Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
File: B7tb-mSw1dGKMGGphpscpXFy6ro.mft (raw, json)
Hash identifier: CpcHPxqke9jl6I/lp3tRUMC1L3Htatj3SQOqGIJYR2s=
Subject key identifier: 20:82:B4:52:E6:99:AA:F3:AD:9F:A0:79:09:C2:60:0D:51:10:8F:C0
Authority key identifier: 07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
Certificate issuer: /CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Certificate serial: 019D29CED388BBD9390B3C7AA407FE4EFAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 11:01:53 +0000
Manifest this update: Thu 26 Mar 2026 11:01:53 +0000
Manifest next update: Fri 27 Mar 2026 11:01:53 +0000
Files and hashes: 1: B7tb-mSw1dGKMGGphpscpXFy6ro.crl (hash: hAnt4GWmo/B1JhJ3nYbtNnksgDeXd0XoEkAbWKcxaT0=)
2: OtKLPaAsu0TSKxVTheZYE45uIv4.roa (hash: sV369+wKHa03W+MYhzuJvYumzEqh+GOUryRtR9pnkWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d3:88:bb:d9:39:0b:3c:7a:a4:07:fe:4e:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bb5bfa64b0d5d18a3061a9869b1ca57172eaba
Validity
Not Before: Mar 26 11:01:53 2026 GMT
Not After : Mar 27 11:01:53 2026 GMT
Subject: CN=2082b452e699aaf3ad9fa07909c2600d51108fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:36:75:e3:d0:aa:60:ed:a1:89:fa:81:76:
6e:58:2d:be:83:ee:cf:0b:0f:19:7e:5e:2e:13:1f:
a7:e9:a0:2b:f1:a1:3d:c6:c8:f0:be:8e:b2:78:34:
15:b8:05:7a:49:b2:6f:93:b6:c5:0c:50:1b:2a:2d:
88:40:2a:9e:a2:c6:5d:71:1e:84:78:75:ad:b9:ab:
fc:eb:47:30:78:9c:60:ae:3b:e1:44:89:37:1a:0a:
f1:e6:d3:e2:22:3d:36:95:6b:c9:9b:20:e7:4e:47:
ab:5a:08:12:dc:9a:b4:83:43:6d:eb:fc:86:82:50:
56:3b:ee:2b:46:ec:bb:c7:ba:77:7f:c0:20:39:9c:
af:93:1f:31:eb:f3:22:9e:dc:66:21:bb:28:ee:d4:
7e:40:95:e1:cf:f6:d6:af:0b:01:4e:a8:58:aa:0a:
6c:28:84:46:27:37:4f:50:14:7c:2f:2f:d0:2f:03:
87:b7:9c:4b:4d:53:06:82:3d:d2:e6:58:2b:46:52:
93:ba:68:38:ce:6e:4e:0a:02:0c:0e:4e:68:ef:6c:
28:f4:26:49:1a:4f:b7:94:2d:6b:94:45:02:1c:77:
2d:94:08:2e:1c:d5:79:49:0d:56:49:e2:e0:cf:b0:
58:f0:da:49:97:0a:ca:31:df:80:4a:43:4a:48:bf:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:B4:52:E6:99:AA:F3:AD:9F:A0:79:09:C2:60:0D:51:10:8F:C0
X509v3 Authority Key Identifier:
keyid:07:BB:5B:FA:64:B0:D5:D1:8A:30:61:A9:86:9B:1C:A5:71:72:EA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7tb-mSw1dGKMGGphpscpXFy6ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/acfd98-b736-49f4-a660-f908d21718f7/1/B7tb-mSw1dGKMGGphpscpXFy6ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7b:86:c5:4e:8f:54:08:d9:3e:ce:cf:8c:f7:b4:21:d6:9a:
7e:4c:d2:04:6d:53:fd:fd:14:2a:89:ba:2c:e2:27:1e:29:a1:
71:28:ca:0a:c7:5b:15:05:c1:32:a7:ff:9c:b3:76:00:92:e8:
51:c8:65:d6:27:ac:eb:f3:fe:34:64:05:7f:8b:ff:d0:ac:d0:
f4:1a:f0:8b:13:e7:74:21:3d:e9:89:89:78:9b:1e:45:40:c6:
90:1f:3e:a6:4c:9e:07:ec:09:ae:9c:fa:fb:10:73:fd:a4:d5:
f0:ae:f7:08:c8:c3:fb:26:0c:b4:9b:cc:06:70:96:f9:94:65:
75:a2:9c:e8:73:23:c7:7e:05:fa:e9:b9:f8:8d:40:42:72:62:
74:9e:86:66:a3:56:2d:ab:f4:c2:14:90:0b:e9:71:01:d5:14:
65:30:ed:71:b2:a3:14:7a:5e:70:aa:a5:08:dc:b0:6c:bf:eb:
29:12:90:30:71:9f:26:74:66:23:94:08:0a:83:0e:87:75:f4:
18:11:99:e6:fe:53:35:15:03:66:71:02:1c:6a:61:c3:f4:33:
1f:f6:76:b0:cb:98:23:96:e7:c5:d8:d2:b0:33:a7:85:f4:ee:
32:df:15:06:2f:4a:f6:98:ad:b5:2f:0d:8f:c4:52:ba:47:34:
68:7d:8e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:56 2026 by rpki-client