Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: npWAcu0os/vuk5CqVTsuHbq80qmZOCzv755WKzaWrIA=
Subject key identifier: 85:AD:86:21:C7:F1:68:A6:F4:76:8C:A3:73:24:78:91:D7:D0:F0:06
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 01A0D5A6900C554A9CD629C07DA3C4C31E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 23:00:57 +0000
Manifest this update: Thu 24 Sep 2026 23:00:57 +0000
Manifest next update: Fri 25 Sep 2026 23:00:57 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: f8cc1w/9UNdiuic//7ZAUcOLDEjD3aifEJnWqGby4KU=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:90:0c:55:4a:9c:d6:29:c0:7d:a3:c4:c3:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Sep 24 23:00:57 2026 GMT
Not After : Sep 25 23:00:57 2026 GMT
Subject: CN=85ad8621c7f168a6f4768ca373247891d7d0f006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:5d:a2:ef:50:8b:11:c9:13:5d:0d:9d:86:
cc:3d:b3:4a:be:84:cf:da:58:1f:69:ce:78:56:43:
88:1d:5e:76:ad:d5:dd:aa:91:80:cc:5a:ab:a2:12:
98:f4:1c:79:df:b9:32:7f:67:a9:58:a3:04:ac:2f:
2d:7d:07:f0:f5:cb:7f:7f:ef:1d:c4:7a:44:bd:0c:
84:ac:5b:27:52:a9:1d:a7:26:b0:6c:2a:40:cc:98:
73:c0:da:ab:3d:b4:d8:fc:58:cf:b7:24:9d:a9:66:
5b:5f:be:df:35:96:c3:c8:02:4c:29:f0:48:1e:15:
68:57:5b:47:ca:a6:02:1e:b1:37:e2:ad:99:6e:0f:
a0:63:77:67:35:26:85:7c:2b:da:77:2c:e8:42:18:
58:d2:7a:d3:9e:56:a3:4e:0b:a4:11:d2:96:44:66:
af:5f:05:32:1f:8d:e0:56:ad:da:11:5f:f5:16:b5:
74:68:8f:1f:5b:83:9f:d8:77:1c:a4:3e:14:f0:ac:
8c:17:b8:0e:56:cf:ed:3b:11:a4:50:65:d0:84:43:
0a:27:ac:79:0c:84:ed:89:59:d0:d9:3c:13:61:93:
e6:dc:0a:c8:66:fa:0f:20:ee:15:95:7d:2f:7f:9e:
5d:19:29:97:7c:41:83:21:5a:52:1e:d7:42:df:8d:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AD:86:21:C7:F1:68:A6:F4:76:8C:A3:73:24:78:91:D7:D0:F0:06
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3e:ce:a0:61:1b:3c:5f:12:97:8e:97:67:dd:e9:96:06:c4:
4c:6c:8c:7f:78:3a:5c:d9:d2:61:c4:c1:87:96:b6:fb:94:42:
bc:fb:ac:b7:41:53:14:09:9c:57:9f:c6:76:39:8d:14:f1:1c:
50:02:89:79:ff:b9:80:54:dc:a9:c1:59:37:97:3c:21:bd:6f:
75:87:8e:19:0b:e8:b2:62:35:c7:c0:16:5b:98:27:93:e9:f1:
07:8d:aa:0d:6b:fa:4e:94:8f:11:eb:44:ef:62:95:17:df:5c:
56:64:43:ef:76:dd:a0:8a:d5:72:0b:27:1d:73:bf:bf:69:46:
fc:77:dd:39:3a:7c:9c:78:32:b6:1c:b5:e8:3d:dd:1e:05:eb:
3c:9c:b7:ea:f2:60:1b:c6:fb:c2:fb:9e:91:a4:ca:07:54:b9:
a8:f4:3d:3e:fe:ba:fb:21:03:70:05:42:d7:c1:e0:5c:fc:91:
e8:53:b0:c3:89:e7:d2:51:dc:5f:70:4b:bc:cb:63:a5:18:e0:
a0:c8:f7:e9:4c:0c:8a:20:73:3c:fa:2a:ae:3a:53:cd:1e:fb:
3d:ff:09:9f:54:f3:55:5f:c4:a2:a0:43:61:52:32:39:8e:17:
f0:b5:12:65:0d:81:d9:d6:63:27:cd:7c:fe:fe:08:0e:b2:d9:
f0:a3:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:52:47 2026 by rpki-client