Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: YO/gL/Yj/zIlymkoKPxqSfE+/BglDRCRw2QYvCJ0hG4=
Subject key identifier: 35:4B:F0:AC:15:49:96:6E:C8:91:8C:2F:0D:1B:90:C1:57:A1:D6:83
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 01A13D4A54CDE48687A2E2B8E3C9AFC4840A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 02:00:43 +0000
Manifest this update: Thu 15 Oct 2026 02:00:43 +0000
Manifest next update: Fri 16 Oct 2026 02:00:43 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: SPLSni0A0L6X7+H3KzYfom4m6ztsozr4nm/KipZC3Mo=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:54:cd:e4:86:87:a2:e2:b8:e3:c9:af:c4:84:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Oct 15 02:00:43 2026 GMT
Not After : Oct 16 02:00:43 2026 GMT
Subject: CN=354bf0ac1549966ec8918c2f0d1b90c157a1d683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:61:0d:e8:97:c1:b6:4d:e3:a1:8c:3a:4f:89:
ab:d0:61:5c:0c:da:54:33:91:86:a8:86:5d:a3:4d:
41:b5:9c:0c:a1:49:72:31:c6:5a:47:0f:9b:e0:45:
d7:de:bc:ab:c9:04:0e:bf:b4:d7:9b:a2:9d:1c:bb:
84:ff:ef:c5:d6:8f:ce:8c:21:48:bf:ec:01:79:f3:
5a:05:51:c1:34:e6:e4:33:c0:48:b8:fd:8a:74:e0:
6d:ce:e2:fe:f0:48:5e:4d:fd:49:70:26:82:de:1f:
00:be:1d:40:f8:30:42:c3:57:ff:55:68:c4:82:c5:
fa:fc:2f:8b:fe:a0:a7:aa:61:ea:a8:fe:35:75:6f:
03:c9:ad:9b:6d:45:ce:85:c5:dc:78:96:a0:55:58:
c9:3a:c0:9f:b5:22:ff:be:0a:3c:72:58:51:04:1a:
c6:41:a6:f8:54:83:dd:68:e0:64:c5:77:a7:9e:15:
65:50:4b:a7:22:0e:20:4c:fa:2f:7c:1e:ad:66:0a:
60:30:85:8c:fc:3b:4b:49:b8:62:ca:5b:01:19:bd:
a7:8d:6f:fc:e3:1b:a2:93:46:f8:8e:21:66:c1:cf:
de:f6:ab:c8:9d:c8:2f:49:b1:ae:d3:3b:1a:4d:55:
39:bd:63:b8:75:d7:54:f8:c0:72:98:bf:2c:d3:54:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4B:F0:AC:15:49:96:6E:C8:91:8C:2F:0D:1B:90:C1:57:A1:D6:83
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:43:5a:0c:be:d3:a1:76:a1:77:cb:88:06:8e:01:33:73:cd:
82:26:dd:a4:e2:1d:93:dd:2f:41:23:80:97:9b:01:83:60:26:
b8:64:25:c3:f2:a4:a9:dd:fb:77:5d:a0:d1:1f:fe:86:bf:91:
9a:44:e8:00:2a:16:3a:1f:30:1f:30:20:75:57:33:bd:68:8d:
ca:83:2b:90:3c:7a:1b:da:86:8c:bb:1f:fb:d1:8d:ce:ab:f1:
60:42:a0:b0:12:82:ac:8d:23:eb:83:f4:fd:74:fa:b3:86:5e:
c4:02:25:1d:16:f7:eb:d5:66:59:c2:86:53:0f:8c:60:58:4d:
3a:a4:28:7c:93:03:57:4d:b9:4c:9f:8e:58:77:e5:74:54:2b:
36:a2:f4:55:77:19:01:0f:f3:c4:88:fa:d4:17:55:f3:76:30:
22:98:08:4c:f3:4a:61:b1:ca:aa:6a:05:d9:ae:5a:2b:a3:84:
a4:7d:17:f7:1d:06:54:e2:ef:ae:8d:a9:d9:15:a1:27:ac:3c:
7e:b1:2b:60:c0:cb:2d:b9:d7:f1:19:f4:b5:ed:78:4a:26:4b:
9e:49:b0:de:5c:a1:34:23:8c:10:6b:a6:ad:ea:1c:80:0c:62:
14:e7:3d:34:e4:65:48:11:01:14:13:07:f8:30:fd:8b:0c:13:
48:c6:23:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:51 2026 by rpki-client