Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: DvspDOc7Pw04GOb9D2bESikeYJwyRGAdLKSAXDtZw/k=
Subject key identifier: 44:2B:C9:3A:D8:C4:04:0A:04:28:F9:D3:81:4F:FF:E9:BA:B7:8F:5C
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 01A0D124C40B1AEF1CED7779DD11CCEB7DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 02:00:42 +0000
Manifest this update: Thu 24 Sep 2026 02:00:42 +0000
Manifest next update: Fri 25 Sep 2026 02:00:42 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: K1z0lYqFbEIBbPUWSG9ZSHYsu1Sullb2RxhA5MvDr+E=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:c4:0b:1a:ef:1c:ed:77:79:dd:11:cc:eb:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Sep 24 02:00:42 2026 GMT
Not After : Sep 25 02:00:42 2026 GMT
Subject: CN=442bc93ad8c4040a0428f9d3814fffe9bab78f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:00:45:3e:53:45:56:c5:38:7d:36:d4:b1:
27:cb:73:f2:6a:90:37:f8:4d:fe:43:36:00:20:19:
c0:45:e5:51:21:4d:b3:ca:a9:5d:2a:4d:da:82:4d:
f9:28:9b:5a:c5:9c:89:e3:59:be:4e:e4:cb:3e:ce:
c5:65:30:4a:5e:e4:58:f4:af:0c:cc:76:af:73:0e:
b7:dc:31:25:4e:c5:ae:51:1f:d9:95:76:bf:ba:0c:
7e:27:f2:b7:11:80:ef:b8:97:ba:26:4a:c5:97:3a:
01:e8:d5:03:cd:64:00:49:ba:ca:01:95:2e:ee:ad:
16:6f:4c:5d:94:b7:ea:20:e3:d3:36:cf:b7:30:25:
ff:23:ae:95:fb:d6:c4:58:bb:bc:64:f9:4b:c4:4e:
77:32:49:39:e7:60:08:f8:5c:39:3b:34:24:91:7a:
cd:56:33:1a:09:ed:32:38:b6:44:1f:15:59:26:d6:
36:ad:cc:4b:25:b5:62:10:68:0a:55:1c:ff:5d:e9:
1a:b9:55:5b:ae:29:13:30:93:61:3f:a7:4f:86:e3:
60:8b:59:49:f6:33:3b:14:ae:21:6c:d7:1a:97:29:
22:ac:5c:ee:23:4f:fa:ed:50:b2:d7:c8:66:a7:f0:
0a:ff:08:80:91:da:bd:0f:c5:cf:5b:da:61:c5:d6:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2B:C9:3A:D8:C4:04:0A:04:28:F9:D3:81:4F:FF:E9:BA:B7:8F:5C
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ff:3e:4e:8e:45:21:7e:aa:4b:e5:f8:aa:55:c4:2b:96:1c:
50:08:03:58:20:c6:52:f0:ed:78:18:76:ce:a4:a2:28:b9:5f:
37:8c:ea:e4:58:21:35:b9:bb:eb:2a:b1:69:c4:ac:71:c2:9a:
79:07:8d:6e:31:34:db:38:31:49:cd:3a:f9:bd:e6:d0:ef:d9:
83:ed:53:80:59:95:17:e9:36:e1:41:22:d2:f2:fa:96:f6:22:
10:92:f8:fa:71:61:09:7e:1f:7e:6a:ee:c9:2a:59:53:11:56:
ba:91:b7:6e:93:57:75:f0:3d:95:cb:5a:44:47:c8:86:4d:5a:
db:15:9b:4d:6a:c7:1a:61:a1:da:9d:18:42:70:f0:92:5d:f2:
13:d2:7e:b4:18:17:eb:d7:11:5c:74:5f:dc:da:31:59:be:03:
b8:25:3c:eb:15:97:33:69:1b:96:63:5d:51:d4:bf:8a:08:49:
1c:89:3d:e5:2e:d8:41:9b:0e:fa:f9:8f:61:27:0f:e5:84:02:
92:16:f7:8b:fa:88:8e:d3:8c:11:07:10:e4:7c:27:5e:32:77:
38:1a:0f:d4:46:46:6a:eb:35:ce:e0:bc:69:b8:9d:cc:58:7b:
5c:d7:57:1f:de:5a:b6:cc:31:8f:97:b1:36:9f:d6:ba:3e:e6:
0a:50:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:08:42 2026 by rpki-client