Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
File: B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft (raw, json)
Hash identifier: 1U43qmNtMryS4vX8pomZIexOd4mSGQyScNJx6UvTTko=
Subject key identifier: 2A:A8:56:B1:34:6A:E9:79:45:98:05:82:E0:5B:EA:37:79:84:6B:F2
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 019D29CE9128570E3DACC7C2D2ED4952ADF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
Manifest number: 067A
Signing time: Thu 26 Mar 2026 11:01:36 +0000
Manifest this update: Thu 26 Mar 2026 11:01:36 +0000
Manifest next update: Fri 27 Mar 2026 11:01:36 +0000
Files and hashes: 1: B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl (hash: qIhrQ+NDCxyZtJYW/hH7cuYiJWWzCnMcvhTQHhIoeqc=)
2: Hsna_TRszov1J0VZLOsHUlP-JlM.roa (hash: 0oVhD+Hpu4+17JAWqPaWb9VuKSEGIj0vezDUmaIt7EQ=)
3: oPkA19ZJNd0yyLJCr3CeoqKdL9k.roa (hash: +llqkRKNCnReFAJVuMNWFGoumJ45f+tlhYub+1L/278=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:91:28:57:0e:3d:ac:c7:c2:d2:ed:49:52:ad:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Mar 26 11:01:36 2026 GMT
Not After : Mar 27 11:01:36 2026 GMT
Subject: CN=2aa856b1346ae97945980582e05bea3779846bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:0f:09:27:05:86:87:4f:80:8c:09:82:5a:
48:4e:d3:31:19:41:22:33:a6:69:6f:f0:a8:ad:7c:
9f:54:77:60:1f:f9:b6:50:10:31:c0:83:e5:e2:77:
ba:db:d2:f5:4e:7f:37:29:dc:1f:53:3a:5a:0a:0b:
2a:8d:da:c0:6e:6f:e3:e8:90:a5:24:42:6d:62:0a:
71:4b:fe:b8:00:2a:b9:99:22:af:15:10:d0:6f:f0:
c3:d0:fa:08:aa:04:64:a2:59:71:6d:fb:48:da:2a:
5d:67:6f:6d:25:3d:d8:6d:5a:11:58:5e:8c:d2:c9:
6f:dd:02:28:57:c6:f8:66:f2:b4:18:4b:30:4f:90:
3f:69:9f:21:b4:1c:4b:93:e5:7a:7d:78:89:7c:4c:
13:78:49:bf:c3:39:e8:94:56:60:ff:10:b7:e1:6d:
ef:c4:ce:86:04:6c:15:95:02:9a:01:d1:8f:b4:c4:
70:c1:d8:26:cd:c7:17:e3:bc:73:ed:97:a0:c9:68:
fb:25:6c:62:c2:11:26:f8:d4:23:a7:05:c4:d9:10:
e3:d5:3a:3b:08:14:96:e3:9d:c1:5a:2f:ce:9d:a8:
d5:9d:47:3a:07:64:81:74:4d:1d:7b:71:53:89:9e:
e4:20:1b:3d:3a:05:4f:f2:6e:02:ce:92:27:9e:1e:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:56:B1:34:6A:E9:79:45:98:05:82:E0:5B:EA:37:79:84:6B:F2
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0e:4d:2f:f9:3e:18:5d:de:32:00:46:46:fa:0f:db:89:80:
69:d2:07:f7:e6:df:f2:0f:b9:27:d1:0f:c5:a3:88:b9:10:9e:
44:3d:88:46:bf:1f:0c:80:39:f4:a5:69:c8:35:aa:02:b0:8b:
2c:ed:93:95:72:70:fe:cb:6b:8e:a1:43:2c:a2:5a:5a:1f:50:
d1:fc:98:44:b4:60:72:5e:98:99:e5:85:7a:31:ec:64:73:fa:
0c:a3:48:c7:c6:fe:a3:99:63:e0:1c:6c:b1:c5:34:b6:50:53:
0d:a8:fe:57:85:cd:5e:f4:04:ec:8b:d0:69:5d:5e:db:46:79:
c3:58:41:c3:e2:a0:9d:da:35:0b:68:69:89:5a:3b:51:4f:c8:
3f:e0:d3:08:1f:1e:32:43:56:53:cf:0e:7e:80:e1:09:11:46:
cc:25:81:b6:16:cd:53:56:33:d4:91:61:ff:46:51:f4:8c:a2:
43:f7:51:c4:d3:02:6c:27:44:ea:a4:8b:19:23:16:3c:4b:c2:
b6:f5:c1:08:57:0b:a7:62:5e:ec:b3:e2:63:ab:17:5b:97:40:
f3:58:a4:89:33:66:ec:f6:ad:4d:23:9c:02:d7:d1:64:44:72:
ab:5c:83:14:f5:ba:28:bb:7c:06:e7:68:bb:02:b5:56:73:e8:
25:12:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:15 2026 by rpki-client