Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: /hjhWX5srKkOo5njfUShazshEHFUPJrdtFQhsZvRbEQ=
Subject key identifier: 2F:BB:A5:74:8A:F5:CF:AC:08:67:9F:5C:D4:E6:E5:25:49:84:73:76
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019FA93D9AF831D339E867AFB422075E054D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 15:00:14 +0000
Manifest this update: Tue 28 Jul 2026 15:00:14 +0000
Manifest next update: Wed 29 Jul 2026 15:00:14 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: WsJngc7rXYOARW0GUndxjiYLsThHcFDw99eFrQmVwts=)
2: KAN-qjqmnh5cqoy6zcPSS-sENok.roa (hash: KIM13RN1rwVfiqcH/vu91prDVqpHnTdoOYAr3zB4tTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:9a:f8:31:d3:39:e8:67:af:b4:22:07:5e:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Jul 28 15:00:14 2026 GMT
Not After : Jul 29 15:00:14 2026 GMT
Subject: CN=2fbba5748af5cfac08679f5cd4e6e52549847376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f6:34:80:f3:2b:d6:5d:c9:ff:44:07:ee:2d:
89:5f:8e:73:ab:80:43:25:28:64:68:65:0d:bb:f9:
b8:bd:a3:3c:ab:7a:dc:5e:7b:5a:90:52:fe:18:fc:
19:71:2a:9b:07:9c:c4:36:71:f8:13:c8:d1:3a:67:
40:8b:30:fc:68:ce:01:2e:3c:6c:4e:da:12:b8:7c:
0a:fd:9f:74:e4:45:ee:8e:86:fb:e6:bf:99:43:c3:
64:9d:27:41:73:44:ed:fa:62:de:3b:c5:63:f0:fd:
85:cc:38:cc:76:5d:96:a4:21:df:67:59:6b:4c:d0:
ba:9a:12:f3:ec:6f:00:cf:75:85:eb:dc:ca:53:5b:
fc:90:9c:ef:37:2b:9c:b8:65:47:90:65:8e:55:68:
1e:e9:c1:96:d0:66:6d:57:89:99:94:0b:7c:f0:d1:
50:5f:e1:d9:2d:61:ca:ea:76:7c:d9:76:11:58:f4:
ba:65:5f:93:9e:f8:eb:55:e1:18:c6:ed:79:76:95:
19:41:c2:02:45:31:87:ea:89:ce:db:38:87:22:54:
21:e7:a5:3c:d4:bf:a6:74:d5:b7:15:75:63:cc:c8:
72:33:a2:a9:24:2f:85:b1:3b:77:28:f6:52:07:03:
08:86:f0:b1:5f:8d:05:30:a9:28:d0:c6:41:43:85:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BB:A5:74:8A:F5:CF:AC:08:67:9F:5C:D4:E6:E5:25:49:84:73:76
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:26:ac:51:09:b4:db:b4:9c:55:d8:16:63:46:db:93:a0:90:
56:e3:8f:45:2e:f5:bb:18:19:b6:68:d0:47:7f:7a:b0:cc:fa:
27:22:8e:45:1c:31:b0:f3:cd:c9:6d:c4:7d:a5:0d:c4:6d:c1:
a0:ed:6a:70:b9:bb:cf:bd:4f:91:a4:23:61:86:48:95:8e:a8:
0d:35:2f:e0:75:65:bd:d9:6e:bd:56:4a:a9:f9:fa:ba:6b:73:
c6:98:cb:e0:c6:90:82:a6:e5:28:a1:62:28:96:90:e8:04:5e:
87:ac:4b:e4:5d:e4:7f:38:b4:de:a7:6d:ef:bf:05:e4:37:93:
41:58:f6:75:c8:40:89:26:12:ad:b3:8e:ae:c7:cf:eb:59:1e:
91:da:04:b8:14:5f:84:75:da:6c:7c:60:f4:8d:f9:80:ba:6b:
cc:fc:95:d7:9f:3a:be:87:07:28:9c:ce:df:f0:2a:0a:46:31:
80:d7:a8:4c:14:e9:4f:da:2f:31:34:6e:a5:62:90:b7:37:64:
34:59:71:1e:d6:17:8c:40:3a:4c:40:39:b0:39:a5:e8:94:6e:
bc:89:19:3c:11:bd:20:36:16:01:31:30:33:72:c9:01:8a:5c:
b6:e8:a3:75:5c:28:ef:bd:24:9a:13:ed:54:f9:ed:09:17:f9:
b9:21:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:32 2026 by rpki-client