Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File: B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier: q3RyKgPuT2IUd2J2UFDesM0eNwnB+K2MyvgKv2xDovw=
Subject key identifier: CA:23:C0:64:C3:21:37:10:62:57:09:97:7B:42:CC:2E:17:50:C8:48
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 019FA0A8DA726EE73AD2EF9770B5353FF80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number: 19D2
Signing time: Sun 26 Jul 2026 23:00:47 +0000
Manifest this update: Sun 26 Jul 2026 23:00:47 +0000
Manifest next update: Mon 27 Jul 2026 23:00:47 +0000
Files and hashes: 1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: nuE6SBS6+HBYaXZWVQ9ZNMzv/3PNbMmtSQHKhnyWkYA=)
3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
8: q3xB1TlmhDj055zlvy4aiXlZXlk.roa (hash: 3L2aJ4MWJ0YKmWL4+Damuuwr/sJjzRrBG+ZnvYerwp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:da:72:6e:e7:3a:d2:ef:97:70:b5:35:3f:f8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Jul 26 23:00:47 2026 GMT
Not After : Jul 27 23:00:47 2026 GMT
Subject: CN=ca23c064c3213710625709977b42cc2e1750c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a7:7c:08:2c:11:61:6e:7a:b5:71:e4:6d:95:
a4:9c:1e:68:53:92:d9:de:65:06:5d:50:84:32:56:
b9:df:7c:7c:4e:75:2c:f2:b9:1c:5a:bd:e6:46:f1:
5b:b4:c8:0e:c7:bd:69:6e:90:1f:cf:4f:33:ed:9e:
b5:d8:a3:24:bb:65:13:c7:78:d6:32:f6:f8:5a:10:
7a:0f:94:61:3b:e6:3e:4b:b0:2d:1c:5c:9b:58:e8:
25:fa:05:e3:70:21:81:73:64:d8:46:8a:4a:0d:2b:
66:49:41:5d:e2:65:d1:44:94:ae:49:39:f0:ea:69:
4b:f9:3e:4b:5a:0b:ac:bc:e3:ea:af:9f:c3:d1:cd:
fa:c2:2d:3f:60:e5:95:8c:de:72:ec:58:93:07:b5:
b2:87:14:c9:b6:23:70:56:d2:a8:7c:cd:77:4d:18:
3c:59:81:ff:ea:28:6e:3a:cf:9d:51:c7:47:8a:6b:
13:a9:0c:a0:81:69:60:5d:d0:34:0c:de:6e:e2:61:
50:ab:8f:0d:91:62:23:6f:1a:79:fe:0f:9c:ff:54:
83:f7:ac:55:9f:8b:11:26:b1:9d:a5:34:ff:b1:a3:
bb:0f:d0:bb:37:f1:3c:0a:e8:f0:87:42:3b:39:60:
25:ad:d4:27:a6:59:ec:d2:cd:e0:35:35:27:db:8b:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:23:C0:64:C3:21:37:10:62:57:09:97:7B:42:CC:2E:17:50:C8:48
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1b:cf:3e:68:61:20:94:70:4d:5c:54:02:e2:d1:f7:05:bc:
42:5c:92:79:ff:2c:86:e0:b2:2e:79:89:91:53:f6:7b:cf:d3:
ae:ea:a7:81:f1:94:2a:4b:1c:89:48:1f:04:55:d2:e7:d2:b0:
e6:bc:17:2c:15:b8:93:3f:81:82:c3:47:d9:1b:fc:08:f6:fc:
7b:b8:42:87:40:ad:07:a3:00:db:5d:98:1f:73:2a:35:14:da:
30:09:e9:cd:3e:de:80:93:0a:6f:54:22:74:88:b8:70:70:c3:
0f:98:c8:96:a5:dd:22:71:0d:53:0e:eb:85:ae:4c:1c:ce:03:
d8:61:38:cf:9a:0c:95:6a:06:2c:79:56:c4:c5:ec:00:89:6d:
d0:58:a5:8e:99:25:8a:f2:cb:d7:a4:61:08:59:92:fc:8e:05:
c5:56:4c:f2:db:64:48:93:c8:04:d3:36:4b:35:f0:c2:49:ad:
7b:90:23:cc:5f:a3:12:0c:f9:f7:5f:ce:e8:27:1f:b6:a3:d0:
9d:19:ac:48:5b:48:36:0e:20:ed:4f:f9:6c:65:1c:4b:40:16:
eb:9d:c5:09:ab:f9:b4:a2:f9:75:e8:33:75:4e:f8:a1:4c:41:
9e:84:90:5e:76:93:be:be:d3:98:5f:23:0c:00:12:b0:c8:00:
38:fc:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:02:41 2026 by rpki-client