Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier: FzLkNgX32OLO1HpY2cDcEV/oS5SFJ/1AsJSMaGuy+Rs=
Subject key identifier: 48:DE:D1:C1:F3:26:CB:7B:C4:44:F9:9D:84:31:64:EB:2D:74:BD:EA
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer: /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial: 019F92EDE9974200BA7BE1AD42E70B17C678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 07:01:33 +0000
Manifest this update: Fri 24 Jul 2026 07:01:33 +0000
Manifest next update: Sat 25 Jul 2026 07:01:33 +0000
Files and hashes: 1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: 0qY6jOPwaUK1amFiVbuOYmCJeIm3Dv2/6KPnZAmnhcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e9:97:42:00:ba:7b:e1:ad:42:e7:0b:17:c6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Validity
Not Before: Jul 24 07:01:33 2026 GMT
Not After : Jul 25 07:01:33 2026 GMT
Subject: CN=48ded1c1f326cb7bc444f99d843164eb2d74bdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:8c:a3:43:30:5c:26:58:4a:4f:ce:de:7d:
1b:85:3a:90:05:04:d0:d8:41:41:db:7c:7d:4a:94:
3c:9d:85:7b:e3:fd:6f:74:29:1e:2d:3d:79:c3:e2:
61:a7:d8:76:68:f4:91:ed:88:ab:72:0c:dd:5d:48:
dc:cc:e0:cb:71:9e:0c:f3:90:1a:5a:13:37:29:30:
ca:c0:eb:bf:94:e0:f2:0c:c4:60:8d:41:a0:de:95:
35:2c:05:70:aa:b1:ed:7f:7b:85:6e:36:78:04:72:
9d:0d:6f:9a:c5:7e:e9:b4:8d:d3:65:ef:75:ac:7c:
24:bd:28:b4:6b:45:bb:5a:4e:86:05:ce:98:d4:ca:
ad:9e:38:c9:4c:52:56:4b:2e:d9:e1:22:0b:78:22:
15:86:e4:b0:7c:df:74:58:cd:a4:33:24:1c:83:94:
81:59:92:95:b3:99:82:1b:51:5b:6c:f4:9c:81:8c:
9b:ed:b1:10:53:e3:ad:0d:7a:df:18:4a:2c:3d:11:
9c:3a:28:5b:e1:98:c1:1f:a9:06:ed:ce:82:72:43:
d8:91:7c:8f:70:2f:e5:7f:ef:4c:53:98:42:8d:dc:
b9:b5:1f:6f:74:8c:c8:5b:9a:c9:85:e2:5c:82:f5:
e3:4d:ab:e2:28:ef:84:ce:79:f1:dd:a4:83:fe:3c:
a5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DE:D1:C1:F3:26:CB:7B:C4:44:F9:9D:84:31:64:EB:2D:74:BD:EA
X509v3 Authority Key Identifier:
keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8a:34:e6:6c:4e:d6:97:e4:ee:ec:f1:7c:e1:23:d4:43:1d:
b4:49:02:ff:e2:e6:cc:34:b2:9f:de:ba:c6:03:da:c6:21:00:
93:bb:41:92:9c:e6:6c:d3:6e:b5:dc:24:04:06:5d:ac:ae:64:
8a:54:2f:e2:b7:83:01:74:30:58:3f:55:48:63:14:d8:f4:4b:
9d:54:0c:ce:3f:bd:02:df:bc:b4:39:52:33:fd:b3:ca:f8:e1:
7e:ef:72:30:f2:f7:90:8b:8e:60:30:cc:2e:f5:61:e8:23:ce:
38:f4:5d:f9:40:0d:ee:9e:64:9e:76:51:37:80:11:39:9f:ec:
cb:4d:5f:37:29:04:93:65:1f:01:bd:63:46:f6:ca:e4:07:db:
09:18:a2:06:a4:eb:d0:78:b4:a0:bd:ff:1d:7b:8a:3a:5d:5d:
bd:d2:32:91:41:71:96:c4:b8:8e:d1:b3:1a:7e:8f:2e:b3:f3:
1b:67:0d:c0:67:3b:17:ed:67:31:d7:10:fa:f3:a9:6d:5e:d9:
86:ba:83:d8:d8:77:1e:44:18:64:ce:4a:93:8f:38:8b:64:da:
77:25:e7:25:b2:42:73:6b:60:8b:73:46:6c:01:a0:17:f4:f5:
22:46:fd:24:5f:06:2b:64:42:7b:5b:d3:8d:b2:bd:06:d1:85:
f4:ff:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:28:59 2026 by rpki-client