Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: zk/VGDBOQBA0hactsyMkcEmk/9BskdMF7QlXDbNtmsA=
Subject key identifier: 42:CB:80:58:1D:6F:30:27:4F:9B:7D:A0:A1:F3:5A:86:FD:E6:00:2B
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 01A0E69A51AC53A132AA2D15938BAA6DBA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 06:01:08 +0000
Manifest this update: Mon 28 Sep 2026 06:01:08 +0000
Manifest next update: Tue 29 Sep 2026 06:01:08 +0000
Files and hashes: 1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: I1e0PVWH2oUvabMz8HlkC0S42k7Zcbemvwrb+KsqRV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:51:ac:53:a1:32:aa:2d:15:93:8b:aa:6d:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Sep 28 06:01:08 2026 GMT
Not After : Sep 29 06:01:08 2026 GMT
Subject: CN=42cb80581d6f30274f9b7da0a1f35a86fde6002b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:f7:4c:7a:b5:9c:32:1e:be:dc:d8:78:af:
c7:7b:a5:43:d1:1d:ce:03:80:4d:d7:c3:33:71:e2:
e2:f2:98:70:3c:41:83:0e:87:3a:ad:34:92:40:d1:
89:47:69:60:2d:40:52:e6:d3:6d:3f:1d:fb:31:76:
37:7f:9b:71:e5:b4:0b:52:78:af:ed:e2:6e:b6:95:
0b:7f:90:3d:6a:73:a8:7b:8d:99:57:d2:bc:69:dc:
fa:66:89:37:ea:ff:80:ee:8b:08:db:91:e9:a9:d6:
90:00:30:1e:87:6b:dc:fd:eb:c3:ff:c7:d3:83:4a:
f7:08:2e:e0:da:ca:34:90:67:69:77:2d:a7:4d:99:
09:f4:83:44:d1:e9:a0:41:32:f1:52:d1:64:e8:01:
c6:c1:78:8d:de:84:ad:45:5c:3e:a5:58:6e:d6:d1:
3f:35:31:93:c5:fc:83:0b:18:9f:b6:37:94:ac:77:
ce:9a:5d:b2:e9:3e:99:3b:9c:a0:87:40:ad:2d:30:
e9:27:56:6c:03:c8:21:91:87:63:09:e4:54:3d:3d:
95:09:fa:18:aa:68:e0:fc:28:d2:65:13:fc:2b:7b:
93:1e:87:3d:03:e7:4c:c1:4a:54:be:a7:a0:19:b7:
89:5c:5f:24:5f:8b:97:2f:bd:1f:1e:c4:03:f3:a8:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:80:58:1D:6F:30:27:4F:9B:7D:A0:A1:F3:5A:86:FD:E6:00:2B
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:e3:dc:5e:1a:15:a7:a8:a9:85:98:fe:c2:37:63:0b:16:
47:c2:cb:35:53:4e:87:ec:33:a8:22:03:9d:bf:71:b5:49:f6:
5f:38:9c:0c:7c:9c:dc:aa:9e:d3:f0:ab:70:d3:13:26:cb:b7:
8c:3e:a9:df:d1:76:c6:2e:3f:9e:2b:07:e4:17:4c:cf:e7:29:
7e:88:d9:77:ea:51:83:ae:6b:d7:19:e4:5a:8b:e3:08:3a:ee:
3c:b8:bc:94:c5:81:37:97:aa:c0:05:99:10:85:41:8c:27:18:
b2:4c:cc:65:f1:a9:03:02:70:73:a1:63:3e:8e:2f:dc:5f:f2:
d4:ad:8d:37:fa:6f:76:d4:e5:d2:61:19:23:f5:88:3c:00:9e:
e5:62:47:71:e5:fd:d0:70:f7:16:1e:4c:77:4d:fe:3d:52:79:
16:03:23:3b:0c:e5:f3:bc:7e:94:b1:df:f9:af:52:b3:32:c9:
35:4e:af:19:cc:f9:a5:da:e7:dc:d9:23:a1:cb:ae:a3:6a:93:
09:14:b8:51:2b:8a:35:d7:6d:df:53:f2:22:03:70:2d:f3:6e:
01:6a:c8:81:31:ad:41:52:c5:26:c9:99:2e:69:e6:ff:df:ad:
52:80:1c:a5:11:bd:7c:3f:97:b7:d0:87:0f:94:10:62:00:4d:
d6:9c:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:59:21 2026 by rpki-client