Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: ybEr37pGUrRlXvEFXqNreFF0/tk0374VsaG1doj1cxM=
Subject key identifier: DB:0D:91:E5:06:51:4A:1B:37:55:06:ED:4C:29:E2:F8:0A:5D:A1:1F
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019FA18492C646AFE0B3ED61071AF420B587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0D14
Signing time: Mon 27 Jul 2026 03:00:47 +0000
Manifest this update: Mon 27 Jul 2026 03:00:47 +0000
Manifest next update: Tue 28 Jul 2026 03:00:47 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: bg0U58IrvwXS0SlOzUdcldXdNo2J5kXDxYVl5sAtYls=)
2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:92:c6:46:af:e0:b3:ed:61:07:1a:f4:20:b5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Jul 27 03:00:47 2026 GMT
Not After : Jul 28 03:00:47 2026 GMT
Subject: CN=db0d91e506514a1b375506ed4c29e2f80a5da11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8b:e0:ef:60:5d:82:22:44:fd:f7:94:1f:51:
b2:fa:a6:0c:47:90:43:4f:df:b7:90:8a:07:3b:68:
9d:78:3e:1a:19:54:4c:67:cd:e7:41:ab:97:37:d5:
8e:0b:f1:db:f1:56:4c:2d:e5:47:06:ae:18:01:a6:
80:a9:13:71:8f:b5:7c:7c:9b:18:67:15:54:31:81:
cd:dd:30:de:fc:75:6a:79:da:a0:e3:0c:6d:64:8b:
84:90:95:56:c5:ff:ef:5e:42:7c:3b:e5:5f:1a:49:
f4:81:bc:17:e1:ba:8b:86:dd:ab:74:ec:b4:9a:db:
5d:db:a0:ba:ed:66:19:f5:48:de:a6:51:45:b3:c2:
59:75:93:da:8e:c8:3c:6b:d7:07:ff:29:55:33:24:
25:a7:1c:8a:b4:1b:f1:a7:de:81:c9:77:32:c8:27:
90:1e:ea:69:02:f7:ad:13:66:58:07:66:7d:2a:85:
72:d0:b0:52:5e:ba:75:9e:74:f6:23:53:39:83:59:
bf:77:17:8c:4e:f7:a0:90:69:3a:94:79:cf:4a:e6:
ac:a8:ea:f5:62:c3:22:b0:3e:48:de:13:29:08:b4:
69:5d:23:45:98:f6:1c:69:97:c3:b2:a8:0f:4f:ab:
a9:7d:85:ba:4f:47:e2:5f:54:94:e6:86:9d:5e:57:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0D:91:E5:06:51:4A:1B:37:55:06:ED:4C:29:E2:F8:0A:5D:A1:1F
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:dc:96:e4:5e:6f:56:50:93:fb:f9:79:87:18:f8:07:55:89:
a0:2e:4b:cb:cb:a6:ef:4d:4e:be:b0:39:6c:63:e5:c1:87:68:
57:7d:80:cb:b1:c5:62:14:33:45:30:08:ff:27:f3:18:db:59:
a1:26:dc:58:78:de:f4:26:da:9c:fc:eb:d5:c5:e2:7a:1a:7d:
5b:10:b9:23:21:6f:5b:e1:00:34:c1:1f:9b:3f:35:02:a5:e8:
6c:25:1c:a3:4d:e8:40:50:c8:15:80:dc:cb:60:af:a9:a1:44:
26:e8:fb:3f:11:b2:a3:13:61:cf:2c:bb:d0:12:c3:1e:2f:69:
e0:16:2f:dd:88:f4:df:dc:99:2d:37:3d:c9:86:1c:49:89:47:
d2:fc:24:14:92:c9:a6:a1:e0:f3:b8:c1:eb:36:9a:10:0c:6e:
df:29:fa:5e:f2:e6:fb:96:0b:34:5f:ce:80:2c:fc:24:cb:03:
1e:6b:02:94:90:c3:cc:91:98:8c:58:35:42:24:86:18:de:20:
0c:a6:49:d9:dd:53:37:66:13:22:ff:fb:84:42:2e:4c:49:fb:
e3:5f:b4:be:5b:7f:f6:2a:17:11:1c:c4:29:4e:9b:07:43:86:
a2:2e:54:f2:2b:c0:26:1a:c2:47:0e:2a:4e:b9:7c:76:60:ba:
9d:7c:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:49 2026 by rpki-client