Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: XkDZPUyuxo2k581iSwuxh6wBkG5TBcWxJHX33FDzvoU=
Subject key identifier: CD:C2:55:8B:06:42:8D:4F:4D:88:D5:E9:16:00:D0:2B:9C:C5:F6:16
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 01A0CFDB2C8CD63A3064491D735F08DC50EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 20:00:42 +0000
Manifest this update: Wed 23 Sep 2026 20:00:42 +0000
Manifest next update: Thu 24 Sep 2026 20:00:42 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: l4nwLopeH+ylDygvkYFDb9gj9/TwjnWPt3z/Xj/Yp8U=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:2c:8c:d6:3a:30:64:49:1d:73:5f:08:dc:50:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Sep 23 20:00:42 2026 GMT
Not After : Sep 24 20:00:42 2026 GMT
Subject: CN=cdc2558b06428d4f4d88d5e91600d02b9cc5f616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:14:1f:be:a7:81:e3:04:9b:df:3c:62:cb:
d5:c3:a1:b1:12:e7:96:11:bb:98:cd:c6:ac:14:c6:
06:9d:95:51:e0:83:e4:29:2a:7c:a8:17:ee:bb:93:
27:aa:ea:0c:a6:80:40:22:8a:c5:84:d2:d2:c4:f7:
21:a9:08:40:28:47:c0:73:8f:1d:68:4b:6e:79:ed:
0a:c9:95:89:33:28:e3:59:bc:35:c7:1f:26:2a:65:
83:c9:c3:b6:92:40:f4:0b:46:6f:21:af:ad:57:53:
32:2d:28:7a:27:db:07:c5:74:58:b3:4b:ed:eb:d8:
1c:2d:26:11:4e:ab:fa:fc:b2:a1:ee:b8:37:7a:6b:
ca:99:99:be:1c:cd:9c:3b:02:94:8d:74:c2:e9:1d:
10:d6:26:3a:bd:d0:19:a9:c2:d1:b2:ed:ce:16:28:
a7:ff:24:d8:2d:e4:cf:bc:09:ba:e9:d0:5e:c9:c5:
db:d0:92:e3:90:46:3e:2c:cc:d0:99:44:3c:f5:fd:
f1:42:93:73:c8:59:d2:c5:19:41:26:4d:1f:db:e9:
80:3c:a5:23:58:39:9f:19:9b:59:b4:fc:d3:1d:d6:
6e:70:ea:cf:14:b8:c9:cd:3b:6a:e2:be:56:71:95:
14:ea:d2:59:6d:5f:a3:11:00:b1:c5:2e:7f:52:64:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:55:8B:06:42:8D:4F:4D:88:D5:E9:16:00:D0:2B:9C:C5:F6:16
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f0:a3:6c:03:1c:ba:24:9b:82:1a:c7:41:91:c8:32:8e:0b:
d0:8a:33:f9:8e:81:b6:98:d6:26:9f:c4:ed:6c:9f:21:72:df:
ec:80:65:25:1d:27:ec:34:ad:45:76:52:78:15:6a:c5:ee:af:
46:1e:41:10:5c:f0:c1:51:68:fa:98:54:47:f7:07:6f:86:07:
9d:11:f4:bc:44:ab:53:4d:64:2d:d1:bc:bc:03:9b:13:da:5a:
22:a4:68:2f:46:81:0b:83:98:aa:94:de:5e:27:53:57:fc:d9:
6e:c0:95:5c:1e:6d:7b:3e:49:45:1a:f9:f9:57:5a:1b:c1:14:
14:58:6c:36:d8:c4:76:b3:4d:b6:3a:a8:80:36:23:6a:a3:f6:
4e:61:be:83:e0:79:a0:c0:4b:6a:3d:ff:07:b7:5c:0f:1c:34:
ce:cb:a1:e1:15:4c:50:a0:c9:55:08:cc:38:2d:6b:06:95:57:
43:6e:de:61:76:12:26:ab:89:3c:db:d7:3b:d8:dc:43:d0:ce:
8c:c8:c7:07:d5:b4:75:2d:45:76:f6:b1:ac:5d:9c:46:4b:6f:
e9:8a:39:e9:1c:4d:1c:d4:78:e9:3b:20:96:2a:fc:8f:03:cc:
c9:6e:a3:00:65:43:3d:30:12:14:e7:04:2a:5e:0b:0f:bd:6c:
9c:14:15:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:12:32 2026 by rpki-client