
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: WCUMW9rDOppcYUP+xTlzlrXumHqf58oXsHgqickqQMo=
Subject key identifier: 1A:F9:E3:FE:45:C3:85:5C:2D:F6:0C:A5:65:89:7F:26:04:00:EC:7D
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019F90FF77795E03060BB5A2A505F0204C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 145B
Signing time: Thu 23 Jul 2026 22:01:28 +0000
Manifest this update: Thu 23 Jul 2026 22:01:28 +0000
Manifest next update: Fri 24 Jul 2026 22:01:28 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: vgG5Jwe85QHH+Eesh419GtL7pl5ihwG4pX5eHg6IVCA=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:77:79:5e:03:06:0b:b5:a2:a5:05:f0:20:4c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Jul 23 22:01:28 2026 GMT
Not After : Jul 24 22:01:28 2026 GMT
Subject: CN=1af9e3fe45c3855c2df60ca565897f260400ec7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:15:7b:6e:44:b5:b0:c7:2b:0e:d4:7d:af:
9b:69:56:60:bb:32:cd:4f:3d:9e:df:59:c2:1f:25:
e2:2d:11:63:4b:f1:28:6a:71:c6:dd:b3:a6:02:38:
32:3b:4a:74:ad:18:0e:29:9f:96:cc:f1:c2:f6:1e:
ab:d5:91:ea:a3:37:9a:6d:22:7f:ca:6f:ee:e6:5a:
6f:c2:f1:18:0f:66:35:85:01:d8:63:65:a1:5f:9c:
c7:66:8c:4c:16:8e:3d:d9:fe:75:83:ea:33:a0:85:
46:5e:75:d7:b1:e4:d1:3a:b6:d0:d5:82:99:2b:a5:
4d:aa:f5:0b:a7:68:29:9f:fa:1f:bf:58:2a:26:29:
ec:74:8d:1a:26:5b:f4:5b:9f:b6:2e:09:ed:6e:a3:
c5:e8:ba:57:d6:ba:5e:1b:88:0c:b2:f1:5f:de:dc:
f8:67:8c:da:3c:03:7f:e1:d1:dd:89:07:b8:b7:1f:
98:1c:88:e7:1a:73:2f:1f:2e:43:06:84:54:e6:55:
78:42:16:88:c5:69:41:8d:51:4a:3c:a5:84:da:20:
dc:98:3e:22:83:38:43:92:b3:a6:6e:dd:9b:49:6a:
16:c7:dd:d9:68:fc:82:b0:69:8a:8f:c6:fe:fd:78:
68:97:cf:19:f6:b0:4e:a4:bd:95:dd:52:5a:0f:f4:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:E3:FE:45:C3:85:5C:2D:F6:0C:A5:65:89:7F:26:04:00:EC:7D
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2b:ce:13:d6:a8:e0:8a:60:cf:90:24:19:07:1a:0b:23:33:
f7:5c:f0:86:f5:3b:5a:29:48:9f:a5:06:5f:28:de:05:b8:b5:
e9:49:ed:4b:97:57:c6:ce:d2:d6:a5:02:52:b9:84:3f:fa:98:
4c:ea:51:f9:39:09:4b:30:55:73:54:02:1d:cc:e1:c4:a9:a3:
37:cd:2e:ea:81:be:b3:4a:cd:93:49:75:44:63:a4:f0:2f:34:
62:2d:8a:40:12:bd:d0:d0:eb:48:7c:2d:a6:bf:5c:7e:58:2e:
6f:20:08:4e:98:9d:fa:a4:3a:01:86:28:2f:09:f6:cf:4e:66:
8d:44:2c:56:d3:3f:43:50:79:f0:c6:9b:21:0c:28:d5:3d:27:
0a:a1:31:1c:7c:79:a2:85:6d:7f:a0:6a:de:5e:0e:d7:17:b1:
6b:c8:75:a4:c1:4a:3d:f2:61:c1:7d:bf:b0:13:28:67:d4:8f:
11:93:e9:0d:9b:ff:26:42:9d:03:ae:2f:26:42:96:27:c9:f7:
ba:60:d9:cd:14:92:fb:fa:3f:20:c0:d4:1f:2e:29:38:45:12:
01:aa:ed:77:44:da:95:08:b8:db:20:96:6d:4e:8a:fc:2a:95:
a6:9f:17:33:45:66:8a:13:2a:28:81:7f:bc:59:45:d2:3e:4c:
03:6c:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:49 2026 by rpki-client