Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: D5KjJDu8c3e7t2xaJ3/BvU22ZILbLRgqHRIwjjzT+30=
Subject key identifier: 00:02:5C:69:E2:08:D8:2D:18:F8:DD:D8:00:B0:90:2C:BF:7D:8A:83
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 01A0D383DE262D9443FD8C8C576E85D7D25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 1502
Signing time: Thu 24 Sep 2026 13:03:49 +0000
Manifest this update: Thu 24 Sep 2026 13:03:49 +0000
Manifest next update: Fri 25 Sep 2026 13:03:49 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: O9yULCcCn2UWqLnNsYu2Xo8lyxdcrqjiyh5dU1CGJA8=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:de:26:2d:94:43:fd:8c:8c:57:6e:85:d7:d2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Sep 24 13:03:49 2026 GMT
Not After : Sep 25 13:03:49 2026 GMT
Subject: CN=00025c69e208d82d18f8ddd800b0902cbf7d8a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:79:f1:c7:18:5d:87:57:f8:5a:7a:d5:32:
1b:7b:bc:33:54:0e:76:eb:54:0a:11:a1:d3:2c:97:
0d:6c:59:b9:07:67:ad:98:52:ec:03:1f:95:27:70:
32:4f:b7:1f:1d:52:ea:a4:e6:67:22:e0:e0:63:5c:
4e:7e:72:66:9d:cf:cc:6a:c1:5b:4f:87:5f:00:19:
9b:78:ba:19:71:95:37:df:43:29:88:b2:37:6c:e1:
c6:85:f3:04:8c:da:c2:86:ae:25:c3:9f:ba:fe:67:
11:33:80:4a:79:ed:4d:17:fb:84:ec:38:3a:ab:75:
c3:59:9f:d4:97:92:ff:e9:ca:a6:46:a9:ef:24:7a:
bf:e2:6d:59:32:d8:34:ca:a3:11:36:e4:bc:49:a2:
a4:26:45:06:41:7e:cd:da:cb:62:7c:35:03:e0:2f:
68:ea:48:46:b6:f0:ad:ec:9b:05:fd:7e:e3:bf:94:
ea:7a:5c:61:95:54:33:08:e5:32:32:1e:97:42:4a:
08:2f:cd:6c:1d:97:6a:4a:f5:32:1e:00:d6:94:16:
cc:d8:18:e8:50:4a:7a:66:39:1e:bc:54:6f:19:3d:
de:0f:11:6d:28:a6:cb:4d:70:4f:f2:5c:c5:7d:57:
f7:e3:40:69:a6:50:aa:e5:ff:6d:e6:ab:8d:f1:ee:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:02:5C:69:E2:08:D8:2D:18:F8:DD:D8:00:B0:90:2C:BF:7D:8A:83
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4f:55:ca:e4:14:46:37:5a:19:81:d9:f8:89:e0:81:9c:e7:
0e:fc:17:91:65:7b:02:b6:84:ca:54:9f:e0:61:6f:7a:9f:3d:
ce:54:6f:d9:ab:ac:a8:0d:cf:d6:03:f7:85:21:f3:80:4c:a3:
23:e5:af:55:77:45:f0:66:10:0d:b3:ee:d9:eb:0d:0b:22:f3:
20:fc:f0:b1:d8:f8:7e:a9:ff:5f:78:6f:f4:7c:09:d7:5f:93:
1f:61:dc:1e:04:33:22:a1:de:fb:45:0c:c2:1f:61:a9:c2:45:
9c:fe:a9:ae:30:ca:8f:80:56:b7:75:d6:11:9f:57:8d:55:4c:
6e:25:cf:26:c2:23:77:20:dc:f7:0e:23:78:9b:ba:24:35:7a:
2a:6e:45:dd:55:d3:32:82:73:e0:6c:48:50:59:55:0b:40:5b:
28:32:51:a3:0f:8c:a7:3d:b7:20:19:79:31:7b:f3:9e:d7:90:
44:32:5c:3a:c5:bb:f1:fd:71:4c:24:ed:7e:9f:83:26:4b:dc:
22:c8:7e:47:fa:b6:7b:9f:92:11:6b:c5:2a:9d:0a:9b:bb:34:
3a:b2:da:d0:37:53:27:4c:de:1b:3f:22:af:75:42:d5:16:ac:
ea:7a:76:74:65:8c:e4:44:59:fd:41:3b:59:b2:72:6a:02:c1:
2e:c3:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:13:44 2026 by rpki-client