Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: LUZVNptsj/MFH+LmRpHtwoqvLpm/AkiYoOMC6AnC7as=
Subject key identifier: 86:A4:00:23:B0:39:1F:91:48:33:FA:72:47:2D:40:DA:0A:90:6C:65
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019D2627E5379828630234BA6A2FE8BCE00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0BCB
Signing time: Wed 25 Mar 2026 18:00:41 +0000
Manifest this update: Wed 25 Mar 2026 18:00:41 +0000
Manifest next update: Thu 26 Mar 2026 18:00:41 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: o3QlaEl8kEWvd9ePihHRvp7JJQPpcKgnF6sb9KqQuLk=)
2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:e5:37:98:28:63:02:34:ba:6a:2f:e8:bc:e0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Mar 25 18:00:41 2026 GMT
Not After : Mar 26 18:00:41 2026 GMT
Subject: CN=86a40023b0391f914833fa72472d40da0a906c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:de:1c:b9:ea:cc:07:bf:92:9d:d0:82:bc:
fb:5b:7e:b2:cc:d6:80:94:cd:d2:e3:c4:4a:e2:9c:
64:70:4c:d3:38:6b:0f:12:0b:b6:5b:87:e6:4f:a2:
66:87:15:68:60:9f:b8:b8:30:de:a9:0f:f0:f0:40:
ab:7d:0b:14:6e:8d:85:66:b9:93:23:bd:54:3d:71:
7f:af:cc:1c:f7:8d:c2:92:ee:e4:10:70:fe:05:8b:
40:c8:87:03:98:7a:82:75:e0:4f:39:e3:ae:fb:bc:
92:2f:24:27:c7:4c:5f:14:e4:e0:8b:b1:f9:9a:b2:
3c:7e:1b:59:d8:e8:5f:7f:c2:92:43:54:52:ae:56:
12:90:d6:6b:7c:48:36:ca:4c:ae:03:db:ef:28:fc:
17:dc:80:58:48:f0:ba:b3:72:a5:31:e2:c5:fc:1f:
15:1a:59:46:b1:43:83:1f:c7:03:89:f1:e6:4b:44:
56:a2:b1:e6:df:66:92:60:c8:b1:ff:f8:d3:b1:e7:
51:ad:5b:48:75:2e:78:0b:94:7f:7f:04:1e:47:f2:
fb:33:ab:36:0c:c2:6c:3c:e4:90:34:87:9e:a5:23:
11:8d:af:57:d3:0b:19:d5:02:d0:14:39:e5:50:02:
5f:d0:fb:ab:2a:5f:0a:c3:0c:9d:e4:09:71:f6:4d:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:00:23:B0:39:1F:91:48:33:FA:72:47:2D:40:DA:0A:90:6C:65
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:23:0a:9a:81:09:43:b9:23:97:02:85:d4:a9:1e:76:e7:
36:e5:83:5a:4c:02:fe:0e:5a:ee:f5:32:22:da:20:7c:7d:af:
b1:d2:7b:1d:f0:4f:d8:2f:a0:93:1c:4e:bc:04:b5:17:55:a7:
0f:d6:94:9c:f5:94:9c:70:2e:b9:ee:76:d0:09:f5:e5:2e:8e:
18:90:5e:b0:e8:d8:7b:4c:ff:63:f9:0f:ce:07:2e:28:e5:e7:
0b:da:6a:29:e6:b7:e7:7c:73:ab:ff:07:95:ff:e0:a5:35:57:
c5:1c:48:c4:69:0f:5d:b7:c0:48:fb:7e:57:e3:a0:14:a3:12:
eb:39:c3:2b:02:33:1d:a9:d3:7d:fc:b7:22:f8:ad:19:ed:6d:
98:57:d8:9b:9f:6f:d9:7b:31:64:05:6a:e7:73:14:ae:cc:21:
d4:89:92:c2:d6:b9:dc:8e:44:74:37:dd:d4:96:8f:24:7a:29:
d4:ae:61:5f:28:f1:37:e2:08:a3:1e:a2:9b:0d:bd:8b:a4:90:
15:2f:18:b1:29:1b:e1:b7:d0:cb:6a:2e:2f:4a:78:17:3d:51:
23:83:57:31:db:8b:f6:a8:b9:b0:87:83:e8:2b:61:de:67:29:
69:f5:1f:cd:ef:65:df:e1:3c:26:87:2b:e4:45:18:ae:26:10:
f5:61:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:09 2026 by rpki-client