Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: fxgEYMODrfkRxsKAQLa85Od1UZvN0moFH6vakN4V/VE=
Subject key identifier: 6C:5D:66:2A:0D:4E:C8:4A:B5:AD:10:B6:4A:0A:6D:B2:D1:DA:A8:91
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 019D265F80EB28AB85E8371B5399ADCB4D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:26 +0000
Manifest this update: Wed 25 Mar 2026 19:01:26 +0000
Manifest next update: Thu 26 Mar 2026 19:01:26 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: rvN+pKDhAScAolz2XQ4jg7XhENokzlHnjrKRpU0BCl4=)
2: KTuFHNmNqOQcqGkD0_LLHcb3LD8.roa (hash: xsj6ZBhPayD1o1vBeEH4YfY+jj4U4fktOZ+HokJunGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:80:eb:28:ab:85:e8:37:1b:53:99:ad:cb:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Mar 25 19:01:26 2026 GMT
Not After : Mar 26 19:01:26 2026 GMT
Subject: CN=6c5d662a0d4ec84ab5ad10b64a0a6db2d1daa891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3c:14:99:ce:b2:e2:e7:82:ce:72:98:9a:43:
68:2b:d7:5a:df:e8:0a:c7:76:81:ed:fc:72:c3:12:
e6:2c:ca:23:2c:f4:5f:e2:f6:fc:36:bd:22:44:21:
57:a5:e7:85:2d:cd:72:c1:cb:1b:d1:30:95:6d:19:
42:14:8b:0b:c2:48:69:c5:e5:d7:9e:fa:75:a1:7d:
6b:74:2d:f3:eb:d8:a6:23:6e:72:d9:8c:24:f5:9e:
4f:2b:e8:24:7b:a9:51:77:35:85:84:d0:c5:0d:3c:
ba:19:fb:b8:02:69:27:f4:31:3c:a4:ba:3e:2a:cf:
89:0b:30:f7:b8:83:ad:8a:c7:e0:68:c1:8a:ca:2f:
c0:4d:52:7f:01:eb:8b:65:1b:18:35:82:73:ca:af:
fe:78:aa:d6:2d:9d:bf:a3:11:55:eb:de:91:b3:f8:
a9:1e:5a:08:15:79:5c:26:29:d0:89:c1:c8:94:51:
6e:f3:6f:37:99:38:3f:e8:7c:5c:1f:6e:f6:cb:c7:
5c:2e:4f:56:4f:81:48:e4:c0:e7:49:cb:5a:42:0f:
e8:f3:b9:cd:f0:55:32:7a:fd:99:63:84:5f:0c:01:
05:8a:9a:35:e0:77:51:38:a6:f1:d4:ef:4f:1f:32:
9f:6a:23:21:b7:e8:ec:ce:e0:98:45:86:ef:63:5e:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5D:66:2A:0D:4E:C8:4A:B5:AD:10:B6:4A:0A:6D:B2:D1:DA:A8:91
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:13:af:7a:b4:0c:f4:45:c6:e5:34:3e:c2:b0:eb:17:47:
bd:5f:80:fa:61:57:b8:e4:d7:0b:1b:62:bf:32:a3:cc:40:f2:
53:56:4e:90:4c:7b:e0:90:39:7f:d0:5f:2b:b7:83:98:65:e4:
ba:ff:aa:ba:71:89:20:b1:e8:e3:d2:97:e7:d9:e7:02:2a:e3:
b2:54:47:20:48:cd:da:cf:85:32:c8:a5:77:e5:49:76:4e:93:
1b:31:9a:bc:a8:ad:0e:87:b8:2c:43:aa:fa:af:b8:e0:0d:5b:
b1:f4:30:8e:3c:c4:a6:d3:9a:72:d2:d6:64:28:8b:a9:6d:12:
3f:27:5f:0b:c7:f5:99:fc:84:2a:73:87:73:3c:2f:8b:53:83:
3d:37:6b:0e:de:c8:92:68:36:53:7b:f4:b1:f4:6e:47:81:a2:
8f:17:96:42:fd:50:a1:b7:5e:30:33:e3:c1:71:ff:d9:95:d7:
fc:e6:c7:72:15:2a:22:53:f9:a6:9e:02:19:b0:8e:e5:a5:1e:
d7:ac:86:c1:0a:20:d3:2b:5a:12:06:3d:1e:7e:d0:51:a3:b9:
d7:bf:ae:29:e7:cb:99:67:09:c9:ed:d8:ec:fb:8d:42:bd:e7:
1c:2b:73:51:5e:3d:53:f1:d9:19:31:7b:1d:b2:79:8a:40:f2:
d6:c5:61:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:15 2026 by rpki-client