Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: w3OAsF2QzNYFkrC8vq8rbx9Ph6j3E0ENdVfDRUnJfsg=
Subject key identifier: 2A:C5:71:55:1F:F1:C4:CE:E9:B3:B0:E1:B2:8D:4C:EE:B1:2A:C6:AA
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 01A00281CA2593CA0D366C22ED0016D5162A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 23:00:55 +0000
Manifest this update: Fri 14 Aug 2026 23:00:55 +0000
Manifest next update: Sat 15 Aug 2026 23:00:55 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: iO39/U2rTbgLGBS4jLz/kXdS0SMEyGTdqs6lZdWZMtk=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:ca:25:93:ca:0d:36:6c:22:ed:00:16:d5:16:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Aug 14 23:00:55 2026 GMT
Not After : Aug 15 23:00:55 2026 GMT
Subject: CN=2ac571551ff1c4cee9b3b0e1b28d4ceeb12ac6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:d7:b5:16:cd:30:bb:68:31:7e:8c:53:0e:
72:ac:0a:93:c2:8a:c1:36:b3:89:3a:50:d0:84:39:
f3:56:43:14:3c:10:86:4e:c9:99:6a:af:03:19:a8:
79:45:2f:5c:54:94:8f:c5:6a:e0:22:bb:02:6c:50:
4b:2c:9a:a4:fd:b8:2d:4f:69:19:68:24:72:2a:04:
2b:eb:8c:4e:d1:ef:74:a4:79:23:bf:e3:65:8e:1d:
a9:f4:97:db:b4:c8:29:c1:15:6d:30:f5:79:c7:56:
04:a8:5f:35:79:35:f5:b4:75:7b:1d:df:3f:ed:d2:
39:61:40:ca:ef:9c:cd:6f:70:07:71:ae:8c:b2:f3:
53:7c:c6:68:a7:e3:9f:b4:55:57:08:6c:87:0c:b6:
11:5a:e1:8b:79:95:f0:7a:5a:af:cd:b5:b7:fb:44:
62:d9:1f:80:27:d7:8d:3c:04:73:c6:8a:0f:a3:d6:
49:60:fa:56:3d:1a:ae:97:f4:a3:d7:99:86:c4:80:
39:39:15:54:e8:42:48:46:5d:01:ae:46:88:91:9c:
f7:4a:0c:71:58:f9:32:f1:a7:50:0f:14:a2:30:a7:
63:b9:ba:26:2c:32:3b:6d:f3:30:95:93:2c:e3:67:
d4:7c:5f:d5:27:5b:7f:e1:c0:bb:fd:ea:7a:c7:8b:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:71:55:1F:F1:C4:CE:E9:B3:B0:E1:B2:8D:4C:EE:B1:2A:C6:AA
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c7:09:a2:e4:eb:f9:32:98:80:c9:6f:32:c0:c1:be:0a:17:
fc:85:6f:0f:18:bb:e1:d5:49:d2:17:46:e1:6b:22:ca:fb:5f:
9e:f0:70:95:a2:01:a6:b7:3a:0f:1b:8f:75:30:83:83:db:fc:
53:81:c8:97:79:6b:1a:f7:55:d8:82:2f:82:c0:2e:d0:19:5b:
9f:c3:b3:cd:42:9b:71:a4:52:66:68:42:40:12:3e:3e:0e:6d:
03:8d:70:8b:92:9d:00:24:c0:dd:25:7d:55:59:84:c9:5b:80:
47:1c:1c:f0:1f:f9:c9:bf:2e:00:31:da:f0:30:e9:99:3a:ed:
45:c3:0c:ac:e1:51:2a:06:22:68:dd:13:66:78:af:15:c8:e9:
4d:18:3e:a8:a7:81:7c:21:d6:ca:0b:dc:bc:95:d9:2e:90:f7:
d2:ea:b1:f6:da:c8:20:12:23:ab:6a:d6:e6:5f:a7:3e:fe:82:
c5:57:f8:cf:89:8a:ae:2e:90:77:18:7e:e3:da:60:ed:46:94:
bd:4e:57:62:74:06:92:9e:14:4c:bc:03:54:6c:94:79:33:99:
e9:11:f0:ee:9c:38:1d:a2:d1:bf:40:b9:ed:fa:fe:6f:57:c2:
84:b5:29:71:c4:39:45:bf:42:09:e3:14:d1:bc:3e:44:28:b8:
53:c8:c4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:16 2026 by rpki-client