2f:7e:35:b0:d8:9c:
d7:41:36:f4:33:b0:d9:37:60:09:cf:fd:0d:19:f2:2b:03:ac:
f5:66:c1:d5:9e:13:db:5e:01:8f:92:cc:89:90:84:69:f4:fa:
1e:f1:61:8e:0c:a7:f3:2d:06:05:8b:76:1a:f9:57:4d:3b:f4:
9f:e1:bb:8a:2c:37:78:19:39:13:3e:0a:2c:0b:7b:78:b6:de:
05:03:2b:7c:d8:a6:96:7f:ab:ef:f9:db:53:12:ee:ae:cb:38:
61:0e:3a:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MPWiyGlKruCicRuFTuzx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj
YjRmMmIwHhcNMjYwNDI3MDAwMTA5WhcNMjYwNDI4MDAwMTA5WjAzMTEwLwYDVQQD
Eyg1YjA1NmI5MjcwMzRjZmE4OWI4N2I2MzUyNjkxNmFkMDNkMDRjODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ojglmjn9u03Z4XHv7UJB2VFFLlt
e6PZk12sW5iVr3pKRwbJpLmRkOyNLC/G/F94M3eGniRFTv2GdexisG2sJdWFfWt/
bh4pgw+nW27HudL3C87iLVvHwD3G7GLR/3r0jHeQokzRK3XjKdWdYlsQ30eowBp4
s6k+2KyGmlzB1I6qe75yxbqioJx5RVOWSxGr97nEtoGYmDzYAI0T5tyknSR/GW3O
HbYgmYR2G29Q+H3bkCnJ8BITkXiUPKpyveOZAojRkiBTKc0bi9IRWROL6V1Bp14/
qM5jc2B/mqwxxH/81+MqRl3FM8D0/UmMJt3LOFQq5MAdBC+ZzNB6j2sNrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsFa5JwNM+om4e2NSaRatA9BMh3MB8GA1UdIwQY
MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt
Zjc1MzFhMmI2MjQ3LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3
LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPjELNKC
52y1sg1x7kU73rwVc8VnsRWRZll8pN4GyxTc57SQaCFFBi17RZ8EVOg215n+ERrb
2JcOwy7U9zBGRiqRhkWF0ApZKggRUAYi81yjiSfVygx+ZjScBQxvaseaCwAwLRc6
O9AIbZqYqNoigKq2J+uzPoUlhnJN3AwNTmlx3S1kqx5PAA3Up3eIOhaXC2iFWfh+
9ZcNlXknL341sNic10E29DOw2TdgCc/9DRnyKwOs9WbB1Z4T214Bj5LMiZCEafT6
HvFhjgyn8y0GBYt2GvlXTTv0n+G7iiw3eBk5Ez4KLAt7eLbeBQMrfNimln+r7/nb
UxLurss4YQ463A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:23 2026 by rpki-client