Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: pHPKf7zLQCNzrESTPKZ1gTd57NY0g7DUe8Sv4JMYqkw=
Subject key identifier: 3B:40:B1:B4:A4:EE:C3:6F:86:A2:18:95:4A:FE:B7:7F:7A:73:41:A6
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 019D9AABDD958587BFB9A298B7778094BA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 0B52
Signing time: Fri 17 Apr 2026 09:00:47 +0000
Manifest this update: Fri 17 Apr 2026 09:00:47 +0000
Manifest next update: Sat 18 Apr 2026 09:00:47 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: hAClqudwDHE3RqfeNvfhnJoiXZCKH+WujT68XQxZeus=)
2: lm3OTOwIvXSXM9pioR3a9JAWpbo.roa (hash: jQABbYTjEwoFiegPBkd7R4azYt9ZrDtGw7Anzr3WHlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:dd:95:85:87:bf:b9:a2:98:b7:77:80:94:ba:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Apr 17 09:00:47 2026 GMT
Not After : Apr 18 09:00:47 2026 GMT
Subject: CN=3b40b1b4a4eec36f86a218954afeb77f7a7341a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:01:95:ac:07:8e:fb:14:2f:aa:fd:da:0d:9d:
1c:31:ae:05:47:d5:5b:79:41:cb:fa:73:90:b9:75:
1f:c7:ba:c4:a7:cc:93:9f:f1:67:d0:66:79:37:2c:
e9:05:54:d5:54:09:4d:dc:c1:2d:ce:3c:c5:dc:9c:
dc:6e:8f:98:c4:b5:64:7d:08:d0:d4:56:e0:d7:69:
85:f9:dd:0a:80:b4:8e:bd:74:48:70:20:df:03:ca:
96:9d:51:a4:c0:5e:7b:fd:e1:48:1a:f9:d1:88:b5:
47:bc:53:d4:10:d6:f2:4d:a6:7b:b6:37:3a:a0:fb:
4d:c0:f4:53:93:25:e0:8e:a0:c9:4f:53:0f:41:4e:
36:ad:94:e1:59:cc:c1:c3:18:18:f7:25:6b:62:d2:
75:47:42:b2:61:11:6a:0a:45:24:1d:be:73:f0:41:
f2:99:5c:45:41:bd:de:5f:34:ee:ef:d5:96:a1:0f:
cb:84:bb:f8:93:cd:de:f1:12:44:36:eb:0d:cb:70:
9d:f5:b2:25:0c:c5:1b:42:1c:dc:f8:a3:36:f8:41:
51:dc:0e:1c:b1:76:26:45:8c:eb:c1:55:68:da:e0:
23:ea:b5:06:71:c3:6b:79:86:da:cd:c6:1e:cf:a3:
46:1a:c4:4e:83:1c:d7:e7:f3:34:73:53:03:46:66:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:B1:B4:A4:EE:C3:6F:86:A2:18:95:4A:FE:B7:7F:7A:73:41:A6
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a4:14:ff:b1:39:36:d3:92:cc:b0:f0:0a:c9:f5:fe:86:a9:
9b:75:e9:7d:42:61:e5:59:a4:83:8a:d5:33:d1:ea:3a:fb:ec:
c5:fd:f6:4b:93:ce:ff:68:92:11:a9:01:1d:ed:32:6a:59:3e:
1e:27:b5:26:5e:c5:10:51:80:76:6c:8f:79:80:d4:fe:55:8a:
b1:cd:0b:e5:6c:4c:6e:6a:11:37:e2:11:d8:a8:32:10:2f:94:
7c:51:75:74:d9:21:bc:a1:78:16:8f:f0:a3:ed:02:4c:5b:9e:
81:da:b0:ec:01:c7:ae:16:d3:0c:cc:b7:29:b4:78:28:4c:ea:
e4:8e:ba:f8:56:0e:84:c8:9e:1b:cc:35:e2:35:40:b3:17:a8:
48:c6:27:6e:86:f3:a1:84:52:34:ea:1b:be:80:99:e5:3b:72:
4b:cd:60:32:cc:77:a4:4b:91:55:9a:33:76:f1:c4:84:c4:d3:
6e:c2:92:a4:fb:3b:cc:41:e3:3e:c6:a7:e6:c6:1a:36:9e:90:
48:20:dd:57:08:52:ce:ee:bd:43:db:4f:80:72:1b:ab:a2:c3:
03:29:c0:96:76:ed:3a:41:bd:8c:9e:f5:2c:6c:86:68:30:50:
3e:8a:ab:ac:99:66:d1:53:11:b7:e6:b8:71:16:8e:e1:b5:c4:
4b:4d:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:11 2026 by rpki-client