Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: dQhVufgN2yS+m1V8btGlLNpnKlDY5g7imeJ3zvukZhY=
Subject key identifier: 06:FA:E9:1C:A0:8C:1E:C4:4F:42:AB:8A:69:15:51:2F:60:F1:90:7D
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 019E1D90EA04887BBDE87F1EB0535238344F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:36 +0000
Manifest this update: Tue 12 May 2026 19:01:36 +0000
Manifest next update: Wed 13 May 2026 19:01:36 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: ynN9GszwZ8+LJUSD0UlHhbfkjWzAGknnYIsOjtm6yQk=)
2: KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa (hash: xsj6ZBhPayD1o1vBeEH4YfY+jj4U4fktOZ+HokJunGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ea:04:88:7b:bd:e8:7f:1e:b0:53:52:38:34:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: May 12 19:01:36 2026 GMT
Not After : May 13 19:01:36 2026 GMT
Subject: CN=06fae91ca08c1ec44f42ab8a6915512f60f1907d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:76:e6:74:a2:c2:1b:14:7b:eb:77:7b:4e:
f1:53:73:de:13:49:dc:88:4c:49:bd:f3:5d:77:02:
28:e1:a5:4e:54:f8:ee:93:6d:86:65:4d:8c:15:5c:
cf:82:95:c9:11:d8:d8:73:8a:c2:9e:6e:2e:9e:17:
b4:4e:d4:81:29:7b:a7:03:7e:5a:92:04:53:2e:a5:
4a:24:62:1d:13:0c:20:e6:a6:76:28:b3:12:61:3b:
3a:a5:c6:c6:29:32:c1:0b:59:a3:41:77:34:ad:63:
67:9c:14:99:b3:f5:50:45:3a:01:f5:54:b5:07:bc:
9a:6e:43:98:8d:95:9d:f5:d8:9c:ae:aa:73:9c:a9:
2a:79:22:09:06:e5:c2:a9:6a:7f:55:61:ad:45:aa:
cf:80:90:41:a9:0f:48:08:02:05:58:83:c8:05:1e:
5e:4d:c2:38:a0:1f:b3:42:f8:84:7e:ae:7e:2f:f5:
b2:4e:b5:67:04:78:9c:5e:ad:7c:b8:5c:d3:b1:52:
10:9b:d2:1e:35:4a:76:8b:5f:19:ef:ce:84:38:99:
f6:0a:3c:2a:57:be:81:1b:0e:8e:9a:83:22:ef:34:
11:79:c8:e0:07:b9:cc:93:04:8f:bb:0c:0d:f2:22:
0c:e7:a8:da:fc:93:32:08:ad:0c:16:5f:3e:8e:ad:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:E9:1C:A0:8C:1E:C4:4F:42:AB:8A:69:15:51:2F:60:F1:90:7D
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:28:54:93:54:a0:39:fe:03:8c:86:7f:f6:05:14:3c:d8:b6:
36:a9:3f:e3:8b:78:3d:08:8e:b8:af:02:e5:37:a4:19:d9:7b:
e5:9b:9f:73:36:77:96:c1:f2:95:87:82:02:b8:f2:ad:7d:26:
88:f1:2c:57:43:d4:cc:ee:6f:05:55:5c:67:38:28:76:de:29:
d9:aa:01:60:b0:ea:1e:c4:c9:b9:32:6c:d1:0c:76:ae:e1:42:
c1:2c:c2:dd:ad:6f:b6:1b:21:50:92:2d:3c:c7:23:bf:fd:d0:
02:9f:4e:51:d2:3a:0c:65:ab:25:04:f4:f9:10:02:84:da:b5:
46:17:76:83:62:3d:0e:3c:bb:87:6d:9b:9a:96:0e:1d:08:f4:
60:c6:8a:4b:20:3d:9f:fc:9e:e3:ad:16:16:8d:f8:37:47:2c:
b6:b3:d0:a0:e6:60:09:00:f5:17:fe:52:0e:6a:cb:20:88:12:
0e:c4:c8:7f:b1:e7:be:bd:51:1b:3a:12:ff:d8:bc:91:00:1c:
a8:09:dc:57:92:c2:75:5e:7b:7c:16:6b:0a:a7:1e:91:9d:f7:
57:07:ae:da:aa:5f:3f:2d:75:03:71:86:cf:43:92:df:a2:7b:
26:8e:3b:db:ef:83:1c:7f:60:84:43:bd:c4:7c:6a:7b:74:59:
e7:05:29:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:19 2026 by rpki-client