Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: XpLI0iwAzuVoUwbY5zw/hvYLXSzFC5aXgSJA3pDyqKA=
Subject key identifier: 54:E7:38:CA:9A:64:29:8C:77:22:C1:F7:55:5A:0C:FA:63:E6:5D:9C
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 01A0C40D9EBEEB5DCF248FFD51D55BFC147C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 14FA
Signing time: Mon 21 Sep 2026 13:00:21 +0000
Manifest this update: Mon 21 Sep 2026 13:00:21 +0000
Manifest next update: Tue 22 Sep 2026 13:00:21 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: 2iJZ3vq3etwmJet1wD5COj8UxmPc5Qbfh9hzezEGbvI=)
2: JC01ZV2vYflj0QLnCE8Cprw58U8.roa (hash: /Z9zCtMnml7TieFSNIy4zWWzRmCDjX6zEeVO6wMk9LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:9e:be:eb:5d:cf:24:8f:fd:51:d5:5b:fc:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Sep 21 13:00:21 2026 GMT
Not After : Sep 22 13:00:21 2026 GMT
Subject: CN=54e738ca9a64298c7722c1f7555a0cfa63e65d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:17:4b:64:23:43:04:03:cd:da:2c:ec:a1:8d:
76:19:05:a7:87:0d:64:34:b7:e0:ac:34:6a:f6:65:
7d:ef:cd:1e:60:9c:7a:7b:5d:80:95:d1:ea:61:25:
ef:d1:b3:15:0c:d6:68:95:4b:b6:3a:ee:17:36:3f:
67:25:59:b2:4e:45:91:65:a9:9c:86:87:31:c5:65:
4d:52:b9:f4:6e:c5:3e:45:44:dc:f8:29:70:a1:e8:
c7:4a:c0:ed:63:9e:21:ee:11:1f:c3:07:6f:43:ff:
a2:a0:38:42:53:ad:45:84:1b:41:89:4d:13:c3:ad:
4f:a0:54:3d:ac:09:eb:e3:26:0a:db:e5:6e:2d:83:
66:89:28:88:b3:f5:96:35:dc:59:d7:58:bf:f5:7e:
8b:dc:dc:53:3c:32:5e:2d:a8:71:bc:52:bb:5b:4e:
ad:62:ed:8d:1e:ef:09:4c:86:f8:0a:e5:62:0f:74:
05:d6:a4:12:a3:eb:3b:5a:a1:f3:07:a6:bc:11:fa:
6b:de:2b:3f:b6:82:2a:f8:b1:23:2e:b8:2f:3b:88:
2f:f6:bb:2c:81:dd:41:63:cc:44:0e:84:cf:31:62:
32:d4:d4:b1:c7:12:b1:ba:84:75:5d:f4:8c:c4:e2:
76:42:39:fa:b2:f3:e3:da:a9:51:f3:25:db:e9:e2:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:38:CA:9A:64:29:8C:77:22:C1:F7:55:5A:0C:FA:63:E6:5D:9C
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:d4:53:43:37:dd:02:b8:14:a5:ba:b0:3f:0b:ec:d7:10:
d1:c8:a9:fa:c4:f3:98:ad:15:dc:4a:06:74:ae:98:a4:03:b2:
ac:6f:e8:b7:d2:fd:86:f8:08:ce:1e:74:86:8a:68:10:6a:37:
1e:84:cb:13:1f:67:0b:b6:8f:d0:9a:fc:9d:9e:35:64:1d:eb:
cb:6b:e0:12:e6:56:47:f1:a0:98:9c:5d:07:06:11:1b:7e:03:
8e:f4:44:cf:74:d9:b7:88:8f:c0:c4:e0:0b:a5:83:50:b7:b4:
c8:36:58:bb:07:3c:0a:01:bd:e6:e0:14:aa:8b:16:69:97:55:
e3:49:57:01:07:45:d9:2e:41:d8:ff:5a:3e:7c:88:d9:2f:30:
df:09:6b:94:f6:a3:4e:12:f4:91:a8:47:3e:4f:62:d5:91:05:
97:fa:a5:75:e5:16:16:a3:21:64:f9:da:89:2e:6c:45:aa:c3:
12:19:60:7a:8f:5d:5a:1c:13:9a:c7:c4:eb:1a:01:b4:f6:d3:
0e:26:e5:9f:1d:8f:b2:15:0b:67:15:16:02:db:98:5c:f3:55:
3a:8f:2a:1d:89:d2:51:1e:59:71:1b:20:06:47:7b:54:8e:3f:
3e:90:a0:6b:8c:67:ed:b0:1a:9b:98:4a:da:71:d3:d1:8f:43:
a7:19:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:29:01 2026 by rpki-client