Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: OQ+da60XCp1Wz5ePNItdBO438IrMw+BfHdyQI8gTDbw=
Subject key identifier: D9:B1:00:47:0A:BB:21:CB:A9:45:73:E8:07:C7:4D:20:CA:9D:C1:E6
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019D9A0740229EB62FB0192CB3EA9D5E7699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 06:00:59 +0000
Manifest this update: Fri 17 Apr 2026 06:00:59 +0000
Manifest next update: Sat 18 Apr 2026 06:00:59 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: mQ1yDWQytvFgrI+RVwtBdtJv6I37/Z2zypPX2RLmKJ0=)
2: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (hash: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:40:22:9e:b6:2f:b0:19:2c:b3:ea:9d:5e:76:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Apr 17 06:00:59 2026 GMT
Not After : Apr 18 06:00:59 2026 GMT
Subject: CN=d9b100470abb21cba94573e807c74d20ca9dc1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1f:0d:d4:d2:f6:e6:92:05:3a:3d:32:e2:3d:
76:f9:83:b4:b9:da:4d:77:6e:96:7b:c9:e7:57:40:
ce:28:10:86:be:36:e2:85:e7:2e:ad:a5:04:24:57:
1c:ef:b8:9b:bb:41:fc:ae:30:cc:20:91:c3:29:42:
b0:67:c2:49:2b:2f:c6:0d:c7:0d:e3:80:2c:6b:b3:
85:78:f2:73:23:77:50:16:28:a7:e1:6c:d1:d3:31:
3f:f2:23:85:66:ca:7c:f3:d4:db:11:01:61:2f:dd:
a1:fe:6d:08:f7:a6:06:c0:f5:6a:2c:7e:2e:fe:e8:
4e:1b:92:71:75:ab:64:50:f4:59:c6:06:c1:f6:1b:
78:02:70:40:d0:3f:ca:ad:31:c6:00:9f:4c:15:17:
bc:20:23:9b:0c:3f:37:1c:79:7c:f8:6f:ca:84:47:
e8:6b:a5:21:b4:bb:e7:44:dc:c6:6e:72:78:d6:6b:
0d:fc:33:e9:8b:98:29:ed:ec:de:40:eb:fc:97:f3:
35:69:71:40:ee:21:bc:6b:c2:f3:af:75:ce:50:f0:
8c:3e:60:3d:62:38:ce:22:1d:10:de:ca:ea:93:7e:
99:64:02:eb:36:b9:ec:4f:fc:6e:2a:b5:93:db:68:
0a:86:8b:bb:50:2a:fa:47:a0:a0:72:f9:7b:ad:1b:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B1:00:47:0A:BB:21:CB:A9:45:73:E8:07:C7:4D:20:CA:9D:C1:E6
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:21:11:af:69:e6:f0:22:39:67:df:11:8f:cc:ed:de:09:1d:
d6:61:cf:60:da:3a:f8:39:4b:1a:2e:c8:7b:76:9e:a3:b2:a7:
99:3f:36:ff:d6:bf:e4:ca:80:a3:70:9e:43:84:75:fe:f4:1f:
a8:d7:b6:ba:eb:a7:1b:51:34:cf:4c:0a:28:a5:e4:aa:42:87:
95:41:cc:f1:e2:9f:23:56:2f:c6:19:81:c3:13:1a:7d:e9:da:
7a:ae:28:eb:d0:2e:40:6f:80:eb:75:83:53:7d:3b:d8:10:46:
44:39:19:83:c2:43:d2:6a:6a:b3:af:01:a9:c8:3c:e1:03:93:
70:a3:c5:59:98:d6:66:6c:bb:bc:90:15:e3:0e:e4:13:e4:e0:
36:fa:5c:fc:d7:2e:52:fb:b0:2e:de:ea:2c:d0:a6:01:1b:53:
e7:39:c2:3e:5d:3d:36:ee:b3:c7:b7:6d:19:97:32:48:f9:85:
c8:ad:80:fc:f7:45:c2:82:b3:4f:e0:ad:a3:f3:ed:44:e9:af:
bb:25:b9:6c:20:01:4e:5c:5e:92:b4:53:54:74:c9:ab:77:80:
84:8a:79:60:15:d5:09:39:1d:db:16:a5:80:29:4c:b4:45:9d:
2f:e0:a0:83:b1:38:4c:5f:cc:53:2d:91:97:18:82:40:24:c5:
61:f2:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:43 2026 by rpki-client