
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: OZIiUHb45wjlbfF+Awu+Ciscb/yL8qYb4pqUZwB4WX4=
Subject key identifier: 75:17:39:25:A5:CE:DB:AA:70:F7:0F:C1:65:1C:43:F3:2D:EB:F6:F5
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019F913577C06C071C4FA95506646213BEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 23:00:27 +0000
Manifest this update: Thu 23 Jul 2026 23:00:27 +0000
Manifest next update: Fri 24 Jul 2026 23:00:27 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: m1e3nRAfmI05B1ySNPJm9pqZNJ3++pVQxlCENTf+318=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:77:c0:6c:07:1c:4f:a9:55:06:64:62:13:be:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Jul 23 23:00:27 2026 GMT
Not After : Jul 24 23:00:27 2026 GMT
Subject: CN=75173925a5cedbaa70f70fc1651c43f32debf6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:b2:24:60:d3:f8:14:19:75:b1:bf:e4:26:
25:a7:a3:cb:36:b4:45:ed:4e:59:9f:2e:6f:93:07:
50:ea:00:04:bc:1f:37:d4:9b:f8:98:4c:7d:41:7c:
f0:73:5f:f5:0f:cd:1d:5e:0e:30:18:7c:05:11:3a:
d1:49:a3:20:75:8a:57:bc:90:ab:64:2c:5c:f6:e1:
d2:8a:c6:95:d8:b0:ba:c1:20:1e:94:37:60:90:52:
55:6a:6e:a6:17:2b:59:62:a2:20:b8:30:9e:75:83:
52:da:77:6d:74:73:1a:74:6a:63:34:4a:2f:27:c2:
d8:04:06:fa:89:6d:31:e7:c5:1a:6c:eb:ef:bb:fc:
e2:83:5d:6b:85:78:23:d1:e7:e4:ec:e3:96:75:70:
f6:46:73:66:7c:6c:bc:2d:37:43:f2:a1:b4:25:72:
5f:61:77:c4:57:7e:d9:36:25:25:82:63:ef:74:47:
17:7b:c5:bb:bd:2f:05:57:17:ab:d9:9a:1f:a2:45:
61:69:a6:b8:76:47:4a:20:a0:7d:8c:85:f6:73:73:
a0:79:d3:b0:16:6d:b1:4b:ba:bb:ae:0e:f0:1f:cc:
95:82:62:67:4f:5d:58:ca:3c:0b:06:bb:5d:f8:a0:
6e:6c:a4:bc:2c:2e:3a:bb:52:33:a2:bd:83:f9:85:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:17:39:25:A5:CE:DB:AA:70:F7:0F:C1:65:1C:43:F3:2D:EB:F6:F5
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:79:9a:0d:2c:10:83:82:6e:5e:bd:e2:ce:cc:c0:2f:3c:61:
97:aa:75:43:a7:ec:03:d1:c1:83:29:95:f1:88:30:4a:e8:41:
2a:5d:dd:9f:c0:b3:b4:b4:2a:77:84:2d:66:6a:46:d0:a5:c2:
92:7e:be:ec:51:82:0f:3f:2b:b7:ff:55:0f:a8:fb:99:2e:90:
1e:30:e7:36:ca:f5:00:ab:51:94:1e:ca:77:f2:fb:bc:3d:01:
79:3b:00:ed:41:dd:27:5e:ca:1b:ee:16:44:33:e8:33:57:7c:
5d:79:12:a0:22:6f:40:70:f6:e7:8d:57:98:f4:3f:be:31:6f:
68:da:63:28:6c:e1:5a:d6:e4:13:cb:4f:2a:05:d6:41:16:0b:
4f:10:5d:e1:21:fa:97:d9:41:8f:51:4f:8e:e1:c1:e5:7f:f1:
d2:03:7c:2f:27:82:15:ed:d0:f4:0e:73:2b:e9:33:6f:6a:e6:
52:64:43:dd:ef:c6:e1:79:dc:73:5e:4c:c0:b8:f5:9b:e6:73:
cf:74:57:2c:be:09:0a:31:6f:0b:d7:b1:97:73:94:0d:3f:74:
59:69:fe:97:19:54:48:1b:3c:ab:30:12:1d:dd:63:4b:a1:01:
d7:2d:8d:27:d7:94:4d:41:94:98:4d:d8:ad:9f:4e:1f:af:a8:
11:b1:6b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:42 2026 by rpki-client