Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier: 6xznmu8ftkVMg5XxThSt3NzZU2uh0IoNJe3lcm8t8X0=
Subject key identifier: 92:45:B6:AF:63:99:B9:C1:14:E9:E9:D8:B5:49:59:33:B2:97:B6:BE
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 01A0DCBC0A47AC67526A0B28096486D02F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number: 1A7A
Signing time: Sat 26 Sep 2026 08:01:45 +0000
Manifest this update: Sat 26 Sep 2026 08:01:45 +0000
Manifest next update: Sun 27 Sep 2026 08:01:45 +0000
Files and hashes: 1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: ojUNcejPLSbMMuSTqw/21OzM5h//qNklsVRsqEGqUcM=)
2: D_VQ3qcRrE1RcGz3L2hiZ5fs0q0.roa (hash: 3nNJVROdH+6QiOLIHdge07W05M5mKR5oevvpsKwNQMQ=)
3: R2U_cQMFZM4-GXgQbDyShKrCAGA.roa (hash: Ag9S/vdQiIdyQgvSbtnRDnW1NQNHuWeD+J3+pdenpE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:0a:47:ac:67:52:6a:0b:28:09:64:86:d0:2f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Sep 26 08:01:45 2026 GMT
Not After : Sep 27 08:01:45 2026 GMT
Subject: CN=9245b6af6399b9c114e9e9d8b5495933b297b6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:5d:94:6d:cc:0e:af:1e:5c:28:43:40:73:
43:d7:bd:b8:57:69:73:ff:1d:42:d2:7c:d7:eb:f2:
33:33:4b:0b:78:25:1f:28:a8:50:14:c3:f1:08:53:
81:a8:33:24:02:ed:4a:83:04:1d:25:6f:3a:3b:c7:
36:c6:3f:ef:21:62:85:ba:2a:45:99:22:df:64:c7:
46:35:9a:59:06:ac:0d:ec:53:b8:cd:ef:8d:a8:61:
f3:db:cc:d5:70:f5:a4:94:46:a3:12:5f:78:07:06:
a6:62:7d:13:ae:20:36:00:fe:bf:38:33:e9:96:05:
ec:4f:0f:01:9f:98:32:9b:13:e9:5a:63:93:a8:83:
de:3e:d9:4c:ee:b7:be:df:3b:e5:75:00:e6:84:b7:
33:58:1e:18:57:11:8f:8b:83:be:5d:4d:90:5e:24:
3c:05:cc:9a:39:9d:f9:ea:c7:c1:d3:58:d8:fc:04:
1f:97:f0:f5:08:8a:3c:23:fc:86:a3:50:97:24:1d:
b2:95:7a:be:db:d1:1c:45:52:e8:9e:99:a0:cd:8c:
57:0a:c1:85:95:4f:ff:0d:c4:c3:ee:d5:fe:b5:29:
1e:e7:94:90:f3:dc:19:f2:73:54:30:20:08:6a:6a:
42:65:c4:a0:08:ab:fb:f5:84:ae:b5:10:43:b7:f8:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:45:B6:AF:63:99:B9:C1:14:E9:E9:D8:B5:49:59:33:B2:97:B6:BE
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:95:af:7a:53:cc:ff:b1:f3:70:d7:34:58:ec:7b:f9:7a:
b1:cb:8a:b4:72:f6:71:61:9e:d5:4e:fd:0d:73:d4:aa:67:56:
83:4e:99:6c:76:d5:10:5b:23:5b:40:5e:7b:bc:cf:ef:1c:e1:
80:a7:5f:54:7d:b0:78:9b:7f:96:d6:5d:97:d5:e0:86:48:c2:
7d:49:7b:95:d4:8a:78:ab:c7:97:04:48:8a:30:f0:61:82:7f:
0c:c2:90:3d:48:96:38:3e:63:f2:c2:5a:5f:cf:d0:05:b9:33:
f0:d8:d2:98:52:68:c7:49:09:88:9c:1c:e6:9f:35:cd:79:8a:
96:5e:30:4c:71:a3:63:e5:ae:f2:65:48:1e:62:b2:0e:4a:6b:
35:68:2e:a2:bc:68:23:a9:18:83:46:18:9c:3c:df:b3:b0:27:
49:f2:25:7c:54:85:8e:58:64:88:49:b1:30:49:24:66:cb:fa:
5c:d0:dc:36:d2:20:38:d2:a3:fe:dd:1f:3f:db:cf:06:4b:f7:
68:6f:13:16:b4:40:04:2e:50:f2:aa:c6:88:90:f6:64:b1:39:
47:81:69:23:c7:95:a4:ad:78:f2:7e:00:d3:0a:31:fe:ac:19:
9c:78:26:64:c2:4b:61:74:92:1d:c2:04:a9:89:91:5f:1d:0c:
8a:88:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:57:06 2026 by rpki-client