Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
File: B1EA167695E869209FAA739E70D18201F6043D73.mft (raw, json)
Hash identifier: kOyCyoD1qqMPju8mrrjDe5n+8wmEFYw23GlXChp6fZE=
Subject key identifier: B2:6A:2E:15:B9:1B:69:E1:31:D0:FB:3A:F5:78:19:8B:5F:E3:E9:F0
Authority key identifier: B1:EA:16:76:95:E8:69:20:9F:AA:73:9E:70:D1:82:01:F6:04:3D:73
Certificate issuer: /CN=b1ea167695e869209faa739e70d18201f6043d73
Certificate serial: 5EC96A547C1B2EAFAEE9F8D9799680E32969911F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seoWdpXoaSCfqnOecNGCAfYEPXM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
Manifest number: 1E
Signing time: Fri 27 Mar 2026 20:42:41 +0000
Manifest this update: Fri 27 Mar 2026 20:37:41 +0000
Manifest next update: Sat 28 Mar 2026 23:12:41 +0000
Files and hashes: 1: B1EA167695E869209FAA739E70D18201F6043D73.crl (hash: 6K5/EZo7XbZF2KGkFLxfHqSf7NP+Rz+pbr7z09niCms=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.crl
rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
rsync://rpki.ripe.net/repository/DEFAULT/seoWdpXoaSCfqnOecNGCAfYEPXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 23:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c9:6a:54:7c:1b:2e:af:ae:e9:f8:d9:79:96:80:e3:29:69:91:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ea167695e869209faa739e70d18201f6043d73
Validity
Not Before: Mar 27 20:37:41 2026 GMT
Not After : Mar 28 23:12:41 2026 GMT
Subject: CN=B26A2E15B91B69E131D0FB3AF578198B5FE3E9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:9e:8a:e1:f3:43:cc:cd:a3:d7:c2:ac:50:
5f:fd:78:6e:cb:c0:fe:bd:5c:df:8a:e2:02:37:7d:
2c:1a:bb:3a:28:c7:27:f8:da:82:33:72:96:c2:b7:
2e:81:db:ba:c2:ad:f5:20:91:ab:86:42:35:30:d5:
fb:c5:30:7e:9a:b6:9b:76:be:71:12:a7:88:f3:0e:
b6:f3:c5:e8:7a:a9:12:b7:26:db:1d:27:fc:57:76:
14:dc:4d:db:40:7b:37:4e:44:2e:43:23:43:21:02:
cb:a7:58:31:b3:04:39:6a:19:4e:31:bb:cc:d1:8d:
27:c3:54:0e:36:c9:ea:4d:77:92:20:2d:af:81:81:
31:79:f2:72:fb:5a:6f:18:1b:14:6f:35:43:27:4f:
40:96:95:d9:cc:b7:b9:a2:f8:ad:3f:ad:7e:52:33:
51:d9:ac:6e:48:7f:8c:d0:b5:ff:52:3d:3c:1d:d2:
17:ff:b5:72:43:10:8c:b7:28:1e:73:fd:69:28:4e:
32:76:6b:b5:6a:62:02:46:7a:10:64:8c:55:81:0c:
ee:b5:de:b7:96:14:eb:00:08:5a:50:9a:34:d3:3b:
70:a8:70:08:ab:4b:82:57:ca:ee:be:cd:49:49:db:
c1:11:ae:a9:11:d4:f1:b5:db:38:2e:7f:c9:8e:de:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6A:2E:15:B9:1B:69:E1:31:D0:FB:3A:F5:78:19:8B:5F:E3:E9:F0
X509v3 Authority Key Identifier:
keyid:B1:EA:16:76:95:E8:69:20:9F:AA:73:9E:70:D1:82:01:F6:04:3D:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seoWdpXoaSCfqnOecNGCAfYEPXM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/be41704f-7815-4f2c-a503-58ae08e556b6/0/B1EA167695E869209FAA739E70D18201F6043D73.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fe:67:3b:3b:ea:4b:ce:c6:73:48:60:4c:be:0e:e5:94:97:
27:cc:cf:0e:15:bc:23:a2:90:be:ff:d0:cf:7a:e8:5f:d9:16:
24:24:49:34:0b:ea:b0:88:31:a9:0e:20:62:a1:63:f6:6f:3f:
93:70:54:e5:17:1b:eb:8f:d3:de:c9:af:24:9d:27:25:db:2a:
ec:17:ea:8f:47:81:e6:7a:60:9c:fb:02:cc:63:3c:78:8e:20:
8c:38:f8:42:e4:cb:44:cb:58:36:89:3f:63:61:d4:90:31:66:
1c:c6:ff:1d:06:a0:68:1b:1e:63:de:ec:ec:da:96:f2:68:20:
99:e9:cd:57:42:c7:1a:31:04:99:ae:8f:8f:cc:ab:ff:99:a3:
33:c1:75:b0:c4:d7:1e:cb:47:24:64:30:f8:f6:d9:14:c9:4a:
03:ce:78:35:e7:18:b6:68:80:7c:e0:53:80:39:3f:22:04:8c:
1d:0a:54:f2:4c:cb:4a:a0:a5:2c:ee:30:c2:79:0a:04:f4:3e:
ed:e9:f2:81:55:6c:d8:a7:1f:3d:84:bf:a9:a6:f5:8a:fe:76:
32:5e:5a:08:4e:01:97:08:0b:cc:79:54:6c:dc:8d:c7:fd:58:
db:ba:3d:b0:f1:fd:6d:9e:91:b9:4b:72:49:0b:e3:d9:f5:0a:
64:95:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:18:59 2026 by rpki-client