Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
File: B1EA167695E869209FAA739E70D18201F6043D73.mft (raw, json)
Hash identifier: iXoiiZcwLXmb8eqhO/t6W4NF8qngHnFeJHwLtcXWx38=
Subject key identifier: 63:CD:E4:79:C8:72:A9:A1:61:C1:A9:9E:78:9F:5D:44:55:04:17:09
Authority key identifier: B1:EA:16:76:95:E8:69:20:9F:AA:73:9E:70:D1:82:01:F6:04:3D:73
Certificate issuer: /CN=b1ea167695e869209faa739e70d18201f6043d73
Certificate serial: 1FFAAE36C4ED40D8CE460A7C1FBED5F282E7ED0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seoWdpXoaSCfqnOecNGCAfYEPXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
Manifest number: 20
Signing time: Sun 29 Mar 2026 10:07:44 +0000
Manifest this update: Sun 29 Mar 2026 10:02:44 +0000
Manifest next update: Mon 30 Mar 2026 13:01:44 +0000
Files and hashes: 1: B1EA167695E869209FAA739E70D18201F6043D73.crl (hash: ixXd6TVS2Mcm3qY4uIyopHGyFJwk/LBRcFWDC9YKp18=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
rsync://rpki.ripe.net/repository/DEFAULT/seoWdpXoaSCfqnOecNGCAfYEPXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:fa:ae:36:c4:ed:40:d8:ce:46:0a:7c:1f:be:d5:f2:82:e7:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ea167695e869209faa739e70d18201f6043d73
Validity
Not Before: Mar 29 10:02:44 2026 GMT
Not After : Mar 30 13:01:44 2026 GMT
Subject: CN=63CDE479C872A9A161C1A99E789F5D4455041709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:5e:5b:c9:b8:32:df:b6:c9:0f:c6:b8:e3:
13:08:2f:87:d4:f1:09:20:2f:38:d1:77:3c:38:6c:
2a:f4:62:41:ac:e3:a1:a4:90:96:0a:ff:18:61:73:
77:7e:79:55:a8:eb:c9:16:bd:d7:15:c7:15:fb:00:
89:80:46:dc:69:92:37:ca:42:51:8e:67:e8:96:d6:
6e:81:85:51:3e:75:f7:4a:8a:a6:74:7e:bb:2f:8d:
97:82:bc:38:19:0c:84:fc:87:bc:11:a7:11:6a:f7:
89:c4:b4:6b:49:bd:a4:4f:82:2c:94:fb:eb:cc:a4:
43:a3:9e:b1:d9:e7:a8:ce:db:0a:9d:25:ba:5e:e6:
0c:33:97:f3:4a:c2:22:00:cb:e4:e7:c9:5c:7e:04:
85:d2:e2:d8:c9:5d:93:94:c3:bb:80:56:53:64:18:
ff:21:a9:d8:03:f9:26:07:1f:fc:84:61:c8:84:2a:
98:f1:a4:46:6a:fa:73:96:07:63:bc:91:37:38:2a:
4e:1a:43:68:22:08:ad:d8:eb:f4:7b:3b:c1:34:f4:
5c:9a:de:86:90:7a:53:d5:21:e8:c0:6e:b3:26:41:
b0:29:a3:20:e7:22:8f:6b:2b:71:6d:cb:05:48:65:
9f:4c:c1:d3:a6:f1:b2:d6:c2:64:2c:da:dc:3d:c9:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CD:E4:79:C8:72:A9:A1:61:C1:A9:9E:78:9F:5D:44:55:04:17:09
X509v3 Authority Key Identifier:
keyid:B1:EA:16:76:95:E8:69:20:9F:AA:73:9E:70:D1:82:01:F6:04:3D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seoWdpXoaSCfqnOecNGCAfYEPXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:17:af:73:13:ec:49:b6:4c:a0:8d:10:3a:53:a7:c0:10:4b:
5c:55:a1:0b:77:61:a1:bf:9f:cc:5d:5b:59:ee:f9:1a:9c:0e:
e6:d0:36:b8:82:72:de:d6:49:23:f1:3f:50:b3:ba:57:3c:99:
74:9c:be:f5:a1:04:0c:dc:63:a4:f6:e9:73:21:46:81:58:0a:
9e:1b:83:dd:fd:49:9a:3f:de:67:82:ae:61:dc:93:d2:fd:0c:
01:ac:9a:aa:7c:82:66:9d:46:ce:ce:ac:5b:d7:ea:e8:c3:cb:
91:d5:a3:1d:3b:f8:a2:ab:c4:1f:f4:56:c7:c5:21:22:f7:5b:
c4:10:67:46:77:7b:f0:dd:d8:9f:5e:46:e6:d6:61:d7:fd:94:
09:81:12:3e:7e:78:ae:6e:01:c5:12:60:fa:bc:ec:60:22:1e:
f6:c4:e5:9a:b9:8d:d0:7b:be:1e:4f:2b:bb:aa:d2:6d:b1:2a:
cc:31:f9:b3:67:8a:7b:c0:07:79:ce:4e:f3:4e:35:35:ea:f8:
88:0b:f2:23:4e:c2:98:a0:be:a8:77:56:f9:13:2f:74:43:4f:
c3:bc:5b:46:fa:13:88:b4:0e:d2:ff:75:ef:62:89:98:e9:dd:
28:da:cb:57:ad:fd:17:15:00:98:4c:82:c7:3d:b2:cd:62:83:
9a:0c:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:18 2026 by rpki-client