Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
File: B45GPzbEf3arfBlqf17dTxvtpkI.mft (raw, json)
Hash identifier: mr5ubFeoiAdV8VNOCHMO3pzwkRwD3yGRhFGGYyinQ64=
Subject key identifier: AA:BF:00:6B:28:68:E3:4E:3C:39:D9:AA:55:79:FB:24:9D:33:0F:55
Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Certificate serial: 019F90C7B794003E23CD218F5B399953C5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
Manifest number: 02C6
Signing time: Thu 23 Jul 2026 21:00:35 +0000
Manifest this update: Thu 23 Jul 2026 21:00:35 +0000
Manifest next update: Fri 24 Jul 2026 21:00:35 +0000
Files and hashes: 1: B45GPzbEf3arfBlqf17dTxvtpkI.crl (hash: u+X0QLyvr+zSHLJOib+3x4IovJho7++9/dwbVqpJ5P0=)
2: HCc-JQq_ncyyMZgwbPkScWYwYoA.roa (hash: tO96nEVj3QmKqJSTcBkgQB4nSdHREh8qiZML40xBMz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b7:94:00:3e:23:cd:21:8f:5b:39:99:53:c5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Validity
Not Before: Jul 23 21:00:35 2026 GMT
Not After : Jul 24 21:00:35 2026 GMT
Subject: CN=aabf006b2868e34e3c39d9aa5579fb249d330f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:f8:5f:7b:fe:27:c0:fc:57:c6:40:08:9c:
91:dc:74:ef:c9:68:04:b5:0f:84:78:8c:e2:0c:ab:
04:11:3b:20:41:28:54:9d:a4:c5:29:5f:3f:9e:25:
dc:3c:9a:70:77:9a:87:34:cf:89:75:12:18:67:b8:
cc:5c:85:ae:e2:04:84:1f:bb:fa:5b:14:7b:8a:ce:
6d:79:30:7c:29:eb:a8:bb:99:f8:e5:66:82:15:4d:
01:25:14:82:1b:fd:a6:03:a4:77:cd:03:d0:35:54:
f6:2d:e6:f7:fb:6c:1f:98:b7:d6:b8:d2:6d:e5:e5:
cb:98:44:25:13:0e:54:5d:6c:44:ca:9f:8b:ed:a8:
f1:6b:98:39:40:f2:e4:a4:cc:5a:1f:cf:ed:5b:be:
6d:36:5b:82:d3:df:4a:58:3a:65:9b:b1:6a:82:e9:
eb:22:de:e3:82:9e:97:72:4c:c8:db:50:b7:a1:0f:
18:ef:41:a3:0b:34:56:99:e4:90:38:e6:a2:56:dc:
f1:52:97:53:80:1c:e8:f7:22:d2:dc:c3:91:61:7e:
39:b8:14:43:fe:4e:9f:70:ab:f2:c9:d5:82:96:b6:
8c:c6:75:89:69:bd:2a:21:38:d2:8b:6e:06:70:03:
a4:0a:03:71:04:6c:c1:b1:2f:5c:e5:3c:ea:86:cf:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BF:00:6B:28:68:E3:4E:3C:39:D9:AA:55:79:FB:24:9D:33:0F:55
X509v3 Authority Key Identifier:
keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:14:04:f9:6e:5e:5b:26:31:4c:3a:33:39:84:17:18:84:74:
bd:cc:21:5e:8b:c6:e5:4b:43:68:3d:29:47:5b:0b:f4:54:78:
30:70:6b:13:f1:36:66:03:79:45:36:60:08:74:77:00:bf:d2:
90:72:b2:5b:e6:eb:e1:2a:88:ae:59:70:8b:18:34:61:b1:6b:
6f:68:b8:c4:62:c6:1d:be:3e:f4:6d:40:57:0e:c2:6f:7c:74:
21:b6:2f:5e:0c:f1:6f:35:fe:0f:ee:a4:d6:30:39:64:7e:81:
f0:3f:57:d6:5d:5b:86:4c:81:52:f6:a2:38:f8:10:92:75:8a:
59:fb:d3:66:c1:bb:23:44:e7:dd:dc:02:38:62:40:d1:c9:10:
16:dc:80:94:ed:0f:20:4d:05:2d:b1:ee:81:01:e0:29:2d:6f:
3a:af:1b:19:47:79:9a:b6:5e:c7:f2:c1:cb:d2:08:98:7b:28:
86:ad:55:d6:94:c2:c4:a2:72:27:c5:91:47:dd:c2:20:19:eb:
59:f8:b4:cb:cf:fc:8f:47:df:57:f1:d2:31:c7:93:12:23:bf:
7c:7f:03:8d:d9:63:d1:23:6b:8b:a1:16:7a:52:7a:a6:8f:24:
b7:b8:e1:a8:c8:c5:90:44:ee:2d:46:5e:bf:c0:87:8f:31:99:
bd:38:b1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:48 2026 by rpki-client