
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: XNI2OA32UK2xFmC+AjQ8SX7G8R/sReVKhHvw/a/iAxA=
Subject key identifier: 38:D0:FE:9D:7F:54:EF:40:47:70:EF:8A:D7:F0:95:B8:CA:F6:B4:39
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 019D28BB287A704122E522E44BF2B3EB5A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:47 +0000
Manifest this update: Thu 26 Mar 2026 06:00:47 +0000
Manifest next update: Fri 27 Mar 2026 06:00:47 +0000
Files and hashes: 1: 32FLh-2sl2eJtIOGk05i3sfElJU.roa (hash: HsUbHhV9ZeMlUBS5nClbq2bfx/JXEoBIkb5zGIiCc2U=)
2: 6y02T8isddrk35I82aQnZfza2hw.roa (hash: 6Bwcv1vQHggut1Ym2FRTt/C0CVvJQpNdaHy95CBYlLc=)
3: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: vQTPev/J3Q8iwxsCLNamAsumquX4bR5xT7qZ6WONDuY=)
4: q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa (hash: KQaHhA+OhijKUCpTAoL29fJGLyKeGagBCHKk31Lp+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:28:7a:70:41:22:e5:22:e4:4b:f2:b3:eb:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Mar 26 06:00:47 2026 GMT
Not After : Mar 27 06:00:47 2026 GMT
Subject: CN=38d0fe9d7f54ef404770ef8ad7f095b8caf6b439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:50:64:5e:2b:37:f6:66:0f:cb:88:f3:b2:
3d:e2:74:c6:9f:da:d6:2b:9e:4d:98:ec:b5:ca:28:
9b:a8:77:fd:72:56:e8:d3:2a:a9:98:86:15:bf:cc:
19:90:fa:2f:ba:7f:4d:98:71:c4:be:d7:8b:2d:97:
39:fa:84:46:81:63:3d:9b:80:f7:39:76:ef:5f:37:
d8:74:78:1b:36:0e:61:d9:64:03:8b:62:07:1d:cb:
d2:53:e7:81:b6:e8:06:57:48:a2:ee:31:f3:a2:f9:
01:9e:e8:ee:76:06:2f:23:83:13:cf:4e:e7:0f:7f:
0c:76:71:5c:06:17:9a:b7:4d:7c:74:e6:ba:f4:12:
dd:6b:5c:3d:e0:43:c4:e9:3c:de:2f:93:91:6d:6c:
b4:a1:8b:fe:3e:cc:92:4b:7d:1c:c5:2c:17:4e:46:
e5:cc:e6:41:ec:4b:db:95:5a:ea:33:45:00:b1:fd:
e0:03:29:e2:2e:42:8e:26:4d:eb:14:01:ce:2a:d3:
5f:7f:30:55:1a:1d:1e:ac:d5:53:7e:6d:1e:d0:de:
65:4b:24:fc:46:e9:07:81:be:9a:6e:e6:9f:1a:6b:
a8:04:27:d9:08:f3:64:3f:d1:37:a9:0a:ff:e4:1a:
19:f4:db:f5:7e:54:b3:05:8e:24:85:ec:ad:4d:e8:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:FE:9D:7F:54:EF:40:47:70:EF:8A:D7:F0:95:B8:CA:F6:B4:39
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f6:64:28:39:88:29:a1:c3:74:81:de:8f:ed:af:1a:2a:08:
79:f1:61:4e:fd:5b:4c:0c:0e:91:9e:ae:f4:22:6d:6d:48:c9:
6f:c6:8a:e1:ae:9a:a8:d0:19:f7:64:08:ec:fc:ad:55:27:af:
da:45:6e:e3:83:d9:df:e4:ea:d9:47:10:c9:27:97:41:d9:d3:
64:e2:84:25:80:1d:d9:70:84:37:fa:86:b8:08:6b:8e:44:34:
20:2c:9a:29:be:20:2e:5e:20:c9:66:84:ed:63:28:4a:00:b0:
2c:3f:01:2f:f7:bb:23:42:09:3a:a9:d5:81:a5:a5:9b:8d:b5:
96:22:98:2a:b3:c3:a2:a3:81:8f:6e:24:22:32:1b:40:67:3d:
cc:e3:d7:c7:15:f3:ac:e7:8e:03:22:49:d2:0c:22:f0:6c:6f:
ce:2b:e5:1c:d4:31:9f:a9:53:55:5a:d6:b9:70:cf:29:3e:0c:
f1:0e:c1:f4:71:e7:37:d6:59:16:8e:f5:f7:ac:1a:b0:16:cb:
17:c9:46:b4:be:65:8f:23:8a:eb:c4:96:4a:e3:53:7c:f0:b8:
e2:a3:76:dc:c5:d7:41:4c:f2:7a:3c:bf:ab:11:06:d2:30:69:
fa:d7:c4:55:ef:10:49:42:54:21:c0:54:0a:4e:d6:1b:0e:67:
24:59:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:34 2026 by rpki-client