Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: Z89ddDnjCYMqwYdfVnHdu3XevA5Psr9laj3Ct0nAxaM=
Subject key identifier: 54:C9:1D:07:22:9F:B3:B8:50:0C:7D:97:96:1A:C8:8C:1C:74:ED:91
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 019CAD59FF4DE88C38EDBE49C8173AA6B1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 12DC
Signing time: Mon 02 Mar 2026 07:01:22 +0000
Manifest this update: Mon 02 Mar 2026 07:01:22 +0000
Manifest next update: Tue 03 Mar 2026 07:01:22 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: L4hzNBOC1/UgOp6Hgv2CiMKcI/8oKXpy09DHMe01zTM=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ff:4d:e8:8c:38:ed:be:49:c8:17:3a:a6:b1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Mar 2 07:01:22 2026 GMT
Not After : Mar 3 07:01:22 2026 GMT
Subject: CN=54c91d07229fb3b8500c7d97961ac88c1c74ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:fb:da:89:f1:5c:c5:77:42:b0:cd:52:39:
f3:65:7d:e5:a4:7e:60:c3:55:17:9a:7b:1c:f3:95:
1d:14:3b:ea:22:dd:80:12:af:71:c3:6d:dd:41:e2:
01:09:d5:1f:ac:81:03:7e:c7:77:ee:4b:6a:eb:98:
e4:84:98:7a:3d:a0:1e:5f:c3:f4:96:e2:8c:d4:f4:
da:d9:23:d7:54:bc:04:27:57:a5:9c:ed:7e:2a:93:
c5:78:93:85:ef:a0:90:c5:98:5b:32:37:c4:fa:78:
c2:34:4f:f1:8a:93:ce:9b:2d:52:82:7c:89:1f:5d:
78:bb:89:5f:64:1b:7d:ca:6c:de:7e:fb:29:12:71:
30:dc:16:e5:f6:81:1d:98:31:eb:f7:e4:74:79:f7:
e6:18:97:e7:a6:27:47:e5:0a:75:dd:69:28:22:18:
65:f8:10:b6:d9:43:b4:50:d6:e2:4e:28:1a:f3:d9:
8b:bc:48:39:be:6b:3e:ee:2a:e1:91:44:ec:96:c0:
ae:02:bf:dc:ae:ff:b0:13:99:a6:da:ef:ec:ac:b2:
6b:0c:6f:95:03:7e:8c:dc:86:d5:bc:4a:de:fc:99:
fc:c7:f5:c1:bf:de:d1:d5:7e:ac:f1:74:26:56:a6:
9a:ab:7c:a5:e0:df:ac:ff:ec:91:7e:8e:f9:91:65:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C9:1D:07:22:9F:B3:B8:50:0C:7D:97:96:1A:C8:8C:1C:74:ED:91
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:3c:ba:0c:6e:79:01:64:69:15:0f:5b:ea:62:ea:65:af:
ed:89:75:cf:9a:72:ce:75:8a:bd:fa:33:a0:28:0a:8c:75:eb:
48:dd:e3:cd:42:20:10:4f:23:bd:35:bb:2c:50:51:2b:82:e8:
16:56:aa:20:bc:8e:a2:56:1b:80:8f:7b:35:73:3c:79:3f:9f:
22:9e:8c:e3:f0:f3:15:69:0a:8c:c4:9c:a2:63:09:22:47:32:
9f:7e:d4:56:80:0a:28:92:46:ad:d4:78:a3:e3:7d:11:01:b4:
b9:88:4a:c8:6e:1b:90:41:e0:fc:0f:a5:72:03:11:67:6d:46:
60:72:c5:1e:13:e8:d1:71:68:3f:28:de:e7:29:69:5b:61:a6:
50:2f:cb:16:a8:89:0e:e4:a3:43:85:d9:c3:f7:67:7a:42:ea:
94:6d:f8:e1:34:28:20:24:69:a2:11:8b:c5:b2:df:8f:7e:6d:
9d:20:95:b0:26:b4:94:77:11:bd:9f:92:9b:09:22:01:e7:16:
8c:0a:f7:92:e9:ad:b1:4e:b3:39:82:74:ca:86:29:f5:cc:77:
a7:9d:66:c3:b5:f3:58:15:8a:07:c3:40:26:67:ef:3b:fc:18:
da:0e:1a:e9:f3:45:53:d5:4b:a4:78:2d:2b:9f:ed:f1:c4:aa:
76:0d:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:59 2026 by rpki-client