Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: 1otzWoObdD+YopN/Net4dB/4/KEeUXDNh7gyxw0OGwA=
Subject key identifier: 60:97:D6:6D:5A:9C:D9:AB:21:82:FD:8C:E6:B8:B8:6D:3E:AF:5D:92
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 019D273ABD7E6A35502A7734579255E6EA63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: +L9lc5wXx/v3mR+r4QiraJUNSiibgS5DtdcIy/W4ghE=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:bd:7e:6a:35:50:2a:77:34:57:92:55:e6:ea:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=6097d66d5a9cd9ab2182fd8ce6b8b86d3eaf5d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:f9:2b:2b:f4:8d:3d:18:a6:2c:0c:ca:c6:
ec:e9:5e:db:fc:e7:31:4f:17:e8:dd:0e:e2:eb:f4:
d4:7f:96:28:15:37:ab:d2:a9:bd:f0:b6:e4:9c:17:
14:9e:10:31:85:01:92:4f:e1:cd:29:7b:6c:a5:0e:
25:41:f0:10:22:25:13:b4:87:ba:5b:74:a7:59:ee:
1c:82:14:50:5d:c3:c2:f6:34:60:43:ac:ce:e7:40:
9f:2f:64:94:3e:ec:b7:59:50:34:db:fc:76:b9:dd:
18:ce:30:b2:3a:e9:a0:fe:d5:91:b7:49:02:fd:f5:
30:6f:19:fd:3f:37:d7:14:1c:1c:5c:93:7e:61:8e:
7d:0f:1a:42:d6:1f:c0:33:d1:3f:cb:91:1b:fb:a0:
9b:49:82:58:a0:86:34:ee:0d:9a:c6:d6:67:fa:74:
da:13:cc:47:64:1e:44:d7:3f:8f:51:52:fa:9d:7d:
af:80:36:0c:4a:c4:35:3b:49:b8:56:64:5e:47:ed:
a5:37:67:7f:dd:6a:13:a9:31:58:36:81:6a:78:f2:
3f:65:2c:24:b2:02:ac:e4:d1:d2:0d:23:cc:72:e0:
81:2c:b0:65:35:74:70:36:48:20:81:59:2c:70:32:
91:0d:87:04:9f:aa:ac:65:72:ae:68:3e:60:40:56:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:97:D6:6D:5A:9C:D9:AB:21:82:FD:8C:E6:B8:B8:6D:3E:AF:5D:92
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:47:38:c1:1b:fc:79:c2:ed:7c:82:0b:93:67:a9:6d:fd:c2:
a9:c4:f8:97:e4:55:a1:66:b4:7e:1a:45:ba:c3:58:93:4f:98:
d1:76:06:b4:a6:d6:60:54:48:65:7e:65:13:3b:d0:64:9c:ba:
50:08:1a:25:31:b5:28:e9:7f:02:c6:90:23:8b:00:1d:1c:ae:
01:21:b3:66:50:c5:b1:c6:4b:0b:31:17:55:65:fa:b9:e8:c7:
c0:a7:a3:e4:ed:04:ff:64:dc:f7:e4:aa:df:81:6d:2c:00:00:
de:95:b0:9d:d4:e6:81:cc:a9:de:ed:21:ac:cd:ba:0b:a2:fe:
c9:ca:34:10:6a:0e:cf:34:6c:74:ba:7f:be:ed:4d:a9:62:55:
d3:3a:f0:47:95:3f:8f:e7:17:71:eb:99:f5:75:26:93:59:15:
b1:85:bf:c6:d9:e9:3b:0f:09:da:84:ac:a5:85:f9:4a:3f:8e:
09:5f:98:31:3b:d0:b7:3c:4e:c0:63:76:66:7c:ce:2d:7a:12:
b8:b7:da:e5:3c:f4:53:f6:b4:fe:46:fe:49:fb:59:a6:f9:be:
b4:0a:24:30:54:0b:e2:c7:1e:37:ba:8d:b6:44:39:cc:a1:35:
03:07:ee:40:e0:6b:32:0e:30:2f:c5:89:e4:99:70:86:38:bd:
53:63:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:06:55 2026 by rpki-client