Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: OjAmgLh6UySlIwzeVUeqR11DJ0h60Rg3VD0Rd1Yj7oE=
Subject key identifier: 38:2A:83:C0:93:18:E2:DF:59:28:31:E4:65:5F:DB:DD:E8:C2:9E:3D
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019D26CD75A210EF96BBE4CFFAF511E0A4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: WXQLuTfRskmcc4/NTxHyZmNckWpLQ2fybczEoFmgTPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:75:a2:10:ef:96:bb:e4:cf:fa:f5:11:e0:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=382a83c09318e2df592831e4655fdbdde8c29e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:51:90:9d:92:85:08:1f:5b:08:56:97:b0:
d4:32:11:c8:67:b5:c3:ea:af:15:b8:7c:fc:3e:51:
64:85:58:ba:ce:33:63:15:68:cd:0d:7b:ec:ee:d5:
11:af:b2:2f:86:11:73:f4:28:32:22:18:bc:45:8a:
74:81:34:02:81:6c:fb:b6:7e:1f:6b:ba:6e:32:30:
b4:cc:8a:b3:61:5d:6e:b5:af:cf:d9:8f:e1:dc:5b:
18:ea:ce:8a:f8:c2:f9:bb:a5:b9:44:d8:76:e2:db:
a1:ce:be:57:c3:c2:34:b9:5a:14:81:d2:d1:d7:79:
b1:0a:bb:5b:cc:27:c3:57:9c:4b:90:f3:a9:87:8d:
5e:0c:1a:68:5c:f9:e2:43:05:0c:45:98:9c:aa:37:
9e:5c:88:f1:8f:fd:6b:04:11:6b:41:e4:b6:20:e8:
35:89:d0:40:2d:10:3d:90:ee:65:f8:bd:ec:c6:bb:
ae:37:27:a1:76:85:07:b6:3f:18:4c:b7:d3:9a:21:
2f:b3:09:07:df:52:97:d2:93:03:c4:dc:8d:c3:c2:
30:7b:b3:ef:84:3e:3e:58:0e:a1:71:7f:c9:67:2a:
06:a4:15:5d:43:ad:32:cc:75:8b:71:c4:61:79:b8:
52:5e:24:dc:37:71:be:0b:16:bd:e0:02:32:71:8a:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2A:83:C0:93:18:E2:DF:59:28:31:E4:65:5F:DB:DD:E8:C2:9E:3D
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a5:86:ba:b2:54:78:c3:cb:7a:19:7a:51:ac:54:fd:6b:70:
6c:7b:ca:de:03:29:4f:72:5f:cf:50:58:48:cc:b7:25:21:d0:
dc:d5:91:60:cb:c0:22:fa:19:43:3a:61:24:dd:7d:76:14:ab:
17:e2:3d:57:b5:7c:d3:23:64:b2:10:c5:39:36:2a:72:72:6c:
db:b9:d2:bc:d4:c0:0e:05:e0:ac:9d:6a:47:40:e4:f9:19:a4:
9a:45:11:f3:26:80:65:98:9a:8a:a6:a3:9c:c4:5d:f8:2a:6f:
b3:f6:f8:de:70:b9:9f:5a:98:65:13:f5:09:cd:80:b0:95:49:
9b:09:6c:c1:d1:be:e8:85:97:bb:5e:39:36:a7:2f:87:8b:b3:
f9:a3:6a:3d:4e:aa:9a:82:2a:4a:10:3f:3a:b4:e0:ef:a6:a5:
50:40:28:0b:45:d5:8c:1d:26:75:27:d7:fb:09:47:ad:d0:28:
3d:6b:ab:b3:e1:61:ca:35:ce:04:41:40:20:a0:6f:c8:c3:13:
76:78:c2:fe:d6:01:7d:65:d8:d0:fd:ec:b9:bc:46:1a:b1:6e:
d5:b1:b7:e7:43:19:e5:32:f2:47:ea:03:32:1b:84:13:9d:ef:
31:3e:0a:a7:ee:67:38:b1:a2:1b:fa:bc:f6:75:aa:a8:b1:99:
2f:3f:a3:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzXWiEO+Wu+TP+vUR4KTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTYwZTNlNzJjNjA3OWEwNGU3ZDFmNjEwM2I5ZGY3ODk3
OWE1MjIwHhcNMjYwMzI1MjEwMTMyWhcNMjYwMzI2MjEwMTMyWjAzMTEwLwYDVQQD
EygzODJhODNjMDkzMThlMmRmNTkyODMxZTQ2NTVmZGJkZGU4YzI5ZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss5RkJ2ShQgfWwhWl7DUMhHIZ7XD
6q8VuHz8PlFkhVi6zjNjFWjNDXvs7tURr7IvhhFz9CgyIhi8RYp0gTQCgWz7tn4f
a7puMjC0zIqzYV1uta/P2Y/h3FsY6s6K+ML5u6W5RNh24tuhzr5Xw8I0uVoUgdLR
13mxCrtbzCfDV5xLkPOph41eDBpoXPniQwUMRZicqjeeXIjxj/1rBBFrQeS2IOg1
idBALRA9kO5l+L3sxruuNyehdoUHtj8YTLfTmiEvswkH31KX0pMDxNyNw8Iwe7Pv
hD4+WA6hcX/JZyoGpBVdQ60yzHWLccRhebhSXiTcN3G+Cxa94AIycYqVpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgqg8CTGOLfWSgx5GVf293owp49MB8GA1UdIwQY
MBaAFAdWDj5yxgeaBOfR9hA7nfeJeaUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTct
ODIyMWQyMTQzNzk2LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNjk5OGQtOGNkOS00OTkzLTlmZTctODIyMWQyMTQzNzk2
LzEvQjFZT1BuTEdCNW9FNTlIMkVEdWQ5NGw1cFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqWGurJU
eMPLehl6UaxU/WtwbHvK3gMpT3Jfz1BYSMy3JSHQ3NWRYMvAIvoZQzphJN19dhSr
F+I9V7V80yNkshDFOTYqcnJs27nSvNTADgXgrJ1qR0Dk+RmkmkUR8yaAZZiaiqaj
nMRd+Cpvs/b43nC5n1qYZRP1Cc2AsJVJmwlswdG+6IWXu145Nqcvh4uz+aNqPU6q
moIqShA/OrTg76alUEAoC0XVjB0mdSfX+wlHrdAoPWurs+FhyjXOBEFAIKBvyMMT
dnjC/tYBfWXY0P3subxGGrFu1bG350MZ5TLyR+oDMhuEE53vMT4Kp+5nOLGiG/q8
9nWqqLGZLz+j5A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:49 2026 by rpki-client