Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: ZGkG4+5qBmXhx8Y1qAvRLv3y5oTjA1uyXSL82aFfjHc=
Subject key identifier: 4E:60:C7:3E:0A:7A:41:F7:73:8B:3A:DE:74:9C:E5:1C:5D:B0:42:B5
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019D98F50BDCD7EF486098117B2A3EE80568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 1356
Signing time: Fri 17 Apr 2026 01:01:29 +0000
Manifest this update: Fri 17 Apr 2026 01:01:29 +0000
Manifest next update: Sat 18 Apr 2026 01:01:29 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: if/3ngKfq2/jbfS9qgwaajoz10ocUVftIeij4+Z8G1Y=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0b:dc:d7:ef:48:60:98:11:7b:2a:3e:e8:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Apr 17 01:01:29 2026 GMT
Not After : Apr 18 01:01:29 2026 GMT
Subject: CN=4e60c73e0a7a41f7738b3ade749ce51c5db042b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:4b:58:6a:ba:10:e2:6c:69:5e:76:d4:c0:
a4:05:c0:57:b6:5c:e3:4d:3b:7c:af:0c:39:a5:98:
6d:13:0d:b0:53:b3:74:a5:64:40:70:61:07:a2:f9:
6a:59:f4:70:e5:bd:d6:7d:fe:53:d5:ff:98:90:07:
54:c0:be:35:8d:14:35:94:f3:41:99:24:24:68:73:
9e:5e:97:dc:17:69:60:3a:c2:e6:cf:d2:05:87:5f:
87:e2:db:34:8e:17:63:14:bb:08:8a:2e:c3:ed:82:
9f:a1:4b:5f:17:ab:0a:3b:e3:de:3e:65:f3:68:ca:
68:85:d2:fe:70:46:53:98:0d:35:ef:25:ef:4b:a9:
01:2e:db:f8:34:a4:1e:5d:fc:e2:03:b2:08:f5:77:
9a:db:c0:d0:b8:df:96:bd:a7:02:2c:42:1e:e4:b1:
2c:1c:37:21:98:54:48:cc:4f:0d:a5:e8:a0:3b:43:
b5:fa:12:f5:cb:da:02:18:b0:b9:7d:c3:f6:d0:c8:
bd:79:a9:25:79:02:b1:c1:14:ac:97:de:f6:70:2a:
80:f1:b7:67:df:8d:25:e6:3c:4e:02:1f:22:a6:22:
82:5d:24:36:20:2d:2b:8d:2e:c7:d2:97:8b:89:32:
56:2a:6e:3c:d1:56:51:91:24:f7:5b:16:4e:ee:fb:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:60:C7:3E:0A:7A:41:F7:73:8B:3A:DE:74:9C:E5:1C:5D:B0:42:B5
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a2:63:98:fb:5b:1a:66:04:cd:61:e7:34:a9:8b:3d:02:01:
dc:21:66:1d:28:97:c7:d5:4d:09:63:bb:9a:9d:98:cb:a5:2a:
ea:80:29:78:f2:b5:43:69:b1:78:f8:74:60:2c:6a:5e:ee:91:
50:52:56:3e:3e:f9:be:da:5e:85:34:9b:c4:8f:1a:dc:32:c0:
ec:56:da:3d:a9:73:49:4e:56:00:58:ee:4d:c4:14:0d:4e:84:
be:4b:38:97:b6:2b:9d:e0:73:bb:42:34:f1:3f:b1:70:17:e9:
88:e9:c7:09:69:eb:9b:93:3c:bd:8d:c0:51:59:a6:72:d2:e0:
ca:b3:92:f4:dc:8d:9d:d5:aa:ba:79:f9:9b:20:b7:1a:70:b0:
0f:2c:79:29:2e:2d:4a:bf:ce:c5:5a:67:82:e1:05:bf:08:a0:
f5:e6:d8:01:74:5e:fb:29:91:a2:fa:e5:b7:de:be:20:89:b3:
8e:07:a7:36:9e:f8:af:f0:02:cb:9f:8b:3c:40:e6:06:9b:78:
65:e5:fb:5f:33:87:7d:50:77:cc:10:66:6e:e7:5e:7c:b8:4f:
0a:92:48:16:ab:ca:b3:f4:fa:17:ac:80:a2:dd:a5:6f:7a:68:
2c:7f:f7:95:1b:0c:70:a6:eb:0b:ab:ee:c6:61:eb:48:b2:cd:
cd:d7:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:39 2026 by rpki-client