Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: ICBU6ffahBNbPAffsMb2EbcHChHuXKAxWVcOnS28KEs=
Subject key identifier: 4C:E2:05:7D:70:01:93:3A:C3:D1:3B:8B:E3:FF:FF:B6:48:D1:63:F9
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 019D28847DF4A39B715452217ECA317606D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: Y1T8F3ifbg8v25eQWL2Roh1FSbu/9Z8927KahkcYiRA=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7d:f4:a3:9b:71:54:52:21:7e:ca:31:76:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=4ce2057d7001933ac3d13b8be3ffffb648d163f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:3e:8b:4d:10:6c:dd:21:17:3a:93:33:57:
64:e3:90:9a:17:f8:bb:82:e4:06:39:3f:06:44:5a:
2b:a8:20:f3:39:f4:1c:60:2a:58:8a:51:17:96:53:
f6:1d:c6:e5:60:36:c7:5d:4e:74:55:bf:47:94:01:
ce:7a:11:f6:49:45:2d:cf:45:7e:35:6f:c3:65:9f:
15:78:ec:dd:01:d3:a6:41:0e:10:bf:de:d5:54:d3:
8a:11:48:72:15:7f:c6:57:e9:4c:01:07:df:ba:5e:
32:9d:62:56:f5:5b:cc:4f:ee:f6:8d:42:d9:40:c1:
7a:31:6b:cf:b3:3e:dd:dd:ab:8c:4a:34:42:9a:28:
f4:a2:b6:88:f3:0b:43:17:c1:46:03:89:8d:c2:a9:
25:ed:2d:31:d0:0f:4d:f0:cb:15:c6:4e:e1:95:6d:
05:a7:48:6e:3a:cf:2f:2c:0e:db:ff:65:1c:35:ed:
fa:3c:82:4b:bd:44:28:e3:99:47:59:71:f4:7d:f3:
e4:8b:a1:3b:ea:6f:ee:1f:34:22:be:1f:1e:1e:1a:
d2:24:6f:35:b0:f1:6f:46:70:e5:03:9c:9d:cf:d7:
20:da:4c:88:4d:5a:06:6b:ad:e4:01:e1:68:ca:a8:
13:87:1d:ea:66:c1:ae:30:d3:1e:24:fe:de:2c:50:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:05:7D:70:01:93:3A:C3:D1:3B:8B:E3:FF:FF:B6:48:D1:63:F9
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:fa:3a:00:c3:20:57:a3:1a:13:4c:22:0a:0e:8c:1d:1b:dc:
52:33:ad:54:e2:72:59:7e:ba:2a:b0:1c:b0:e3:f6:f5:20:69:
ff:97:72:e8:04:90:1f:2e:f6:cb:34:44:57:f7:55:13:31:51:
12:39:8d:52:9c:5a:31:4f:28:1a:6b:b8:6d:06:08:c1:ea:ed:
ba:52:d1:bf:46:26:e2:5d:00:56:4c:b2:2d:1a:d1:9c:23:cf:
a7:1a:21:47:fb:c6:6d:c7:35:2e:c2:90:6a:d5:bc:6f:5f:e5:
46:d8:6c:23:07:55:09:1b:18:27:0d:7f:b4:9b:92:80:4e:94:
1a:b5:b9:d1:7a:17:55:83:f7:f3:73:53:46:7c:f7:3a:83:45:
58:02:fe:a4:75:8c:a1:db:0c:9a:f3:a7:de:77:37:dc:21:9e:
a6:48:3f:b4:f9:cb:d7:43:75:92:1c:d8:b4:e9:1c:cb:d1:47:
e8:33:42:ea:c7:ef:7a:c3:c9:3d:23:f8:8e:67:70:a6:a1:d5:
4a:a1:ab:31:5e:f9:3d:8b:23:92:32:ff:d6:e1:99:f1:3e:22:
44:bf:83:d6:11:79:17:e5:f6:21:cd:67:e5:a1:2a:d6:17:61:
f7:79:bd:cb:b2:1f:d7:ac:2b:45:e7:d8:f2:b4:24:04:ef:00:
2d:7f:1e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:52 2026 by rpki-client