Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: e4B1BGoCUSAuhxWj8wCuspN7xrKuOhz4wW1gJ5YTOxg=
Subject key identifier: 42:A3:37:01:48:40:09:23:E8:DA:C6:DE:9C:A5:34:9A:67:49:DE:11
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019E314E91F245D5E39BF1C713960D12F8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 15:01:33 +0000
Manifest this update: Sat 16 May 2026 15:01:33 +0000
Manifest next update: Sun 17 May 2026 15:01:33 +0000
Files and hashes: 1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: lGahdvy1lvLxnLRWmmjmpQMq1nIaFB+p6f/OyP3NWYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:91:f2:45:d5:e3:9b:f1:c7:13:96:0d:12:f8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: May 16 15:01:33 2026 GMT
Not After : May 17 15:01:33 2026 GMT
Subject: CN=42a3370148400923e8dac6de9ca5349a6749de11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:73:d5:f2:11:7a:c1:1d:59:a4:df:60:5b:
3b:56:44:1a:d4:f5:b2:03:9b:c1:b6:ac:64:81:05:
c5:39:1d:2f:3b:a8:c1:20:2d:0e:92:9c:bf:d8:69:
ee:60:ac:20:cf:90:f4:14:51:b0:35:ff:e8:65:68:
3d:19:88:02:3f:d4:fa:fb:e4:69:21:59:8c:a2:71:
6e:c6:40:96:9f:81:71:bb:85:ed:14:7d:b3:d7:8b:
8f:92:e6:92:67:b1:5f:f1:f4:c7:98:f5:55:8f:fa:
cc:0f:4a:b5:26:0e:f2:bf:50:bd:a0:9c:f3:42:9e:
f0:5d:28:a2:bd:5e:0b:06:83:98:5a:c4:b2:ae:65:
67:25:2b:1e:fc:f1:fd:dc:f6:d3:18:4d:f2:f1:7f:
3d:aa:c2:27:9d:a9:c3:e9:ad:98:97:09:79:b1:55:
8e:53:9f:61:ae:bd:b5:4c:28:39:3e:e1:ba:35:4e:
b5:d0:53:6a:d3:f0:9f:37:2c:40:bb:ff:65:e7:36:
07:18:a7:1a:67:7f:7f:b6:b6:b5:34:ad:d8:8a:44:
5e:c0:81:74:b4:e8:ef:bf:83:ab:c8:92:da:2f:d9:
a1:1b:ee:c3:95:3c:be:db:cb:17:71:d7:8f:6f:d8:
bd:a9:91:f4:ea:e3:77:8b:91:b1:72:ea:09:2b:47:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:37:01:48:40:09:23:E8:DA:C6:DE:9C:A5:34:9A:67:49:DE:11
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e8:40:12:cf:e4:45:d1:6c:63:0c:1e:63:91:f1:68:54:79:
26:8f:c7:64:6f:60:a1:22:12:83:18:85:46:17:44:0a:fd:6d:
2b:bc:da:69:4e:06:4b:c8:a5:c3:ef:dc:c5:a2:81:66:82:f4:
6f:2f:7d:a7:bc:d8:3d:cd:08:3f:95:76:1a:0d:24:34:67:80:
c2:69:d3:6d:83:34:44:85:42:75:c9:a9:37:ca:68:9e:3b:38:
4b:c5:c6:3b:49:d9:43:87:b2:cb:64:8d:a1:6e:ea:6d:b1:b4:
58:9e:72:41:0b:c3:45:d3:0b:d5:8e:87:db:55:51:38:e6:66:
39:45:e8:08:2f:d3:c0:91:31:0b:fa:9b:45:6e:5c:54:96:b7:
b5:04:a2:2a:8b:02:cf:88:36:1d:91:5c:4c:81:54:e3:fa:0a:
cf:7a:d7:0d:03:c5:e1:76:9e:59:7c:40:e7:a9:78:78:95:4b:
da:b6:c1:8a:0a:e6:e4:d0:07:88:da:2e:b2:cc:7e:5d:4c:38:
0e:89:7c:84:e2:60:b7:2c:d4:27:fb:d8:1f:d7:f9:7f:85:b1:
26:5c:e7:d5:13:46:51:b2:4b:e8:ce:48:1c:dc:db:03:f4:7b:
e7:ae:bb:37:aa:18:e7:e4:6c:1f:43:cf:0b:78:47:e7:f7:f3:
a1:3e:2c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:10 2026 by rpki-client