Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: ZTQfPuuvetGhlmhR2hrRkzC6xq9QXLG3tBqKVSMW6dE=
Subject key identifier: 84:A3:16:DF:A4:DF:C6:8D:07:43:0A:7C:FC:01:C5:A9:24:0B:11:3B
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019F92B684551B3D544808DC64C2DE2C3600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 06:01:02 +0000
Manifest this update: Fri 24 Jul 2026 06:01:02 +0000
Manifest next update: Sat 25 Jul 2026 06:01:02 +0000
Files and hashes: 1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: U21AzJURhINQ/3Ctq9GeYjDtYoln6JHvgRaO4Sp5YGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:84:55:1b:3d:54:48:08:dc:64:c2:de:2c:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Jul 24 06:01:02 2026 GMT
Not After : Jul 25 06:01:02 2026 GMT
Subject: CN=84a316dfa4dfc68d07430a7cfc01c5a9240b113b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d9:20:96:a5:d3:6e:b0:f3:35:2c:70:5d:a0:
1f:5c:60:6e:fc:c3:85:3f:38:03:f3:d4:37:c7:5b:
aa:45:52:ce:db:6b:c5:b3:a3:c4:af:64:fc:d5:a7:
06:39:92:a0:2f:04:51:be:12:fd:3b:f2:ee:31:c3:
cc:57:6c:16:5b:3d:8b:69:83:67:1c:06:40:8b:bb:
6e:93:f5:38:43:03:6d:dd:94:82:6e:e8:b9:c1:9c:
d3:34:f1:03:82:d2:df:00:b0:be:0f:fc:81:2c:9d:
09:e2:23:67:8e:30:e7:37:69:76:d4:56:cf:80:a5:
de:b4:57:6a:c1:b1:ef:28:8d:19:7f:d7:6c:76:a2:
5f:bd:eb:6a:4c:93:fe:a7:9a:d3:ea:97:76:10:5b:
9d:47:e9:45:3e:e0:59:4a:32:b9:c1:48:22:67:c5:
e2:98:e4:f4:0f:43:64:b2:a6:9d:5b:3e:a3:f5:0e:
8b:1c:d3:22:d8:f3:1f:1b:eb:de:b7:c5:28:f8:e2:
4a:dd:f9:a3:45:4a:a7:4a:d7:4f:d3:b9:1a:41:24:
ce:95:36:4e:8e:7c:42:12:5d:fd:f9:df:83:77:1e:
d5:be:75:0a:c6:ec:08:63:55:a0:0c:2f:2e:55:f9:
cc:41:3b:63:f1:39:b3:96:73:aa:2d:a4:a0:1c:c7:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:16:DF:A4:DF:C6:8D:07:43:0A:7C:FC:01:C5:A9:24:0B:11:3B
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2c:29:7f:74:38:1a:85:a6:5b:70:7a:7d:7f:53:6a:d3:92:
7b:43:a0:e6:44:60:d8:a9:67:e8:39:b4:72:b0:aa:e1:4b:4a:
57:e4:fd:77:10:9a:35:df:b5:11:e1:d8:64:14:25:33:77:82:
8c:93:fa:76:de:5d:c7:e7:3c:ac:1c:49:64:5f:fa:50:b1:c3:
ed:d0:b7:6d:b4:4e:f5:25:3b:36:a5:82:5d:27:f2:f7:2b:cb:
e9:0b:b9:5c:de:cd:97:e6:24:df:d3:32:c2:7d:ac:62:4a:44:
4c:56:20:15:5f:78:0f:d0:e0:20:78:7b:ae:5c:e4:f6:52:fc:
e9:62:e1:15:47:3d:f1:96:7b:8a:fd:44:28:60:c1:e9:04:b3:
63:cb:f5:ea:94:8a:87:da:26:be:79:68:a2:44:e8:e0:68:3a:
99:c3:1a:58:c0:bd:bb:69:d8:b6:7d:ec:23:a2:bd:c3:8d:67:
a7:63:67:78:29:5a:2b:b7:6d:a3:95:cf:a1:41:a3:36:6b:46:
90:1e:90:c0:64:0a:ca:7e:ca:08:06:a1:56:de:a0:db:9c:ea:
27:4b:82:96:dc:2c:94:67:ea:4e:7b:d6:fe:b3:25:f9:c2:71:
bc:5b:7d:d2:98:95:a2:f8:3a:f1:3c:53:38:9c:86:97:03:e6:
51:d7:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:50 2026 by rpki-client