Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: Ocsuj+oR9elGBzZHENJ4ixPzKXXb2VQ+99abjpcvTfk=
Subject key identifier: 15:6A:20:C8:B9:F9:0A:0E:89:67:E9:5D:41:22:5A:5B:30:E4:5D:55
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 01A0D94CF339E3ED67ACC7B3A60DC23DCE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1A79
Signing time: Fri 25 Sep 2026 16:01:33 +0000
Manifest this update: Fri 25 Sep 2026 16:01:33 +0000
Manifest next update: Sat 26 Sep 2026 16:01:33 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: H8FPsgXtI0zB5mNHbNmGzaVUpmnoRCGThHpLkcpmc6E=)
2: n3ieUI2cLDKlu7-1mHlC00BGgvw.roa (hash: j3IdpiHDFCzlAJqG9D51WL/CfEe+aj4QEFw7yJEuwkE=)
3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:f3:39:e3:ed:67:ac:c7:b3:a6:0d:c2:3d:ce:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Sep 25 16:01:33 2026 GMT
Not After : Sep 26 16:01:33 2026 GMT
Subject: CN=156a20c8b9f90a0e8967e95d41225a5b30e45d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:0f:c7:2f:b0:15:8e:1d:55:32:27:23:78:
77:da:b8:ed:8f:4f:38:26:be:98:95:cc:a4:90:b1:
65:9a:03:57:c5:9a:f9:ba:3f:77:17:08:60:60:66:
93:29:4c:cf:71:3c:da:7f:93:9a:ce:b3:00:c9:ab:
b6:c1:ee:02:34:27:56:04:72:13:18:12:d3:ff:c2:
45:47:49:b7:ec:5a:ef:65:10:b5:11:a9:ea:ee:ad:
2f:80:67:fe:ce:4e:a8:2a:43:b1:de:0a:80:5a:ef:
c0:de:c0:48:75:43:4d:40:fc:03:5c:8c:90:b2:d8:
00:c9:b1:36:8c:c1:1b:20:99:58:46:0a:a0:5c:41:
c6:ff:aa:cc:02:6e:35:29:5c:3c:a2:1c:67:d0:8a:
0e:41:02:05:90:45:62:fe:04:71:c8:a4:e6:8d:cd:
e1:e0:1d:b1:70:3b:e5:4c:2d:42:a3:5a:49:0f:7e:
b6:86:a6:82:ca:d2:28:89:f6:af:94:f8:16:ce:0a:
d9:69:0f:29:86:81:12:f4:2b:87:4b:41:4b:fd:f3:
ec:c5:7f:95:61:a6:02:51:53:cd:c9:1c:bf:1c:b2:
f2:3d:75:51:0c:82:16:37:71:f7:f0:22:10:43:d4:
e4:32:67:e9:b8:07:6b:60:12:e4:4d:05:00:a1:13:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6A:20:C8:B9:F9:0A:0E:89:67:E9:5D:41:22:5A:5B:30:E4:5D:55
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4f:5b:62:bd:a4:a1:f5:4a:87:3c:57:1d:5f:53:96:25:19:
7a:c5:93:35:cd:34:77:ab:c2:33:dc:41:54:72:1e:ce:ea:f0:
43:60:34:a6:a1:33:4a:f1:47:39:89:5b:7a:65:49:93:bc:20:
4f:2f:27:97:54:fa:eb:17:d0:9e:ff:87:50:ee:7c:a9:17:10:
1a:a2:f0:e5:76:e7:db:48:0f:94:50:11:15:a5:e8:2d:80:fb:
22:55:52:53:8e:d3:a3:fc:f5:5c:bc:51:9c:b4:a9:b5:c4:e6:
7f:ba:eb:f8:fb:d9:f3:5d:b6:66:f9:3f:58:1d:da:be:83:b9:
27:51:58:c4:8a:c5:f2:51:73:6e:92:75:d3:c3:b0:f0:89:7b:
4f:f9:cd:61:29:35:8d:d4:17:0f:10:5b:0a:63:6d:58:a6:c8:
de:2c:9d:09:d7:79:31:be:2e:3c:28:7a:f0:c6:9b:90:4b:b1:
a0:ca:ae:4b:92:39:b1:4d:8f:3c:9b:e2:b1:66:fd:fd:13:9e:
59:6e:b7:bc:72:71:65:6d:0c:5c:40:7d:dc:d1:aa:56:8f:e3:
2f:f1:77:31:6c:e5:aa:96:e1:e2:b9:ca:3a:d8:15:75:09:1e:
73:17:84:ae:5e:b7:b7:f6:82:25:d8:f8:22:95:5c:71:2f:54:
0b:c2:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:04:11 2026 by rpki-client