Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: 7kW/JLQ8FpZAZP3fow2CvtAywxdQvcLIlpaw4K8Gf+U=
Subject key identifier: 89:21:F1:25:1E:E4:A7:E9:C7:A0:62:68:0C:6F:16:02:84:5F:85:24
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 019E1BD8DE1C3896BD7746ADCA9E43505B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 11:00:57 +0000
Manifest this update: Tue 12 May 2026 11:00:57 +0000
Manifest next update: Wed 13 May 2026 11:00:57 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: VfdLIylMKLVB7sSHz/Y7kvdzRDQMbeOiEwLSd0P5pho=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:de:1c:38:96:bd:77:46:ad:ca:9e:43:50:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: May 12 11:00:57 2026 GMT
Not After : May 13 11:00:57 2026 GMT
Subject: CN=8921f1251ee4a7e9c7a062680c6f1602845f8524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:73:37:8d:31:e7:35:6d:87:02:48:cf:85:
d0:53:c2:2b:5e:f8:a2:3c:f5:bf:78:2f:ed:70:64:
ab:d2:df:ab:de:c0:4c:63:0a:a8:c5:00:cf:6a:73:
1e:7c:4a:2c:68:ce:46:d6:3c:c9:94:fa:22:18:be:
5b:9e:0e:21:08:22:cc:e1:20:f4:e0:74:85:44:72:
14:7f:79:8b:0f:cd:ef:f3:e1:94:47:c6:65:e3:51:
90:05:92:d9:76:3d:30:d5:16:d5:58:22:b9:8d:83:
61:94:fa:76:7f:f9:11:fa:10:1a:43:aa:2d:5e:ae:
df:ae:f5:99:21:9c:73:ac:8c:b5:49:df:88:cb:bf:
b7:f1:9c:31:04:2a:70:03:be:1b:b1:88:ad:d0:b0:
97:28:80:8c:34:8c:8d:53:32:72:bd:30:38:1f:28:
87:13:93:cd:c7:97:29:d6:de:d7:5b:a4:39:7f:ed:
42:21:b7:ce:8e:95:79:6a:41:4c:03:0f:c3:08:a3:
a7:29:22:8f:71:26:bd:e6:48:21:db:3f:7e:76:55:
b4:16:51:2e:14:84:b4:d6:3f:ea:ff:53:b1:5f:93:
38:b7:4d:a3:b7:48:24:af:d2:ce:93:1d:ee:06:09:
b3:1e:d4:1c:6e:fb:66:5d:82:9d:59:51:61:e9:30:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:F1:25:1E:E4:A7:E9:C7:A0:62:68:0C:6F:16:02:84:5F:85:24
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:a2:9a:ec:4b:25:cd:18:13:50:cd:3b:c1:99:a8:91:00:ed:
d7:8c:68:3d:4a:6c:a7:e8:77:d8:16:01:c8:1f:61:14:70:b3:
93:68:01:47:64:f3:8d:ca:fe:bc:06:db:84:2e:04:8c:44:e3:
6f:35:25:bd:01:d8:b7:45:92:49:6f:53:e8:a0:b2:15:9c:10:
ec:a3:0d:ed:6a:ac:f3:8b:2e:d0:95:7f:85:27:06:55:8e:87:
2e:e9:80:11:b9:3a:2d:cf:99:f1:ab:94:9d:ae:26:24:7d:2c:
14:a4:14:2e:c0:3c:a1:84:d2:f8:dd:bc:36:c6:7a:49:d0:6c:
4d:f7:88:b9:4e:3c:ea:eb:91:32:dd:a5:f2:0d:f6:01:d6:f3:
1a:cb:3f:aa:ff:40:dc:26:fd:6c:2f:86:57:27:d7:bb:0a:7f:
60:78:64:51:93:e2:b3:ba:22:1b:29:f5:49:ee:8c:85:31:eb:
7b:11:20:5f:23:20:5a:5e:7f:25:5b:43:69:14:f5:2b:d1:bc:
b3:2e:da:81:cb:e2:28:6c:20:c1:d8:16:de:04:f2:60:bc:8c:
09:be:88:86:90:e6:5a:42:52:13:8a:ab:3a:62:df:d8:f5:6b:
27:e2:bd:b4:3e:45:e3:e4:24:08:b7:77:be:5b:dc:19:3b:cd:
f1:46:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:09 2026 by rpki-client