Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: lhP0ZNds5sUaxR+QrPqwEvoF/0FovlSDGb2K6bpnGbQ=
Subject key identifier: 58:DB:BE:72:6F:13:20:66:99:D6:D4:2C:51:AA:8E:A1:4B:A2:6F:A8
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019F8F101BC8D90AB99FE4C57B4D07626DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 13:00:25 +0000
Manifest this update: Thu 23 Jul 2026 13:00:25 +0000
Manifest next update: Fri 24 Jul 2026 13:00:25 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: gj8VBgQizWf1N5F0oHVF9sGhv7DLONbfq6wWrik9SHc=)
2: n3ieUI2cLDKlu7-1mHlC00BGgvw.roa (hash: j3IdpiHDFCzlAJqG9D51WL/CfEe+aj4QEFw7yJEuwkE=)
3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:1b:c8:d9:0a:b9:9f:e4:c5:7b:4d:07:62:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Jul 23 13:00:25 2026 GMT
Not After : Jul 24 13:00:25 2026 GMT
Subject: CN=58dbbe726f13206699d6d42c51aa8ea14ba26fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:81:b2:09:ee:55:a7:cb:a9:61:cb:f9:6a:
d7:e9:66:62:b7:da:5c:dd:72:ae:33:17:a1:db:1c:
1e:b2:eb:7f:77:c7:9d:86:fd:dd:e3:86:e6:70:b6:
36:0b:be:65:e7:2c:cc:29:e4:2b:5b:32:d6:96:77:
0d:4e:bb:55:38:21:20:f2:b6:78:85:ea:db:58:ce:
ca:e4:66:a8:53:d9:9f:c3:d0:7c:f6:50:95:31:18:
b8:8f:1a:3b:8d:c4:d3:85:7d:30:ce:03:7c:3e:0a:
19:cf:67:7e:9c:d7:d4:11:58:53:0f:e5:38:90:41:
fd:74:f8:b6:d6:48:b5:91:47:60:d0:00:56:48:1e:
98:5f:7a:2b:76:9e:cf:98:73:27:c1:06:78:86:b3:
23:49:46:71:94:c6:1d:e9:82:8d:6b:ec:12:69:98:
ae:1d:80:93:b1:26:4d:56:f4:f1:46:72:7e:9d:8d:
89:28:f9:57:0c:56:05:a3:9c:21:2c:ef:51:f9:18:
63:80:6a:3e:da:f0:af:fe:f7:17:d6:58:b4:57:27:
dc:34:9d:76:f6:1f:47:2b:ff:e1:e9:49:3c:00:5c:
b9:a4:3e:63:26:f3:fd:66:1f:bd:11:de:81:2f:62:
42:1d:82:0d:62:a4:ee:25:1c:33:e4:d9:bd:37:3a:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:BE:72:6F:13:20:66:99:D6:D4:2C:51:AA:8E:A1:4B:A2:6F:A8
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c6:c3:76:e0:09:63:4b:e4:88:de:1b:53:5a:9b:f9:c8:25:
f2:1c:9d:65:d5:70:49:04:b8:d7:02:dc:9d:fa:2a:76:a0:c8:
4f:dc:a3:4a:f0:b3:9a:e1:ee:69:84:5d:5a:d0:bf:4b:76:3f:
ba:8b:0d:61:ce:11:f8:b1:af:78:c1:3c:46:2d:9d:28:14:04:
12:ff:58:cc:17:87:ff:08:ec:30:9f:4a:77:c7:2c:77:32:b4:
22:17:67:91:64:0c:5b:2c:a8:a0:99:2f:33:bd:14:9a:67:2b:
f4:85:28:e1:be:23:20:90:9a:d4:c5:c6:b0:1c:8d:c2:f6:a4:
f7:4f:b9:0a:9b:81:55:17:d6:b4:d0:06:1c:14:ab:ec:57:0a:
bc:70:ee:c8:1e:b6:f5:51:6e:35:7b:1b:58:fd:a9:e1:61:85:
84:b2:c2:f1:72:ba:0e:e5:7a:2e:de:2d:4e:9d:85:dc:d9:27:
14:54:92:55:77:9c:93:37:c1:b9:b4:96:d4:16:b3:35:9c:39:
45:b3:a7:93:c2:b4:0a:79:4f:c0:66:f6:74:5f:43:2a:dc:48:
25:1b:7f:6f:04:06:7d:ae:50:01:49:28:7d:40:78:70:80:57:
fc:cd:ba:7e:6d:0c:9f:dc:d1:14:fd:3b:9d:d9:46:1d:0c:50:
3a:ab:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:26 2026 by rpki-client