Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: 3tzFR9D7fZgdoDD5woS8Sxrg+qSfN1lyDUUoTG1y1n0=
Subject key identifier: DA:CC:50:F6:98:EB:69:1E:CA:2D:A9:ED:B7:5C:97:C3:81:FC:0B:03
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 019DCD4FAAA6F13C91FB5847EF87B5796900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 05:00:43 +0000
Manifest this update: Mon 27 Apr 2026 05:00:43 +0000
Manifest next update: Tue 28 Apr 2026 05:00:43 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: GRH3Tktp09KvZi8/zYG9NhL/Lv3j0yXeXlN3c63UpNk=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:aa:a6:f1:3c:91:fb:58:47:ef:87:b5:79:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Apr 27 05:00:43 2026 GMT
Not After : Apr 28 05:00:43 2026 GMT
Subject: CN=dacc50f698eb691eca2da9edb75c97c381fc0b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:06:ea:7f:7d:18:52:3f:6a:b0:bc:a1:39:
d1:22:b0:79:ea:22:1f:27:63:a6:93:ea:dc:be:72:
c0:4a:62:0f:b1:1c:1d:c9:d2:51:2b:dd:54:29:3f:
69:7f:cc:a5:f4:4f:d1:f0:33:a2:16:cc:ef:1b:b2:
b9:40:3a:d7:fc:47:71:f8:3a:19:c5:cd:6a:03:28:
0b:99:55:64:6b:ad:5e:1e:5c:47:e7:67:f4:9b:92:
e7:a8:d4:c6:07:12:2b:b6:74:99:eb:27:56:89:f6:
88:e2:bc:c3:5d:ae:29:96:4b:d2:5b:0b:e3:28:32:
9f:e6:8b:ee:8e:50:e4:e6:c3:67:9f:fb:0d:8d:04:
19:3a:ca:af:b8:b1:cd:0d:b7:44:28:5f:36:a5:9c:
f0:fc:3a:1e:16:86:35:44:6b:66:bf:c8:3d:18:57:
b2:b9:e5:2c:a2:5b:d8:c5:6a:31:88:6e:28:98:ab:
1a:5d:bb:0b:11:17:05:be:5d:cc:fd:ff:71:9a:df:
20:0e:29:64:a9:0d:a3:8f:bc:0e:1a:10:fd:31:62:
c5:5c:88:0c:04:57:cf:72:98:83:38:d7:ee:48:9e:
1e:c5:23:1e:43:bb:50:3b:68:fc:25:07:a5:b7:a3:
6b:09:2b:cd:db:1d:49:3c:0a:2b:70:fa:cf:81:18:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:50:F6:98:EB:69:1E:CA:2D:A9:ED:B7:5C:97:C3:81:FC:0B:03
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2d:9b:74:d0:5d:d6:c9:16:a7:20:c0:60:82:66:07:6b:ad:
6f:07:95:37:53:5e:75:7f:84:e2:f5:ff:7b:1f:51:db:7f:84:
b9:a6:08:6f:ff:fb:a1:c8:c4:84:a7:c0:84:83:7a:9a:03:98:
4d:f4:7b:77:02:13:6e:1d:82:b2:b9:d5:cd:5a:a8:0a:f6:a9:
81:54:3f:43:55:a6:c3:78:b9:df:64:e0:22:5b:b6:83:c6:b8:
52:23:51:60:ad:c6:e0:55:aa:30:18:cb:22:b5:ee:c6:9a:22:
3f:c8:22:ae:1c:54:80:b7:0e:66:52:5d:ed:54:e6:ee:8d:a2:
fa:68:1a:43:98:73:90:bb:ed:7d:c7:c1:a4:2f:21:1c:8d:a5:
26:e3:c2:4f:eb:75:f9:64:e5:1d:cd:5f:d1:dc:d9:f0:7b:7a:
cc:41:97:15:db:ae:7e:0d:85:63:03:77:ed:59:23:21:a0:d8:
66:62:11:d5:d9:8e:35:58:32:ea:bd:cf:3a:d3:34:f1:f2:dd:
93:d6:59:a8:96:62:e8:b7:f5:ea:88:ff:f5:06:1c:da:9b:80:
4e:ef:a9:e6:58:4a:cf:5e:04:5a:9c:94:c4:1e:de:a6:02:37:
20:8a:c6:2c:78:7f:09:d5:94:d7:99:f9:1c:0a:d5:b4:a4:8c:
52:fc:b2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:34 2026 by rpki-client