Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
File: B45GPzbEf3arfBlqf17dTxvtpkI.mft (raw, json)
Hash identifier: BW/wvDwp6v7r9lG79i4XQVFsplx3ILbU+hXasWCdBio=
Subject key identifier: AE:6E:DF:51:6B:5E:FF:F1:76:97:24:AC:1A:B1:EB:43:D1:BD:D9:CA
Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Certificate serial: 019D28BBCF88BE9012C1961CEA682887A5BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
Manifest number: 0187
Signing time: Thu 26 Mar 2026 06:01:30 +0000
Manifest this update: Thu 26 Mar 2026 06:01:30 +0000
Manifest next update: Fri 27 Mar 2026 06:01:30 +0000
Files and hashes: 1: B45GPzbEf3arfBlqf17dTxvtpkI.crl (hash: nj8M5wBkybJtpRaAqoqDiLTIFNOvO4Jbn2NplB1PBSY=)
2: HCc-JQq_ncyyMZgwbPkScWYwYoA.roa (hash: tO96nEVj3QmKqJSTcBkgQB4nSdHREh8qiZML40xBMz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:cf:88:be:90:12:c1:96:1c:ea:68:28:87:a5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Validity
Not Before: Mar 26 06:01:30 2026 GMT
Not After : Mar 27 06:01:30 2026 GMT
Subject: CN=ae6edf516b5efff1769724ac1ab1eb43d1bdd9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:6e:f1:8a:6e:ce:19:ec:29:a2:fb:8e:ac:
f6:d8:d7:fb:fc:24:5b:21:a1:7b:91:6b:ea:51:bd:
15:ab:a7:f8:fd:99:be:33:8a:c7:d7:ba:c6:5f:c6:
ab:14:1a:49:ee:13:73:12:3b:2d:ca:3a:b4:64:4e:
86:4f:82:9e:35:21:4b:86:4f:fb:88:c3:53:00:f7:
a7:d7:1e:90:39:9d:dc:38:83:a7:cc:3d:17:01:01:
c7:39:30:e7:08:3c:76:07:74:d5:46:c2:89:45:ec:
e1:42:ff:9d:68:87:21:ff:72:cd:29:d7:a5:3b:6b:
1a:08:67:44:61:c2:ee:f7:29:55:7f:1c:d2:79:4d:
de:55:97:55:35:a0:05:b0:28:34:76:16:bf:a5:87:
ca:cc:34:98:a3:de:4e:a0:50:c9:67:2a:1d:99:98:
9d:3a:20:4d:e5:58:15:ac:87:99:42:15:33:cd:89:
e1:20:56:a1:32:f7:5e:36:8e:99:5d:4d:a5:15:02:
91:94:75:e1:ac:51:3a:ce:c3:03:1e:79:03:23:c4:
64:cf:58:de:f6:5f:a4:bf:6b:df:6c:f8:1e:5e:03:
4c:07:7e:ea:f5:d6:59:51:00:09:d0:38:f7:3d:ed:
11:11:f6:74:aa:61:47:a1:64:18:1c:ed:d8:d3:aa:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6E:DF:51:6B:5E:FF:F1:76:97:24:AC:1A:B1:EB:43:D1:BD:D9:CA
X509v3 Authority Key Identifier:
keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:1e:b7:18:1c:d4:b9:aa:89:89:f7:d1:db:ee:52:a3:9f:
0f:de:26:3e:25:00:1a:27:e6:db:47:98:f3:26:dd:8b:be:19:
b2:86:e3:08:24:5b:59:98:5c:4d:00:48:9d:b4:02:94:a2:a7:
52:b8:f7:a7:f0:de:b7:ac:45:f0:9b:3c:46:19:e5:60:a1:5f:
7d:30:17:09:5c:b6:f1:a6:ce:28:6d:04:04:c4:d7:43:84:10:
05:df:e8:5b:7a:14:0b:21:d2:0e:98:c8:72:94:49:22:5c:54:
fa:6a:49:72:b0:a4:c2:eb:a4:f4:a6:bd:98:15:82:c7:00:90:
3f:22:45:35:1c:b7:f4:cf:c6:e2:ee:66:4f:7b:89:f0:01:16:
38:9f:50:e6:ce:ea:5d:29:0b:17:03:67:e8:4a:fd:08:6b:ea:
b8:21:ae:fe:ac:e3:4c:ca:51:8c:e6:75:ab:d1:0f:05:82:61:
88:44:ab:2f:ab:55:7f:a0:45:13:99:92:c0:86:ea:d1:cb:b9:
4b:34:cc:91:81:b6:13:f3:40:29:9c:5d:9a:a2:41:80:e3:44:
1f:fa:22:d1:1e:95:4f:ac:f8:f2:2e:50:49:06:29:e7:d4:bd:
07:54:58:dc:f8:5f:1f:50:ef:8f:4c:bb:be:47:8d:9a:f1:5d:
20:cb:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:08 2026 by rpki-client