Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
File: B45GPzbEf3arfBlqf17dTxvtpkI.mft (raw, json)
Hash identifier: Xt22wNZY+vXMQIrbxyv53+nPlszqhpKo6AKBNZyE6Vc=
Subject key identifier: 04:D9:FE:96:AB:1D:63:30:A3:A8:AC:6A:1A:AE:A9:A3:DE:7A:E5:40
Authority key identifier: 07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
Certificate issuer: /CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Certificate serial: 019E1DFE4081DBE79EC717B74FC6A4F2878C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
Manifest number: 0206
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: B45GPzbEf3arfBlqf17dTxvtpkI.crl (hash: XM0LhnxnKJSijMNrmYs0G0+D85zx7Cvboh67efgt184=)
2: HCc-JQq_ncyyMZgwbPkScWYwYoA.roa (hash: tO96nEVj3QmKqJSTcBkgQB4nSdHREh8qiZML40xBMz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:40:81:db:e7:9e:c7:17:b7:4f:c6:a4:f2:87:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078e463f36c47f76ab7c196a7f5edd4f1beda642
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=04d9fe96ab1d6330a3a8ac6a1aaea9a3de7ae540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:88:56:3a:21:3c:69:d5:e0:31:79:b1:dd:
9a:78:ae:99:81:b1:17:67:af:03:d5:17:91:cc:f5:
12:7d:c6:d5:ce:60:80:94:48:a2:ed:80:66:8c:30:
d8:37:4a:69:c6:49:e1:6e:92:27:83:b1:db:77:92:
d6:cc:35:99:50:94:f9:ab:b8:df:b6:db:75:ea:31:
dd:5f:28:cd:71:70:16:11:cb:ed:b8:0b:e6:03:03:
11:3c:1b:fe:5f:2a:9a:16:27:29:51:af:e7:11:bd:
f0:b0:fe:b6:af:0d:36:2e:a8:9e:c6:5f:ae:78:cc:
82:fe:0f:b8:48:5b:08:f6:15:9a:a4:de:b1:76:ea:
53:e5:35:43:40:2d:16:2e:42:7d:61:1e:2a:6e:ab:
8b:1c:d5:a6:a8:31:79:fb:7e:a3:8a:d6:10:65:c3:
ed:06:a5:3f:2c:92:cb:7e:7a:25:48:57:9a:07:bd:
ad:3b:7f:df:1b:a6:5f:84:b4:29:66:c5:15:81:98:
c2:d6:4d:c6:c3:8d:5b:5f:4d:6b:50:1b:fd:d4:9f:
d2:7c:5f:0d:88:ff:e2:81:03:da:eb:87:cc:fd:ab:
51:3e:09:de:fa:ff:23:55:69:82:bb:ab:53:e5:e0:
bd:02:c7:3d:ef:8b:7d:45:6a:42:ce:4a:2b:20:65:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D9:FE:96:AB:1D:63:30:A3:A8:AC:6A:1A:AE:A9:A3:DE:7A:E5:40
X509v3 Authority Key Identifier:
keyid:07:8E:46:3F:36:C4:7F:76:AB:7C:19:6A:7F:5E:DD:4F:1B:ED:A6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B45GPzbEf3arfBlqf17dTxvtpkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/994b56-2f0c-4908-be47-81f7f7b93300/1/B45GPzbEf3arfBlqf17dTxvtpkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:20:c6:76:ec:71:1c:72:bc:40:78:50:96:dd:94:a3:5e:e4:
93:a7:e5:16:5c:32:a8:b1:a2:7a:17:cb:29:e4:c9:aa:ad:68:
a7:36:d1:09:79:17:07:aa:8a:c4:7c:0e:72:72:0f:06:d1:75:
1b:04:33:41:dc:6a:2c:09:bb:ca:a0:19:fa:d3:84:3c:7c:7c:
58:f6:42:95:4d:ec:a8:a4:16:e9:6a:05:e2:59:85:ef:c2:85:
a8:66:c6:f2:bb:69:c3:b4:fe:16:06:62:ec:b8:98:b9:d4:02:
7c:27:17:04:98:5c:00:82:4f:47:ac:f9:62:95:80:46:f8:f3:
24:c2:66:0f:0d:df:f3:a0:b4:70:61:28:b2:e4:ef:24:27:78:
df:a1:7c:79:3c:c9:a4:61:6f:e5:76:fb:36:4f:ad:49:44:63:
f1:ec:ea:de:cd:8f:cb:bc:57:9a:60:05:b5:09:50:0e:d4:99:
28:c6:4a:65:34:30:d4:ac:df:29:3b:81:4a:20:89:c0:fa:44:
05:17:0b:48:28:32:bc:1f:a6:c1:2c:c7:79:56:9e:fb:d9:29:
2d:54:64:0d:7c:c4:a7:24:96:90:d8:ee:5e:67:dd:83:51:2f:
62:a7:44:66:53:2f:5b:93:d9:90:62:fe:b6:03:6f:e0:52:63:
d4:31:2b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:03 2026 by rpki-client