Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: BGAFpL4juHBSaAXPssuWc0zvhKxVd7jRx5RERsFeO9o=
Subject key identifier: 6C:F7:58:75:FB:11:FA:34:5E:E5:5A:8C:6B:70:DC:36:44:BD:BB:98
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019D28F2645E416966C281DE44C42E33BFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 07:01:07 +0000
Manifest this update: Thu 26 Mar 2026 07:01:07 +0000
Manifest next update: Fri 27 Mar 2026 07:01:07 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: LYLcp2zQmUwS+BlPBeDEZYXspiSPgNIxwAsr6ifCW/k=)
2: n3ieUI2cLDKlu7-1mHlC00BGgvw.roa (hash: j3IdpiHDFCzlAJqG9D51WL/CfEe+aj4QEFw7yJEuwkE=)
3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:64:5e:41:69:66:c2:81:de:44:c4:2e:33:bf:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Mar 26 07:01:07 2026 GMT
Not After : Mar 27 07:01:07 2026 GMT
Subject: CN=6cf75875fb11fa345ee55a8c6b70dc3644bdbb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:6e:ee:84:79:c1:01:01:92:2d:ff:cc:2f:
97:fa:7a:ee:c1:7c:c0:53:7f:5a:fc:d7:ad:96:41:
2d:c5:2d:d8:7b:fc:fc:f5:75:c4:c0:3b:8d:fe:a8:
34:a5:86:5b:f9:74:ad:31:fc:b4:e6:a6:08:5c:20:
0f:05:6b:85:e5:09:a7:2d:fe:d0:48:77:4c:2d:31:
78:c7:eb:9f:aa:18:1d:93:97:84:77:d6:22:4a:72:
35:96:a5:af:a8:c1:1f:35:9a:b2:80:e9:40:5e:94:
7e:13:49:c6:7c:6d:5b:98:7c:ad:a7:8f:b6:09:93:
44:55:b2:69:cf:29:13:ef:31:77:e8:59:48:93:af:
6f:6c:0e:59:5e:4d:c9:7a:bd:8f:fa:da:27:76:77:
aa:d7:8e:79:14:45:53:b1:78:db:50:a7:13:44:04:
ad:96:60:74:3c:17:55:bf:7d:47:c2:28:27:5c:74:
f5:cf:b9:c2:0a:28:ab:18:12:8d:19:21:a4:8a:9d:
21:70:ba:db:74:1f:29:dc:f4:c8:f3:ce:f3:17:33:
95:41:e6:7a:2e:ed:c7:95:eb:c0:d8:8e:54:d4:30:
90:21:f8:70:4c:80:ed:37:8c:80:19:bb:62:18:f4:
82:d3:0f:e8:58:20:96:04:dc:36:26:33:b7:9d:d4:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F7:58:75:FB:11:FA:34:5E:E5:5A:8C:6B:70:DC:36:44:BD:BB:98
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:18:74:e0:fd:ed:a1:62:25:b6:5f:fe:52:40:58:ce:33:47:
f9:4d:f2:9e:6e:11:3d:8a:2d:ad:66:40:4d:a0:9f:e2:8e:38:
8d:47:8d:8d:a1:5b:82:cc:a5:59:33:85:ac:0f:63:84:67:05:
f9:c1:d6:5a:f2:b1:9b:cf:c8:49:4a:0f:05:7d:3d:a9:35:82:
0d:6d:d8:77:a8:f6:d7:b8:12:41:70:9a:b3:03:4c:2e:24:9e:
e1:81:98:3a:83:67:d7:8f:51:be:55:e2:4c:57:b5:57:d5:63:
18:6c:a8:df:a9:68:f7:88:4a:45:be:3d:2a:e6:d6:f4:21:8a:
4c:af:4b:d7:d4:4e:06:7a:cd:1c:18:d3:c4:a8:44:ba:e1:4a:
83:e8:3a:44:38:88:4d:2b:c5:ca:aa:d3:69:25:91:ee:07:c4:
e3:56:56:6d:6b:d8:56:9c:84:ef:2d:c4:c1:0f:9d:2c:ed:0d:
79:44:51:99:93:6b:31:ca:6c:ef:40:60:f3:c8:02:7e:45:6f:
94:5c:c8:4c:e2:c6:80:7c:74:47:04:7e:62:77:6e:d6:e8:a7:
e6:fa:52:14:65:07:fb:2f:98:d1:91:07:9f:14:b0:d7:04:8f:
cf:95:f4:3f:b5:b5:25:aa:d6:ee:80:7e:21:df:90:9d:41:dd:
58:15:02:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:08 2026 by rpki-client