Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: NgcLTPPdwl8K3rwREhmwUFFj9gr3wZV2iBxkdRzMcjQ=
Subject key identifier: 01:8F:7A:AB:8C:77:D7:83:99:FB:F6:D1:77:B4:5D:58:7A:59:C3:CF
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 01A002EFD490D2045E9EA31D111B425D3C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1A0A
Signing time: Sat 15 Aug 2026 01:01:06 +0000
Manifest this update: Sat 15 Aug 2026 01:01:06 +0000
Manifest next update: Sun 16 Aug 2026 01:01:06 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: hMEjcS4/sHvPpjFRmAbwn0EdK+pnRjHIa91p01wrr4M=)
2: n3ieUI2cLDKlu7-1mHlC00BGgvw.roa (hash: j3IdpiHDFCzlAJqG9D51WL/CfEe+aj4QEFw7yJEuwkE=)
3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:d4:90:d2:04:5e:9e:a3:1d:11:1b:42:5d:3c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Aug 15 01:01:06 2026 GMT
Not After : Aug 16 01:01:06 2026 GMT
Subject: CN=018f7aab8c77d78399fbf6d177b45d587a59c3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:52:8b:67:e0:d7:1d:49:85:1f:42:6b:6f:
11:6c:59:fe:22:86:0c:ad:01:95:c4:54:01:c9:80:
60:e6:e3:4d:7f:94:29:21:97:e9:27:22:69:32:20:
62:4d:b4:b4:30:4c:2c:97:a0:6d:65:20:98:4e:41:
ad:15:73:0c:2a:69:d9:a1:5f:89:f1:ff:37:60:33:
46:b9:a6:6e:a6:a0:36:18:a7:ca:fd:54:c0:aa:a4:
36:26:f8:99:00:20:7d:41:36:3d:76:dc:7e:05:7a:
2c:5a:37:70:a4:ee:23:1a:2c:d1:d1:18:78:e2:39:
85:85:a3:5a:ee:8f:f7:ad:0b:83:73:94:11:7f:0b:
5f:3d:25:f1:ce:47:37:41:e3:ae:23:06:83:50:24:
7f:9f:06:b9:a0:2b:27:c7:4d:58:b5:10:e1:a0:e4:
1a:2f:c3:71:fa:2d:ec:b5:43:00:e3:9d:d1:8a:c3:
0e:23:67:11:a0:dd:7f:4d:e1:07:d2:de:cd:ee:83:
22:69:2a:cf:96:26:2d:39:30:4e:ae:3e:d7:51:68:
fe:bd:5a:2b:89:f6:6b:bf:ec:90:dd:d2:67:77:44:
fc:15:ae:0d:f8:bf:75:10:29:78:0a:0e:d0:3b:b6:
6d:29:65:15:6c:1c:39:51:cd:f2:fa:4c:b8:f1:34:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8F:7A:AB:8C:77:D7:83:99:FB:F6:D1:77:B4:5D:58:7A:59:C3:CF
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:24:c7:56:a2:c6:4a:2c:10:b0:cd:43:c0:9a:e8:30:40:4e:
a1:a1:f6:ec:88:89:cc:3d:5e:d5:55:c7:21:17:0c:39:82:26:
ea:bf:c3:a5:50:84:18:01:9c:12:ea:06:5f:b5:35:52:c7:c4:
52:87:fc:6b:26:2c:f6:8c:b8:43:46:fc:69:e0:0b:ad:65:c8:
a1:cd:3b:7b:24:4c:d8:ae:d4:64:23:ac:ee:26:7b:17:ac:e2:
af:6e:81:e2:c9:4c:7b:0d:c2:5b:08:22:e7:b7:22:1e:88:55:
61:1c:e6:06:82:70:96:a9:54:88:2d:70:ee:4f:9f:af:ad:4b:
cb:ba:98:d4:e2:35:be:f9:a4:15:51:09:c5:4b:bd:98:71:0d:
2f:21:5f:55:df:14:bc:1c:eb:76:3e:55:e5:fa:48:8f:5d:06:
f7:63:14:86:12:dd:77:05:ea:e6:c4:d7:2d:80:f7:06:23:37:
fb:e4:9b:8c:05:a1:42:b8:b5:3c:4a:bf:ac:a5:32:47:a5:07:
56:e2:e2:69:ef:fe:a8:0f:49:40:df:77:8f:08:ea:38:3d:55:
8c:86:c5:5e:f3:56:98:34:0c:2f:13:0d:88:60:87:b5:af:2a:
6f:8f:3f:a0:50:1a:7a:c2:34:87:f9:ca:d5:d3:af:64:ca:98:
fb:b4:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:50 2026 by rpki-client