Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: 2CD1T+fIT3Hk2ZDYy8zOE8N6gF2EebPmzmde8SSbnZI=
Subject key identifier: 59:63:7B:8B:84:90:C1:A2:5D:4A:B8:A8:6D:4D:94:F5:68:5C:06:AF
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019D386636AC0D91850C2703961FC2B4B7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: jWBvNH+Zijxh3aEEbBjbgo89X9Bqwhlm0cKEVtbjmxA=)
2: n3ieUI2cLDKlu7-1mHlC00BGgvw.roa (hash: j3IdpiHDFCzlAJqG9D51WL/CfEe+aj4QEFw7yJEuwkE=)
3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:36:ac:0d:91:85:0c:27:03:96:1f:c2:b4:b7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=59637b8b8490c1a25d4ab8a86d4d94f5685c06af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:45:dd:74:68:55:a8:28:fc:40:08:ed:b8:
f0:e8:45:c5:e2:2a:92:c0:be:c2:50:1e:c4:a4:c4:
a2:a2:9a:81:18:3a:70:4c:c6:d4:1d:0a:d8:f9:99:
d2:d5:59:2a:d8:dd:ee:07:1c:b5:b5:44:58:70:18:
21:35:2a:35:9a:eb:11:d7:74:7c:8c:ab:5a:18:93:
93:8e:2f:32:0c:3d:7a:f3:60:da:20:01:0f:98:ff:
69:27:54:f8:0f:77:f6:54:12:d7:0c:a6:16:d3:82:
37:c7:07:f4:66:e9:99:53:6d:4b:07:b9:b2:76:c9:
10:50:cc:ad:3d:0b:17:e1:9d:09:b4:bc:5f:44:ce:
b7:48:27:6a:fc:97:03:53:fa:5a:c1:1f:41:50:3f:
53:4d:b3:44:89:04:de:50:35:a0:71:40:c2:a0:4d:
43:20:ed:a7:4a:26:a5:37:36:1b:83:80:64:87:c9:
1b:2f:fe:c4:d1:a8:26:78:b4:f3:e3:85:cc:57:9f:
00:e2:0f:22:c2:42:dc:78:e9:ea:f8:b8:30:14:7e:
e6:fe:f3:3e:42:09:3e:68:22:f4:eb:af:04:f3:bf:
3e:bb:d3:d4:91:e5:c9:d3:07:76:58:af:48:e7:b4:
eb:d4:88:46:b2:2e:1b:58:97:3e:bf:a9:14:ad:be:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:7B:8B:84:90:C1:A2:5D:4A:B8:A8:6D:4D:94:F5:68:5C:06:AF
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:08:3c:a0:6d:a1:4b:b7:65:a1:4d:68:2a:09:d4:4d:a0:
97:af:d2:15:a5:68:bf:7c:96:a0:21:97:2d:3a:35:e1:af:05:
a3:de:11:65:8f:5a:24:95:96:2d:33:9f:59:bf:73:c7:b8:d8:
e1:9a:e1:76:03:48:d9:74:18:b9:cc:a4:38:57:4a:09:ac:36:
36:56:ec:b7:ca:2e:18:d0:d9:80:f3:60:f5:db:b7:62:95:6f:
c1:7e:06:04:49:d7:da:26:d0:22:38:b3:21:3b:99:d5:7b:44:
12:9b:5e:b3:ab:7d:dc:6f:9f:0d:db:a4:d5:27:31:49:d1:ed:
4f:55:51:0d:a0:f3:36:fe:ac:21:ad:3d:3c:32:cc:d8:e7:a5:
4a:69:be:9d:6d:b6:66:61:d5:99:a1:3c:cd:ee:f5:c0:3f:f5:
a6:f3:51:43:90:22:5f:4a:ad:a6:c4:27:7d:36:ad:8b:c9:42:
50:d8:89:64:f8:60:97:71:a5:ee:57:28:1f:79:8f:0d:87:44:
d9:dd:82:94:9a:9a:c8:55:87:37:fb:7d:72:3d:ab:17:0b:12:
4f:bd:50:38:8b:62:70:cd:8a:32:30:43:82:1f:33:7c:44:e7:
f2:be:30:ba:ea:a5:9f:f6:84:ca:09:b3:f7:9e:35:f5:78:e3:
15:2a:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:41 2026 by rpki-client