Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: 4iQTynEp4HFAesMjqR2n3u7fR3nCO44FVIrLHE4NNXc=
Subject key identifier: 72:28:3F:C9:51:72:43:30:60:C9:47:7C:64:23:08:D8:DF:6D:06:0D
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 01A13F3985CEA81D49725533B29D25A2AC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 11:01:36 +0000
Manifest this update: Thu 15 Oct 2026 11:01:36 +0000
Manifest next update: Fri 16 Oct 2026 11:01:36 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: L3aZgqgCsIb01h8RCnldR1cGxpObowppBUkTubVWIEA=)
2: OaG9G9Rkeg7MQ9HAOpMM6Qb2lyE.roa (hash: 2tlWpqcv4FYW9H4L8bdUATgM+St3ZdyU2sE6jN6ILxk=)
3: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (hash: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA=)
4: lMQfwH-V7Yhd6sNgC8BpN5Ho3vc.roa (hash: 80PQfjBzEobkUlg1u1KjDZCEtHTRyd3Qm3q0fmEsPoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:85:ce:a8:1d:49:72:55:33:b2:9d:25:a2:ac:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Oct 15 11:01:36 2026 GMT
Not After : Oct 16 11:01:36 2026 GMT
Subject: CN=72283fc95172433060c9477c642308d8df6d060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:7b:72:9a:ed:69:bf:71:13:db:22:a3:27:
1a:b4:1b:bb:12:b5:03:00:04:12:d8:7b:ef:61:df:
e3:60:d5:1f:13:5f:5c:01:c5:0e:9b:52:b4:c6:c9:
7f:b1:fd:19:d2:ec:fc:63:f2:57:a0:34:7c:fc:de:
3a:59:d7:f7:50:e6:25:d3:1d:b7:c1:c3:41:30:90:
83:79:39:16:e0:7b:31:4f:d8:0e:eb:dc:e6:af:57:
5e:41:ff:65:28:64:80:7b:29:08:35:c1:39:a9:2a:
e5:2b:fb:30:12:df:82:49:74:3f:26:23:d2:ff:8c:
f3:64:9d:05:be:04:aa:e6:40:04:de:10:53:b4:98:
1c:e8:5f:da:bd:e5:e0:5a:00:62:95:32:fc:63:98:
88:41:c8:ab:0b:4c:45:7f:a6:19:30:03:b2:8a:f3:
f5:82:03:ba:61:83:57:7d:c8:a5:3b:46:fc:b0:14:
7e:78:2c:8d:05:e7:00:c8:67:ed:f4:dc:57:62:5b:
a5:5f:08:b4:8d:b7:8d:da:ec:d4:d0:07:91:60:b9:
1b:ee:1d:99:9a:13:b0:e5:95:db:f9:51:47:c3:ef:
b3:1c:00:2e:a5:6f:5b:cf:3c:93:09:3f:bd:4c:c6:
e7:cb:13:0a:df:f8:fa:60:06:95:97:67:f1:86:17:
ad:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:3F:C9:51:72:43:30:60:C9:47:7C:64:23:08:D8:DF:6D:06:0D
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:87:e3:a4:f7:f9:91:7e:12:bf:8a:81:ed:66:5e:a3:2b:8c:
df:35:2a:d6:24:ea:ca:70:a6:86:18:9f:9d:f3:66:19:99:56:
9d:ce:4a:7e:d9:e4:c0:6c:d6:74:94:30:69:ec:06:2c:19:7c:
a3:b4:73:1c:64:c0:54:85:ab:dc:c6:a1:db:c0:d9:97:54:41:
7e:de:97:b5:bf:57:4b:c8:94:2b:d8:10:b7:e9:c4:91:de:a0:
72:4f:79:83:ec:6e:37:c8:12:f6:fc:ca:07:c9:5a:65:c9:48:
8d:64:bc:2e:db:ef:e3:1c:95:14:20:1f:7a:bc:fe:4e:6c:37:
01:1f:65:59:79:e1:bd:65:d2:d4:67:70:61:5f:fb:30:b5:d9:
90:e2:86:c5:0f:b4:25:c2:5d:ea:27:1a:aa:2b:4f:ab:10:43:
d3:dd:dd:9b:b7:3f:d0:1d:f3:86:71:f1:c9:29:fe:cf:16:ba:
67:c1:b4:5f:63:8d:2f:1b:82:c3:54:cc:37:cf:49:50:21:2f:
0e:95:2d:02:c0:19:68:50:ac:5c:29:3d:f8:11:51:5e:a2:c7:
49:f9:68:38:c2:10:9d:6c:11:58:2a:3c:a4:74:5c:ee:c5:b2:
0e:40:39:85:45:75:4f:6f:f6:da:71:47:ba:93:dc:de:e1:e0:
0a:30:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:44 2026 by rpki-client