Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: XyX71VdoJ4qlgP0hinnEbB93lu+4/fxK5CAIsmjpEX0=
Subject key identifier: 1B:BE:06:9A:30:2F:DD:AE:E4:FB:9D:38:CB:22:D0:19:A8:E9:60:A3
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019D36ADAB8CA8AD7E8CFF4272F7C2E0ACF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1891
Signing time: Sat 28 Mar 2026 23:00:44 +0000
Manifest this update: Sat 28 Mar 2026 23:00:44 +0000
Manifest next update: Sun 29 Mar 2026 23:00:44 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: KiemGsbLfFe8DMIoES1nquEI+fpKWdKR9OJeBGm8WBg=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:ad:ab:8c:a8:ad:7e:8c:ff:42:72:f7:c2:e0:ac:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Mar 28 23:00:44 2026 GMT
Not After : Mar 29 23:00:44 2026 GMT
Subject: CN=1bbe069a302fddaee4fb9d38cb22d019a8e960a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:86:8e:26:91:ad:2a:a1:4a:0e:d5:a9:1c:
1f:31:ca:3e:42:e0:41:2a:27:da:7d:7b:e4:c6:18:
ef:3f:50:e7:03:c6:9c:bb:0f:08:a4:41:0c:68:03:
7c:b3:1d:1e:9c:e7:02:dd:e8:b5:d0:cc:14:b5:bf:
71:e9:c2:98:9d:23:6d:a3:71:66:ff:8e:72:ee:26:
6c:74:9a:d5:ac:b5:61:81:42:1e:6f:73:ba:08:9d:
c7:22:f0:3d:5f:9a:49:c8:72:d2:4a:8d:50:dc:e2:
d4:3d:29:3b:c2:d1:80:d4:ad:f9:91:16:5e:b1:31:
fb:1a:16:41:a6:b5:cd:a8:fa:77:7e:db:04:f0:ae:
a1:41:4b:fc:2e:21:84:f2:12:22:e3:e4:6d:c1:24:
cf:5c:a2:b5:6c:8e:60:c0:a2:d8:9f:8f:73:20:3e:
f9:cb:c8:1a:e4:df:cc:4e:55:87:06:67:e3:4c:91:
b3:45:7f:87:a3:b4:77:7f:45:9d:ad:99:c6:a0:eb:
61:62:f0:86:6b:d3:74:3b:e0:eb:8a:57:82:12:e8:
78:f2:4e:bb:cb:de:cf:34:90:29:23:c8:aa:73:0b:
51:bd:cc:cc:c6:4d:16:80:d9:67:77:2d:a0:a8:05:
f3:79:fa:dc:a9:99:c8:8a:fd:f9:e7:3a:5c:78:c2:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BE:06:9A:30:2F:DD:AE:E4:FB:9D:38:CB:22:D0:19:A8:E9:60:A3
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:68:a9:e8:eb:c1:d1:b0:6f:cd:30:33:63:2f:12:99:51:
8e:ca:78:cf:c9:0c:13:44:ad:fd:c8:be:f5:87:8d:fb:60:0a:
45:08:96:3c:05:90:df:f1:c3:b0:6d:a2:24:14:99:9e:9b:3e:
64:7b:66:1e:35:ff:e0:c0:a6:a1:45:04:c3:da:e8:38:7e:84:
55:76:eb:c8:76:7c:4b:d0:30:2c:63:aa:2a:36:e0:65:be:8e:
a7:e1:70:0d:cf:1d:ce:af:f0:3b:5a:36:42:98:4c:63:48:93:
b8:a8:bc:03:94:00:cb:de:55:eb:43:9b:3e:04:cf:25:58:52:
54:3c:61:7f:5a:b8:2b:00:c8:00:22:e7:e3:8a:d7:f9:3f:59:
ee:92:94:7f:32:e9:33:4b:e2:cd:12:64:75:ec:33:ca:07:7a:
13:69:a7:f8:62:25:1e:a6:ba:3a:a2:cf:3b:9b:c4:c6:9a:5d:
0a:6c:30:20:fe:75:f8:c5:99:41:ad:61:8f:ca:f2:48:b8:77:
d9:1b:06:51:74:79:10:66:1e:65:49:c2:94:20:78:ae:31:98:
cb:4c:1a:7c:a0:5a:3a:68:e5:76:bf:01:fd:d4:90:9b:3a:15:
e3:eb:a1:86:2f:3c:2d:58:83:6f:cb:2d:82:f3:55:ba:48:c1:
d0:2b:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 08:55:20 2026 by rpki-client