Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: 1lpXRhmEQiw/78AON1963d6BAAzI7aI9+QlhywRO53E=
Subject key identifier: 8C:EE:14:EA:72:08:A3:27:FF:31:0C:72:47:02:5D:7A:85:FA:2B:39
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 01A001383447974A93A97C3D62C09BF299D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 17:00:55 +0000
Manifest this update: Fri 14 Aug 2026 17:00:55 +0000
Manifest next update: Sat 15 Aug 2026 17:00:55 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: 4HfGM34ooA4q2/kvk5bI3gp/z5NEs/SVdG8uzVpQuug=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:34:47:97:4a:93:a9:7c:3d:62:c0:9b:f2:99:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Aug 14 17:00:55 2026 GMT
Not After : Aug 15 17:00:55 2026 GMT
Subject: CN=8cee14ea7208a327ff310c7247025d7a85fa2b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:9a:8f:de:9c:39:ba:81:1d:6d:44:03:c6:
db:b8:44:b7:0c:70:76:78:2d:cf:0b:a6:b6:49:f4:
5c:b5:05:83:83:42:21:b3:94:3d:77:cf:7a:3c:e2:
d0:7d:b6:1b:ac:c5:83:9c:eb:ae:5c:49:50:78:c4:
14:c8:5f:ab:8b:10:97:c4:b0:ee:0a:01:56:7c:d1:
93:e2:ca:ef:9a:31:f5:f3:50:3a:08:6c:2c:4a:4b:
fb:f9:88:fa:0b:75:da:e4:bf:32:cd:09:33:3e:48:
02:be:f2:94:84:ee:57:83:c0:b3:67:84:e5:85:a4:
1b:fe:9c:82:aa:6f:2a:12:02:54:d2:a6:65:e8:72:
02:98:fc:cd:3c:86:e6:9e:fd:18:13:59:ac:00:fd:
3b:8c:9b:e8:44:17:fc:f4:96:61:e6:20:27:da:5d:
56:bb:00:36:1d:a5:2e:28:a1:68:0e:de:fd:b0:21:
b3:8f:c5:97:0d:53:65:70:47:fb:c0:de:0a:27:57:
88:cb:91:e1:64:27:88:92:b1:63:78:c4:4d:f2:57:
a4:38:c0:b5:c0:22:fd:0d:98:f6:3d:b7:6b:cf:5c:
05:44:1f:0a:51:52:c0:b1:76:61:c7:1a:65:15:de:
05:73:b1:21:0b:26:56:fa:f8:f9:c0:83:37:a5:8e:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:14:EA:72:08:A3:27:FF:31:0C:72:47:02:5D:7A:85:FA:2B:39
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:6e:33:e9:fa:8c:70:ec:42:41:06:5f:7f:6c:de:d1:21:2e:
d1:ba:82:0e:2d:aa:13:c3:dc:24:10:24:e9:cc:e6:a1:eb:26:
75:f2:82:0f:f0:aa:32:80:31:e7:ce:d4:78:f6:a2:36:ee:32:
f1:38:7b:6b:5f:c8:c8:f5:f7:3f:54:65:9e:19:78:2f:14:32:
3b:f1:42:7e:07:3f:df:b5:ce:54:25:1e:65:41:18:05:bd:e0:
68:33:7d:b9:96:85:ee:08:1c:b0:d6:d9:cb:0c:eb:11:b9:e3:
58:35:b2:cd:dd:a5:a7:e4:24:64:27:a3:d1:be:2b:99:15:ca:
9a:dd:c7:c1:8b:4d:df:61:6b:51:ed:8a:35:9d:c1:d4:33:c6:
9a:2e:a6:29:9a:bc:7c:76:b6:c4:f5:2a:5e:f0:e2:42:cd:e7:
d7:ef:18:b0:9a:24:f1:f9:0f:71:1a:6a:48:52:72:f5:f5:5a:
5a:5f:77:35:d8:cb:95:91:12:28:d4:e7:c8:37:55:e7:4a:84:
cd:92:23:4a:4e:b6:69:a1:4d:d1:bb:ef:e9:e1:46:c8:e2:a6:
bb:28:15:bc:14:7f:16:c5:80:cd:de:55:c5:37:34:69:9e:79:
5a:42:7f:b9:b8:9e:c3:d8:45:51:fb:ee:dd:20:b3:85:7d:61:
90:7a:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:13 2026 by rpki-client