Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: T/Mb3Q1Q3JtxSfK6Phs1vPpozlQ239ipHb9lErW6MVs=
Subject key identifier: 3C:7B:CD:7C:2A:D9:10:B1:AE:E3:35:B1:34:79:FA:8E:5B:B0:5E:05
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 019E1F4829A790ED58F4A629741A895DA638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0C42
Signing time: Wed 13 May 2026 03:01:23 +0000
Manifest this update: Wed 13 May 2026 03:01:23 +0000
Manifest next update: Thu 14 May 2026 03:01:23 +0000
Files and hashes: 1: 4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa (hash: FvxfrXpFTEI5fJri2eyNeGvuYRYi/o3NW0uubzMpvBU=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: h0UUnscWmO/oMrt30S0EznYxgNyehwIaBwJPS2mwwwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:29:a7:90:ed:58:f4:a6:29:74:1a:89:5d:a6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: May 13 03:01:23 2026 GMT
Not After : May 14 03:01:23 2026 GMT
Subject: CN=3c7bcd7c2ad910b1aee335b13479fa8e5bb05e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:47:0d:d1:62:68:2a:2e:52:df:76:3a:5d:
ba:22:73:6e:88:19:9d:a7:65:68:e9:17:38:cc:ec:
5e:36:6b:50:3b:85:85:0a:84:d3:20:9c:ac:b1:f1:
1e:7b:8c:ba:1e:00:5d:f8:01:b5:c4:d1:01:9f:fc:
82:79:35:45:43:b8:d1:42:0c:d5:66:85:13:89:87:
89:7e:b1:16:08:61:38:3a:65:4c:c2:9f:89:34:63:
c8:07:3b:be:12:d6:ca:00:6c:42:c9:0e:71:c5:3c:
ed:b5:14:bd:6e:70:1b:75:46:f7:8b:76:00:e2:7d:
a0:99:2e:b5:5d:b2:d3:51:85:72:49:a3:85:09:0f:
a1:81:e8:f9:d5:ad:b0:63:01:d9:9f:c1:b9:fc:ff:
7e:2f:a3:41:69:9b:60:de:e1:99:7b:34:bd:94:d8:
f0:0a:19:7f:04:76:2f:16:42:6c:0a:6b:36:00:ff:
c2:33:9a:e9:4e:f5:36:03:8e:70:39:a6:d8:45:d4:
b0:46:da:13:31:b2:e7:a8:59:82:5a:78:9c:00:18:
86:53:5b:70:34:32:ed:da:d7:de:be:bc:47:a5:04:
41:dd:10:9a:ed:72:c3:db:f2:a2:af:da:e8:85:9b:
a6:7e:bb:92:ff:8e:74:d4:fa:4c:e5:87:fd:52:e4:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7B:CD:7C:2A:D9:10:B1:AE:E3:35:B1:34:79:FA:8E:5B:B0:5E:05
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ab:20:7b:c6:74:ba:d9:0a:59:c3:30:bf:71:6d:fe:b3:2e:
68:ae:e2:f3:86:10:ad:1e:9f:a6:02:6c:e2:ef:26:7f:7f:f8:
38:f0:77:60:d6:f5:36:90:95:9f:52:0c:51:80:76:59:8a:52:
6f:c3:15:0f:fc:31:11:1c:f5:34:9e:96:c3:49:a0:e5:bb:65:
b7:2e:27:08:42:75:44:d2:67:be:72:65:d5:4e:fd:9a:32:e6:
27:33:55:97:87:e6:27:aa:1c:9c:76:54:d0:4f:c0:8b:51:c2:
0f:0c:2d:4e:5e:f2:93:e7:f8:bf:f4:59:bd:a3:f0:c6:5b:93:
64:8e:d9:96:93:f8:00:96:77:20:09:4f:f4:03:ce:36:1b:7b:
26:70:a0:bf:d8:75:ca:74:5c:9b:79:0d:9a:5c:d6:d3:1c:87:
3b:77:8e:eb:20:83:91:f4:8c:79:08:54:6a:91:57:15:b8:34:
83:fd:e2:ac:80:48:a9:10:be:a6:02:5a:ff:c8:d2:a8:3b:ad:
56:52:80:ac:41:f3:84:cd:64:96:ad:88:58:99:e2:29:d6:d0:
6f:98:c4:18:59:bc:22:a9:f5:07:73:b5:da:6c:17:6b:3d:7b:
c5:5a:cf:1e:87:0e:56:49:df:4d:c1:5d:fa:5c:1e:4e:01:b8:
e4:3f:0b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:34 2026 by rpki-client