Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: +KrQTe6V3vX2XEtRIWj6brt0c4PHuPnN7Q5qUWi7H1k=
Subject key identifier: D0:A3:75:C3:78:85:54:50:35:D3:23:24:FC:B8:09:84:34:85:3A:13
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019F90232CAD25432F5659A80B96C6A3DA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0D0B
Signing time: Thu 23 Jul 2026 18:00:51 +0000
Manifest this update: Thu 23 Jul 2026 18:00:51 +0000
Manifest next update: Fri 24 Jul 2026 18:00:51 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: jMe1l/qsutqvDlwjdWJByLhNXHPilzTqo2cHxkJT2zo=)
2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:2c:ad:25:43:2f:56:59:a8:0b:96:c6:a3:da:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Jul 23 18:00:51 2026 GMT
Not After : Jul 24 18:00:51 2026 GMT
Subject: CN=d0a375c37885545035d32324fcb8098434853a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:81:b1:96:4a:b4:0c:77:39:58:9d:3a:80:
2b:af:a7:23:b1:d5:f3:da:42:7f:55:a0:3f:7c:cd:
6d:3b:ab:1a:21:20:65:c1:07:57:4b:58:16:19:b0:
25:a6:24:89:35:92:22:99:d9:04:9e:42:08:12:6d:
b9:f6:57:a5:cb:9d:53:47:11:7a:df:23:7b:13:19:
73:be:e1:17:01:1e:4e:9e:6c:14:74:82:de:63:c2:
d1:d7:6c:6f:cb:40:ee:f6:74:f6:71:74:f6:66:0f:
c3:00:ad:5d:c9:f4:aa:2a:6b:ac:06:79:09:bd:39:
4e:2b:c0:a3:e6:7a:3f:92:4e:31:d1:59:40:cb:32:
ea:d5:51:50:3f:27:c0:79:20:5d:ef:33:e9:39:20:
c1:03:4b:93:4d:1c:e9:b4:f5:1f:2b:d5:1e:f9:fa:
c8:9e:b2:c2:b1:31:1d:8a:4c:da:93:8e:86:06:d7:
86:1e:cc:0a:31:c0:5a:15:a8:01:b5:f3:f9:a5:c1:
35:27:8c:d2:cc:35:72:19:1d:05:75:c1:cd:59:d2:
d9:4a:f8:d5:cb:ce:9d:b1:80:99:09:25:06:9e:9c:
1f:87:96:40:1f:41:5c:c0:bb:e3:b5:9e:ca:4a:66:
f3:5f:3f:f0:dc:a6:22:24:94:43:d7:bd:10:be:4c:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:75:C3:78:85:54:50:35:D3:23:24:FC:B8:09:84:34:85:3A:13
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:bb:0c:4c:83:f6:68:df:33:ad:26:10:0d:74:0e:d4:ef:bd:
ea:0f:7f:8c:3a:f2:96:ec:c5:87:a8:d0:53:68:8d:56:69:36:
49:bc:40:50:04:4c:fa:f2:cd:34:ee:36:1b:d3:5c:ba:5f:51:
8a:89:a3:e9:0b:fa:4f:60:ff:b8:2f:e1:f0:ad:65:63:95:2c:
da:15:82:5e:51:34:53:3a:04:ef:fd:8f:d2:10:bc:44:af:f6:
3b:10:d3:f2:91:2c:d1:69:5c:8a:73:d7:e4:39:29:38:56:eb:
b7:6e:d9:56:51:ca:bd:ce:1a:12:b7:58:a4:63:df:a7:fb:0b:
9a:42:e9:13:ce:3c:13:db:57:2d:09:15:6b:9e:80:92:ac:2e:
4f:b7:bf:5e:3b:06:c4:e6:c3:f2:07:ff:e6:34:68:9d:cb:f3:
67:f1:e7:26:dd:f3:d0:ae:73:a0:41:d2:99:9b:e1:00:25:8c:
a1:b1:bb:07:fb:a2:1d:31:ef:12:99:aa:69:27:03:61:52:a6:
f0:e5:4d:a1:03:0b:ea:7a:76:0c:ff:6e:5a:7d:52:e8:26:9d:
78:6a:e8:41:1a:34:52:ea:37:cb:d2:40:3d:f0:75:3e:ca:ab:
d1:ce:6a:8e:24:5b:01:f0:04:07:5c:0d:ec:1a:07:cf:a5:92:
9e:2a:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:16 2026 by rpki-client