Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier: rCIphtdbWOurgpl/akoIDeE4So0ZQokPomGUrHP6wRQ=
Subject key identifier: AA:71:DD:44:F7:DB:60:6F:24:A6:DF:F2:6D:95:17:54:84:58:5D:0B
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 019D37F71A31DE22672528B5614C171C8ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 05:00:34 +0000
Manifest this update: Sun 29 Mar 2026 05:00:34 +0000
Manifest next update: Mon 30 Mar 2026 05:00:34 +0000
Files and hashes: 1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: aCEFoUPaKR5+4jDwvaYdOyVMqH4FOmbvJf57pbsgBGQ=)
2: D_VQ3qcRrE1RcGz3L2hiZ5fs0q0.roa (hash: 3nNJVROdH+6QiOLIHdge07W05M5mKR5oevvpsKwNQMQ=)
3: R2U_cQMFZM4-GXgQbDyShKrCAGA.roa (hash: Ag9S/vdQiIdyQgvSbtnRDnW1NQNHuWeD+J3+pdenpE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:1a:31:de:22:67:25:28:b5:61:4c:17:1c:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Mar 29 05:00:34 2026 GMT
Not After : Mar 30 05:00:34 2026 GMT
Subject: CN=aa71dd44f7db606f24a6dff26d95175484585d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:5c:67:a3:44:89:53:26:3a:7f:2d:7d:e3:
ad:b0:95:6f:30:45:61:f4:31:3b:9e:d7:da:f6:11:
70:ca:c7:0a:7a:3f:fd:a7:33:00:80:41:2b:45:76:
a6:56:6a:60:da:9b:99:fc:b3:3d:70:c9:11:a1:dc:
2e:64:b9:12:31:cc:4b:64:00:89:c8:a1:06:7d:a0:
f6:d8:d1:22:2b:20:10:df:db:52:42:1a:8c:93:35:
1a:88:9e:e7:2d:0d:ab:e9:ea:d2:64:cc:57:b0:61:
be:d8:c9:8c:8b:c5:c0:e3:11:28:78:be:da:30:51:
b3:89:e3:b2:56:12:80:93:b1:20:f6:d3:e7:52:46:
de:41:22:73:d0:bd:fe:b4:29:d8:1c:1a:b5:1b:18:
8d:34:69:75:1e:7b:b4:af:55:b9:ab:c3:a9:7d:7f:
47:48:fb:49:f8:55:09:dd:52:80:86:fb:dd:c7:20:
87:b1:58:5f:44:46:2d:56:9c:7b:06:35:0b:cb:0e:
78:22:84:80:36:ab:fe:79:85:b8:d7:52:59:4c:1d:
51:fe:ea:3a:8e:97:d2:71:ef:0c:f1:17:7e:5f:29:
34:29:52:e1:17:14:de:ca:06:fc:9d:1b:d9:cd:6c:
66:56:4f:91:7e:11:99:83:39:70:d4:c6:62:09:67:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:DD:44:F7:DB:60:6F:24:A6:DF:F2:6D:95:17:54:84:58:5D:0B
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:2b:32:37:f6:d7:f2:17:3d:19:35:86:2b:3f:37:81:96:
41:eb:c5:23:74:5f:fe:e0:ff:cd:7a:a5:c9:0c:07:1a:0b:52:
e6:54:b4:2f:85:7a:00:c3:6a:eb:75:89:96:67:68:ee:5b:e6:
56:da:39:16:08:3c:36:70:1d:47:55:db:60:8b:02:66:b5:3b:
98:b4:a2:22:5c:c9:77:ae:ea:ae:91:3b:1c:25:66:c0:4f:da:
fd:8f:66:0a:c0:27:93:3d:0d:ef:62:49:72:a7:7a:43:f3:17:
d4:e4:0e:56:bb:73:db:6f:e5:61:e4:13:7a:6e:92:b9:fd:96:
fc:72:79:cb:f3:bd:dc:42:6c:b2:c2:48:24:92:69:c5:73:53:
2e:ab:5d:2e:b1:2c:10:75:93:61:ba:fb:be:4e:a4:f3:c0:f4:
e6:0d:47:15:df:09:64:05:ff:d1:35:32:79:58:17:d8:3f:c7:
f4:67:1a:76:55:ea:92:11:18:8f:26:25:e6:7c:cf:91:e1:cf:
08:25:95:7b:33:cc:05:f1:31:23:05:b0:05:e9:4e:6b:58:ac:
11:51:c6:b9:e2:c9:d5:cf:68:76:50:72:fd:87:a6:65:c8:52:
bd:99:14:df:9f:5d:73:71:5d:89:d8:27:6f:93:a0:52:0f:f1:
6d:ce:d2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:43 2026 by rpki-client