Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier: T53aQ/bTnBOthzJH/ZZi3vJ6NEaeakQ5JaWwMWN7W0w=
Subject key identifier: EF:57:E7:F8:D0:42:BE:78:22:A7:34:92:BD:CD:FA:56:D0:64:96:BF
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer: /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial: 01A0DD2992339A827B6800BA7AE2B9ED01EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number: 1A6E
Signing time: Sat 26 Sep 2026 10:01:24 +0000
Manifest this update: Sat 26 Sep 2026 10:01:24 +0000
Manifest next update: Sun 27 Sep 2026 10:01:24 +0000
Files and hashes: 1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: 3ltZnwNcydmbWVbmfHnTtBiPzSjIVTo6tMPpZaT+SqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:92:33:9a:82:7b:68:00:ba:7a:e2:b9:ed:01:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Validity
Not Before: Sep 26 10:01:24 2026 GMT
Not After : Sep 27 10:01:24 2026 GMT
Subject: CN=ef57e7f8d042be7822a73492bdcdfa56d06496bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9a:c7:c0:f6:0e:2f:3c:1b:32:e1:92:fa:b9:
2c:03:0c:eb:91:03:01:df:df:cd:f4:1c:69:a4:3a:
21:d7:6f:dd:cd:04:07:fb:64:a4:96:a7:75:f0:db:
fe:ac:81:86:bc:5b:b8:bd:fd:0a:35:5f:35:ab:a8:
59:8e:fd:ac:79:6c:b5:cd:eb:05:39:0b:05:b4:ca:
ff:35:88:62:88:49:13:5c:77:9f:31:89:9b:28:2d:
81:bf:f3:0d:77:7e:12:b1:97:8a:3e:fa:b1:d8:d5:
d4:b1:ae:a5:4e:63:99:92:84:ce:77:c7:29:69:14:
f4:5d:91:7d:fc:4a:5a:b3:08:4f:f4:64:c3:a0:9b:
5c:2c:d2:df:e4:8c:be:24:c8:de:bd:c4:05:74:04:
5e:82:64:56:b1:2e:bc:2a:05:57:53:f8:49:de:d2:
be:40:6e:ea:ed:6a:b3:24:38:33:a1:d8:cf:d6:b0:
5e:8f:31:8a:6a:73:37:84:2a:d4:f8:db:84:32:73:
04:b9:c4:14:bd:04:68:8c:a6:8f:78:4b:63:c2:53:
58:d3:6f:a7:a7:a3:d9:25:ee:07:a2:6a:88:8f:f0:
c1:aa:15:18:e2:cb:d7:f9:b7:67:ec:fe:35:29:48:
f4:6c:89:a4:03:a0:e6:33:cd:93:32:a1:ee:0c:84:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:57:E7:F8:D0:42:BE:78:22:A7:34:92:BD:CD:FA:56:D0:64:96:BF
X509v3 Authority Key Identifier:
keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:51:ad:f0:f2:ea:0d:e6:32:0f:76:a3:41:9e:12:ec:32:75:
b2:61:df:e7:d0:72:dc:cc:7b:02:d3:d7:1e:3c:04:fd:e4:8b:
6b:32:94:49:aa:ce:6f:df:03:25:41:0a:97:5e:05:59:16:5e:
34:f8:8a:7c:88:de:d9:77:b6:5b:c4:59:17:1f:ed:c9:f1:b7:
2c:bb:31:fc:28:5c:56:eb:2e:f3:49:21:0d:e9:9f:ed:b6:7f:
4b:09:92:f9:a4:fb:2b:4a:5c:9c:20:e0:27:27:b6:81:44:f7:
5c:0d:5e:9a:33:fd:88:9f:23:25:a0:2a:14:6a:26:c8:f0:fb:
e7:56:4f:ce:d3:5d:86:99:0f:8a:a6:ec:90:27:72:eb:4c:85:
7d:8e:f6:4d:74:46:56:99:05:14:e6:2c:74:88:4d:61:f8:4b:
f6:ed:35:2d:e2:7b:2d:39:29:92:a0:45:a5:16:78:2b:02:dc:
3d:af:7c:33:84:77:00:63:3b:4a:5b:1c:8f:f2:51:f4:8b:14:
67:72:29:6d:9c:b6:0c:97:83:65:71:d1:98:dd:76:13:36:f8:
c1:89:71:a0:c5:21:19:d8:e3:de:67:3f:75:40:72:9c:7b:b1:
c4:c7:68:d3:f7:2d:c5:28:1e:62:89:f0:a7:80:89:d2:a1:22:
59:4b:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:55:13 2026 by rpki-client