Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: cgo496Kr3YuJcze2wMJIqaSv3bxTP+qTZd/t9lEJiN0=
Subject key identifier: CD:2E:61:F6:45:74:61:95:08:52:01:DA:B2:CC:82:A5:CE:6C:3F:49
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 019D37C0C9C86207A79F2DBF84E0065750CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: dc+nDPfuNXNgB8VJXr+xUXUPUfSSFMGzxpom+GL/0e4=)
2: KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa (hash: xsj6ZBhPayD1o1vBeEH4YfY+jj4U4fktOZ+HokJunGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c9:c8:62:07:a7:9f:2d:bf:84:e0:06:57:50:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=cd2e61f645746195085201dab2cc82a5ce6c3f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8e:5e:5f:9f:6e:1d:9c:66:b8:f7:02:45:1c:
67:7a:a7:72:ce:bf:12:75:f9:94:16:eb:2e:c0:b0:
00:0d:8a:a5:95:6a:07:be:04:3d:c9:dc:6d:9d:70:
97:af:ef:50:04:59:6d:11:ad:a6:ee:f6:9b:ff:e3:
be:21:c8:17:15:3e:73:f6:18:40:1e:c6:af:91:77:
c7:8a:c1:e1:c8:0e:31:8d:2f:c7:56:54:e0:b6:ae:
35:99:d2:c8:60:6f:9b:b6:7f:a4:49:9a:e1:e7:1f:
e8:06:6c:7a:db:8e:52:fa:d3:14:f9:62:63:05:38:
e4:e0:de:15:9b:d7:74:a5:f7:7e:25:d5:d1:3f:74:
01:1e:0d:67:53:31:1b:e8:fb:c6:98:3d:67:ec:96:
89:a1:b7:c9:c5:43:f6:aa:4f:72:5a:dd:c1:eb:6d:
38:92:52:49:23:ec:28:08:de:33:58:3f:11:da:6d:
0f:47:fb:95:68:cb:9d:60:e6:9a:2a:f8:a8:c0:67:
70:74:ca:fd:45:d0:aa:96:f8:34:71:24:6a:4a:6f:
0f:8f:17:fe:6b:47:8d:60:37:73:7d:c1:65:4b:c2:
c7:b2:9a:fd:14:31:81:6a:63:84:0a:3d:26:cf:e5:
22:21:09:a1:8a:be:61:b4:f6:26:6b:49:8e:79:5c:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:61:F6:45:74:61:95:08:52:01:DA:B2:CC:82:A5:CE:6C:3F:49
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:89:60:1c:cf:dc:3c:0f:cb:c5:90:b4:48:e1:4b:4b:78:b6:
c9:4b:86:9b:38:b5:aa:2b:2d:aa:a7:a8:c8:2a:4f:30:26:13:
9c:72:55:68:29:1c:68:99:f2:0e:c4:f8:42:d6:0f:21:81:fd:
6a:5b:2c:d8:fe:66:c6:ef:4f:55:ce:a2:82:10:5e:e8:45:ca:
4c:e9:b6:f3:f3:a5:d9:51:fe:ec:dd:25:56:38:67:18:75:f3:
ab:2c:7c:b7:5d:b3:9b:39:13:83:f9:4f:d5:88:12:39:0f:59:
db:08:b5:46:2a:67:71:e3:0c:6f:bd:77:a4:bf:01:01:f7:10:
f5:fc:8c:43:a7:24:7d:b2:d4:ec:b0:08:88:4e:76:72:56:92:
08:f1:1c:97:39:39:7c:c0:ff:5c:73:78:e3:bc:e8:25:38:c3:
76:0c:9a:ca:47:af:59:ff:f8:55:15:9b:7b:ce:02:7f:5e:7f:
66:b4:06:95:f3:15:ed:e3:0c:40:dd:87:19:a2:ca:42:0c:8e:
41:a5:b7:30:1a:ac:72:9e:c7:a2:52:cf:69:a4:2d:53:51:6b:
37:6e:76:11:ea:86:cb:65:4f:81:58:2a:be:7f:3c:f3:73:9e:
99:78:1f:3b:43:5b:bd:07:dc:2c:de:a3:8a:56:57:67:12:81:
bd:c8:36:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:47 2026 by rpki-client