
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
File: B45GPzbEf3arfBlqf17dTxvtpkI.mft (raw, json)
Hash identifier: t6oKYWn05zGSMPeUF5qg3f5CAMTkicB6qok1Kh12KsM=
Subject key identifier: 43:59:5F:63:35:C2:6F:3E:02:FB:66:A1:88:01:1E:AD:A0:8A:71:6B
Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Certificate serial: 019D382E6879636C67E4A31F299CE8D6E62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
Manifest number: 018F
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: B45GPzbEf3arfBlqf17dTxvtpkI.crl (hash: 31M/Hr93WdhN59gXJCJwbn6GWELZ0w4mhBKJ5E8ktB4=)
2: HCc-JQq_ncyyMZgwbPkScWYwYoA.roa (hash: tO96nEVj3QmKqJSTcBkgQB4nSdHREh8qiZML40xBMz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:68:79:63:6c:67:e4:a3:1f:29:9c:e8:d6:e6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=43595f6335c26f3e02fb66a188011eada08a716b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:79:68:38:4c:9e:ea:d0:4c:9c:07:74:3b:
05:61:21:b8:da:c7:22:60:b2:f2:4f:47:ef:62:aa:
41:48:5b:96:69:b8:61:7f:f9:d3:28:f5:fa:61:68:
3a:4d:29:c5:fc:0c:41:79:7c:f9:d4:07:41:5f:3e:
1a:35:fd:d6:41:83:8a:fa:da:b2:11:58:c9:fc:55:
34:23:32:06:a1:11:52:bd:d2:c1:8a:78:48:67:9d:
8e:c7:e1:8a:e7:2e:c1:df:8e:80:9f:d9:6e:d9:98:
30:05:fa:31:fc:30:df:ec:46:18:93:42:2a:39:3a:
6b:d8:86:18:bb:ad:38:dc:75:48:f6:ab:a8:16:a3:
f9:6a:69:59:35:b9:8b:37:9e:6e:db:0d:07:59:6d:
2b:e8:79:c0:5f:ab:24:53:08:47:27:b2:b1:75:fc:
06:6b:ec:20:e5:f8:8a:18:0a:c0:3d:cd:d2:05:4c:
99:4e:64:c2:ba:6a:40:ec:07:5f:9a:41:1a:28:2f:
ab:7c:be:b8:43:a9:c6:a4:8d:d7:5c:ee:ee:2d:39:
12:2b:a0:77:7f:a8:19:a0:30:14:c1:15:df:3f:72:
cc:d1:be:5f:f7:81:16:d6:0c:4f:c7:ce:b4:6d:d9:
5c:a2:c6:a7:ce:52:61:dd:89:d1:bb:dc:be:6e:c3:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:5F:63:35:C2:6F:3E:02:FB:66:A1:88:01:1E:AD:A0:8A:71:6B
X509v3 Authority Key Identifier:
keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:19:c4:0d:0c:75:6c:7d:e2:0b:73:6c:98:ad:5d:21:89:be:
f5:25:e4:ae:d0:b4:e7:c8:c2:33:67:75:12:23:26:79:04:b5:
bb:7d:56:58:c4:7f:09:1c:5f:2a:57:49:64:e6:2e:d5:eb:59:
9c:b7:2f:d9:63:e3:ef:61:5c:2e:4e:96:df:7e:8d:8b:a0:54:
eb:f0:85:66:69:1b:46:03:af:1f:00:12:23:6c:ad:99:fd:57:
de:6e:2a:a8:c6:d1:44:dd:37:af:5e:1c:c7:e1:45:a8:83:c1:
27:e7:a2:61:b6:c2:e0:4b:65:89:32:3e:4c:be:1b:4e:ac:b0:
1f:0f:33:4d:00:ec:44:52:e9:a3:ee:69:3d:69:46:b8:e2:c0:
14:49:60:ac:bd:93:05:d9:e5:b1:25:29:f0:60:52:78:f4:bd:
63:25:e1:b4:7c:6b:ad:a3:43:bb:09:90:f5:4f:13:52:33:a3:
20:b3:53:ee:3c:f7:c6:2f:d0:71:1e:47:59:a3:9c:73:b6:c6:
10:96:07:6d:e2:8a:2f:06:81:07:51:56:d3:26:c4:35:e9:de:
e6:6a:a6:e2:2d:21:99:f0:87:66:5c:7e:17:55:1d:a1:2b:4f:
b0:10:e9:be:cc:fc:7f:e8:e8:c4:b6:6f:7f:9f:c1:e2:91:d2:
c0:42:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:43 2026 by rpki-client