Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: Lygjpqu4FSaHeoYsRnEuUiJQzIBRCsVET1cyzzU1m6M=
Subject key identifier: 6D:AA:D0:2B:BB:75:4D:51:A8:52:23:A6:D3:7F:08:66:E6:7A:B0:8F
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 01A175F02223F3B7BB763AC72BB5E9804DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 02:00:33 +0000
Manifest this update: Mon 26 Oct 2026 02:00:33 +0000
Manifest next update: Tue 27 Oct 2026 02:00:33 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: lbcUwPHj+IVJKN0dMHxnbfJpI6hQ099hoSE/DXzB7aY=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:22:23:f3:b7:bb:76:3a:c7:2b:b5:e9:80:4d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Oct 26 02:00:33 2026 GMT
Not After : Oct 27 02:00:33 2026 GMT
Subject: CN=6daad02bbb754d51a85223a6d37f0866e67ab08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:92:6d:26:4f:dd:03:96:45:ee:99:f8:d5:
e8:47:61:ee:39:f5:39:c2:f3:1c:0e:d6:a6:95:4d:
f3:a3:45:17:91:c1:96:3d:2e:47:4c:81:d0:62:da:
5c:82:a9:74:3b:ab:f7:f9:4d:79:be:ea:d2:e0:fa:
f3:50:93:c3:fc:b5:ee:36:d1:43:c3:85:19:c8:b7:
93:85:66:cb:a4:1d:55:54:2f:fe:25:e5:5a:23:ca:
16:a8:8e:ca:d6:bb:30:7f:51:8b:f4:1d:ce:05:41:
cd:aa:ed:f8:3e:67:d2:2c:02:b0:a3:c0:65:38:a8:
6d:80:12:ea:a6:d8:a4:e2:b9:07:89:a3:79:a7:1a:
bd:c1:b0:bb:8b:78:2f:f7:f3:0e:9b:35:e2:37:02:
41:f9:10:b6:13:6a:f5:61:90:7a:16:f5:a3:11:0b:
1d:95:a8:e2:1a:3c:34:82:88:21:48:33:7a:fd:a5:
34:88:db:7a:c2:d2:35:80:b3:7f:ae:20:76:f2:b8:
0d:68:8d:66:41:e0:66:c6:aa:07:2b:a2:6c:85:16:
08:8c:34:17:c8:c9:a1:3f:60:11:86:80:8d:1d:a5:
77:3f:35:cb:e5:f1:19:09:85:a3:16:93:04:1c:1c:
90:5b:34:30:9b:ee:9c:22:0c:a0:0c:c4:9b:f9:eb:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AA:D0:2B:BB:75:4D:51:A8:52:23:A6:D3:7F:08:66:E6:7A:B0:8F
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:55:f7:d2:c3:ef:c0:47:94:97:06:64:58:05:be:f1:78:e8:
e3:52:94:0b:51:50:48:10:a5:a5:be:53:58:80:74:48:07:b0:
8b:ec:12:ff:5b:fc:3c:8a:4a:51:00:9f:43:28:37:9b:7f:a1:
53:8e:47:0c:73:12:db:4f:30:fd:2d:de:12:0c:8f:15:07:d1:
fb:7c:36:0f:a6:19:f2:31:97:cd:02:70:9d:be:1d:ba:73:7b:
98:91:fa:89:4e:6b:ac:c5:bf:da:b5:b4:5d:fa:2a:63:ea:a8:
73:e7:53:be:70:13:8a:d1:51:a7:ea:2b:3f:82:8a:91:51:12:
ae:f7:b9:80:04:43:c3:d7:37:55:f8:78:6a:aa:85:91:b2:92:
63:83:fd:14:d4:8e:86:34:8d:9c:38:15:a8:99:fa:b3:a2:ef:
e2:af:84:60:a5:3c:1d:6c:bc:6c:48:15:63:23:fe:0b:1a:b9:
d3:81:52:60:84:57:fa:5c:35:9b:08:87:e5:e1:f7:68:c9:ed:
84:c5:54:f7:9b:34:13:1e:db:6e:75:0d:c0:dc:33:a1:23:ed:
24:09:86:77:55:22:f1:4e:79:6e:01:9e:77:09:77:df:3d:2d:
8f:ba:ae:e8:9e:6a:99:0e:ad:a6:c5:c6:62:a0:9f:a2:5c:e1:
cd:61:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:34:23 2026 by rpki-client