Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: R5E/g1Qx9+66hUDdsz0qEnuBD+GTXDBBs4ZIORMW11U=
Subject key identifier: 7A:FA:90:90:4B:46:C5:D2:0D:F8:37:F0:24:6A:13:07:83:97:CA:00
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 019E1E34E0F3757D88ED9229359540BAA89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 190F
Signing time: Tue 12 May 2026 22:00:42 +0000
Manifest this update: Tue 12 May 2026 22:00:42 +0000
Manifest next update: Wed 13 May 2026 22:00:42 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: K3LuERyHnz420bXlGpvzVYZy20U8n7qijeCBG8wVhtY=)
2: n3ieUI2cLDKlu7-1mHlC00BGgvw.roa (hash: j3IdpiHDFCzlAJqG9D51WL/CfEe+aj4QEFw7yJEuwkE=)
3: x_aZfes3cLbw9Iat1attYpGOZAA.roa (hash: 13g6IVGM+RPq/stRgyLewUE9rj4ZFrFESny74sHay48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:e0:f3:75:7d:88:ed:92:29:35:95:40:ba:a8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: May 12 22:00:42 2026 GMT
Not After : May 13 22:00:42 2026 GMT
Subject: CN=7afa90904b46c5d20df837f0246a13078397ca00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:91:02:ce:fd:ab:15:cd:9d:22:5f:4a:0e:
2c:7d:e9:de:ed:0f:cc:5a:5c:2d:bf:ae:a8:28:7e:
d9:54:2c:98:80:52:a7:b7:12:4b:22:1d:44:91:ab:
d1:3b:84:91:25:2c:78:58:df:0a:b1:b6:17:dc:0d:
db:89:3e:a5:59:31:0f:29:08:e8:a4:40:3d:29:63:
5c:bb:0d:76:0e:dc:b5:ac:94:9b:96:46:df:37:a5:
7f:ad:54:c2:8a:f2:ea:ec:51:f6:f8:b3:ff:ba:8e:
32:75:aa:e5:12:7e:e8:5a:10:65:2d:f5:9b:3a:53:
f2:8f:2d:f7:19:30:67:6f:94:0c:73:1c:8c:9f:40:
a1:21:4e:97:a0:dc:e5:4c:38:c6:07:18:06:1a:8e:
d1:a1:8a:12:cd:52:f1:74:eb:e6:c2:a9:3d:a5:36:
37:41:d6:bf:a5:31:69:9b:c5:f1:79:fb:d3:80:24:
4a:21:3c:7e:c7:5c:79:04:1e:ff:7b:df:22:16:5c:
93:8a:8e:48:b3:0f:b9:e9:3f:a0:5b:00:b9:79:b6:
c1:b3:30:78:31:8d:12:dc:f5:97:ea:7b:93:31:e6:
cc:38:0e:6c:15:89:08:20:d9:ec:99:68:2a:2b:7c:
2e:36:66:c2:eb:bc:84:86:a1:38:1a:b6:94:1a:fe:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FA:90:90:4B:46:C5:D2:0D:F8:37:F0:24:6A:13:07:83:97:CA:00
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:64:a4:4e:24:37:ab:46:b1:e7:1c:7c:da:27:ab:b1:0e:f3:
ca:b0:ab:d0:53:ea:75:e0:b5:9c:ae:bd:35:ce:45:c2:ed:b6:
35:dc:b3:ac:26:42:c4:59:62:8f:7d:74:bf:5f:6a:fb:4c:9c:
76:82:07:64:68:be:82:ab:d8:97:49:ef:a9:6c:22:b4:ff:06:
cc:08:15:d3:74:f9:18:ee:27:b9:26:c8:f6:9c:06:b8:06:b3:
4d:ec:d4:f0:b8:10:19:ab:e3:3d:5e:b6:62:c3:62:22:e5:b5:
8e:b6:92:77:41:39:55:07:9e:79:c8:45:c1:3e:ca:17:0c:7f:
10:dc:c1:2c:c3:6a:a2:d8:03:32:18:9f:44:be:b8:3a:87:30:
78:15:11:b7:bb:79:ee:84:04:19:be:22:02:6d:80:3b:36:4d:
18:5c:e9:0a:cd:ec:45:25:1f:dd:f9:d1:05:19:74:5c:fe:dc:
d5:d1:5c:bd:4c:81:77:11:a2:2b:33:da:7e:94:a3:b8:69:fe:
fc:27:ec:c1:f5:b4:02:d6:4b:76:c9:58:11:a5:99:a6:00:a0:
58:b6:74:39:85:d2:95:30:b0:29:bb:1c:30:96:c1:7f:ab:9e:
15:9f:d2:2b:78:7d:26:52:a1:50:20:b7:d6:5b:5e:96:b0:3f:
71:cf:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:07 2026 by rpki-client