Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: toNaASJDaotGLakED3EJVUf4J49tuyQ7GL/sygwn+BA=
Subject key identifier: 25:31:EF:DC:7B:E6:FB:45:F5:BF:29:30:CE:5C:C8:7B:3B:A3:48:29
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 01A0005C66531F710E4A2F24B8D4C423768E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 13:00:50 +0000
Manifest this update: Fri 14 Aug 2026 13:00:50 +0000
Manifest next update: Sat 15 Aug 2026 13:00:50 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: y1AL8IOfT+v8xzkqrmGYwGdDWGBB3k35PrJ3ft5Yduc=)
2: KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa (hash: xsj6ZBhPayD1o1vBeEH4YfY+jj4U4fktOZ+HokJunGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:66:53:1f:71:0e:4a:2f:24:b8:d4:c4:23:76:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Aug 14 13:00:50 2026 GMT
Not After : Aug 15 13:00:50 2026 GMT
Subject: CN=2531efdc7be6fb45f5bf2930ce5cc87b3ba34829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:ca:32:09:24:cc:24:4f:df:fc:5c:a7:03:
cb:eb:54:b9:98:f9:19:3b:3b:07:e2:14:af:74:ff:
55:9b:7e:66:1c:44:da:86:c1:c8:fd:28:04:cf:fc:
7b:bb:e2:38:75:8a:93:6c:a9:be:c0:15:99:37:f2:
43:e1:1f:05:ba:6b:47:41:68:0a:d7:e7:9a:f3:8b:
c9:5c:bc:72:8c:3a:95:87:b3:08:32:68:06:7d:0d:
81:46:24:cf:3a:48:e2:4b:6a:0c:d1:9f:34:98:57:
1d:6c:3d:f3:85:b8:dd:f5:21:c6:26:db:59:2f:1f:
22:85:0f:d0:ab:93:06:78:b5:af:77:d1:4b:6b:6f:
8a:cc:b1:83:3e:dc:50:cf:74:fb:ec:81:eb:a6:a4:
5c:aa:3c:6c:7f:0e:a0:e3:d8:43:8a:9d:dc:df:c7:
ec:25:2b:1b:6a:c8:2a:63:fa:9a:7a:b8:52:a6:53:
6d:c0:97:a3:43:dd:f2:31:ae:fc:bb:56:3d:f5:60:
ce:b7:89:43:a0:7b:03:68:e5:01:77:06:a1:53:18:
93:06:3e:65:01:31:bd:f6:ad:c5:cf:d2:65:a5:6b:
55:25:d9:e7:b0:6e:f0:2d:1c:61:25:f9:7a:d2:0e:
4b:0a:55:54:3f:a2:c3:0c:b4:6b:1a:42:20:52:a5:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:EF:DC:7B:E6:FB:45:F5:BF:29:30:CE:5C:C8:7B:3B:A3:48:29
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0d:d3:41:2a:5c:77:01:6c:04:a9:54:88:ed:9e:ed:d7:49:
db:ce:0f:97:f8:8e:f2:9f:b4:23:aa:a6:1c:78:f5:18:96:60:
d2:81:52:d2:a5:da:2f:55:51:c6:d1:d7:2d:4e:9e:4c:21:41:
8c:ad:f6:81:f2:5f:a2:ce:73:34:06:be:3f:74:24:6f:e6:8e:
3f:c0:59:13:00:af:71:b2:fe:96:35:0b:41:e8:8f:1e:71:70:
e5:2e:5b:59:4a:ea:f5:5c:81:1e:16:8b:88:32:e8:ac:17:92:
13:e3:93:52:c5:c3:92:6f:75:15:ce:d6:e0:f1:75:ef:b8:14:
d9:2b:44:47:9d:71:2b:99:d8:20:01:5d:96:ba:b7:4a:7b:85:
89:1a:73:1e:ec:a5:7d:99:83:ee:91:5f:25:97:59:f6:92:2b:
5a:69:3e:b2:62:54:69:be:7f:bb:a6:4c:3b:7d:dc:37:aa:7a:
ad:72:1a:3e:81:54:2a:6f:69:65:4f:83:8a:f2:b3:e8:64:2f:
65:2e:9b:05:e9:ca:0d:59:8f:75:76:d2:60:36:f2:77:ee:40:
ab:40:67:3f:b6:85:f0:b8:7e:06:91:13:05:00:8c:cb:04:8e:
c9:27:8b:73:a9:43:ff:66:ef:e6:a6:f1:20:6a:59:d1:ea:2f:
ab:30:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:22 2026 by rpki-client