Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: Djw5fF+EB5wwB2RRenztHdUGpP1x/UgRSG/x8etgois=
Subject key identifier: F2:00:6F:49:D7:BC:38:83:4B:BE:EB:D1:E6:A3:5B:B7:2B:C2:EE:AE
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019D382EB3E44355B4994C1B1335B2B0FB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:01:17 +0000
Manifest this update: Sun 29 Mar 2026 06:01:17 +0000
Manifest next update: Mon 30 Mar 2026 06:01:17 +0000
Files and hashes: 1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: 2FGFMgBAymJGIvWe8GffSPuJkaLcLDqkyLtzEtIGh64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:b3:e4:43:55:b4:99:4c:1b:13:35:b2:b0:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Mar 29 06:01:17 2026 GMT
Not After : Mar 30 06:01:17 2026 GMT
Subject: CN=f2006f49d7bc38834bbeebd1e6a35bb72bc2eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c5:6a:45:41:eb:5d:db:df:1f:a8:bb:7d:0c:
a0:24:b2:75:85:5e:13:28:02:85:ef:57:93:e7:dc:
14:5a:fd:ec:81:60:5a:af:02:28:16:7a:15:84:b7:
44:29:f9:7c:a1:60:ac:ea:d3:cd:cf:f7:5b:1d:96:
e1:24:41:a9:62:d5:d3:75:56:34:e8:79:bc:2b:7d:
1b:d5:2d:fb:f1:41:76:27:7f:c3:6e:76:18:d6:b6:
77:68:95:78:00:6b:bb:f3:13:a9:5c:a1:d8:de:e3:
74:62:d7:a8:a0:87:6c:63:b5:c8:24:70:1b:65:15:
4b:13:58:40:39:d6:dc:f6:a9:f5:a8:3b:b3:69:86:
04:1d:a2:be:74:75:24:65:c2:ee:33:12:50:16:26:
09:ab:1f:e4:3b:60:ea:e2:81:fd:bc:f0:d4:d5:5d:
3c:f9:b6:04:2c:2d:98:8a:36:8f:4a:f7:72:4a:af:
ad:39:4f:db:17:15:94:a0:8b:9c:b5:41:aa:70:4a:
3d:17:d6:df:0e:90:f4:71:0b:74:d9:cd:e6:4a:12:
74:d0:59:83:34:b3:59:10:29:00:ba:f3:b9:61:d9:
f1:2c:b4:bb:df:99:4e:a3:8c:65:c5:6d:c9:a2:7e:
b7:19:e5:99:57:4f:20:5b:e9:aa:92:0a:b7:15:c1:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:00:6F:49:D7:BC:38:83:4B:BE:EB:D1:E6:A3:5B:B7:2B:C2:EE:AE
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f9:2a:2a:85:7d:df:f2:2c:a9:d5:66:24:c3:07:06:e7:25:
5e:69:58:c1:e0:86:dd:0d:30:e8:0a:62:7d:36:a6:ad:06:96:
45:34:f4:45:0e:79:d3:4a:8c:de:62:2e:50:54:b0:be:85:e3:
9c:57:ac:56:c4:00:72:f2:81:c0:4e:1c:e1:33:91:51:37:6a:
f1:ad:f6:c7:ec:3b:82:5c:74:72:4a:a2:55:39:0e:e6:90:b9:
0c:b2:fb:36:55:af:be:2c:8d:26:37:e7:55:a1:ce:59:22:ed:
9f:a8:91:09:9a:70:25:ba:af:7e:77:28:56:43:45:4f:8d:01:
23:62:ec:c6:2a:6b:b0:15:e2:51:68:0a:cc:77:a7:91:fe:4e:
43:da:5c:c2:41:d2:f3:5b:1f:e5:c3:4a:b8:f1:30:ce:c7:2c:
7a:4f:32:76:3b:80:98:c7:7f:bc:c7:8e:61:35:1f:42:9d:c2:
06:7e:cf:17:10:e6:a8:20:e2:dc:d7:c6:4e:26:fe:53:40:30:
97:08:36:f1:a9:2b:b3:a8:3b:f4:21:2f:77:e9:59:d1:25:e6:
66:4e:63:ab:9c:25:54:10:76:1c:4b:9f:36:09:d5:2e:da:a8:
d2:9c:95:8d:f6:9c:82:53:a2:d3:9b:0c:09:61:21:d0:19:a5:
9a:81:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:04 2026 by rpki-client