Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: xdtfrsYC9O3dHjBTkSXd8baaLeHGyYhEdXx0huS2cBQ=
Subject key identifier: 20:A7:6E:D1:E9:34:93:33:6A:28:0C:DB:DA:E9:22:17:3C:92:72:77
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019D9A06B7150DDAFAC982334BADD02C946C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0C07
Signing time: Fri 17 Apr 2026 06:00:24 +0000
Manifest this update: Fri 17 Apr 2026 06:00:24 +0000
Manifest next update: Sat 18 Apr 2026 06:00:24 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: 47teGEDc4sy6p3E1c/Duyy39m++tG/uqBAXRfiqNOrY=)
2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b7:15:0d:da:fa:c9:82:33:4b:ad:d0:2c:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Apr 17 06:00:24 2026 GMT
Not After : Apr 18 06:00:24 2026 GMT
Subject: CN=20a76ed1e93493336a280cdbdae922173c927277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:a4:50:9c:c7:df:07:8b:47:9b:2e:3b:4a:
e5:37:8d:27:cc:7c:28:ee:7c:fc:30:55:e3:2b:13:
58:cf:c5:7f:5c:0b:56:10:a9:6f:58:71:25:e8:18:
7b:00:bc:51:a0:5f:6c:13:46:2a:60:1c:4e:7b:a7:
38:de:25:17:cc:98:3a:38:aa:f0:c4:45:e5:46:02:
92:b5:dd:a4:89:8a:f7:d6:49:da:b5:8a:ca:be:32:
7c:c1:65:d6:f2:0c:72:66:0b:00:6c:6a:9c:a9:0d:
32:02:53:16:8a:5a:22:70:65:6a:5a:01:32:f9:28:
c2:c1:18:f3:6d:2e:6d:32:a6:28:f7:fe:3a:3e:62:
fd:5c:2d:42:dd:c4:7a:a7:4c:bd:cb:df:cf:b2:13:
83:92:8f:58:d8:18:87:f2:ee:32:82:2f:a6:92:6e:
9a:d0:6a:6e:69:89:42:ed:65:82:50:8f:e0:d3:ab:
9e:db:71:19:b9:95:f9:39:42:5c:24:51:a1:b3:8c:
e6:da:36:e6:cb:e5:5a:3d:3c:ab:f2:8d:e5:44:ac:
5d:88:e5:c1:2e:c5:a0:e5:ab:62:d8:89:1b:f2:23:
c5:de:b2:bb:d4:34:d2:7c:1d:ad:2b:d7:6f:8f:d7:
7c:09:07:9f:ee:3a:59:62:3d:42:77:9b:85:f4:3a:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A7:6E:D1:E9:34:93:33:6A:28:0C:DB:DA:E9:22:17:3C:92:72:77
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:67:55:b9:8d:e4:17:b6:63:8e:11:45:8e:73:78:17:d6:25:
2c:1c:d7:8f:69:8e:4f:04:7e:34:57:43:f1:f2:af:55:ae:89:
2b:21:f7:ab:d9:2b:29:a9:1b:77:27:b4:f8:67:9d:e9:35:2e:
e7:52:85:aa:7d:df:60:fd:0e:f4:a7:6e:3f:8f:68:a3:91:91:
fb:d6:1a:b9:a2:17:3a:6d:86:bf:58:19:f3:5a:19:69:7e:08:
47:b6:37:ac:a0:db:57:1b:af:ce:63:8d:b3:93:b8:72:ba:67:
79:c0:e7:10:8f:76:83:3d:d6:88:ba:77:2a:e1:77:c1:a7:5d:
06:e2:9a:52:61:68:0b:85:2c:8b:71:65:fa:48:56:e8:31:32:
6e:ba:a9:08:e6:a5:6a:3b:9c:cf:46:c4:0d:3b:6b:9c:87:c3:
f6:49:22:37:b3:23:b8:66:9a:26:e1:47:d8:77:82:b8:a5:0b:
04:bc:c9:f3:d1:49:1b:19:b5:08:87:d0:7d:40:ae:26:2c:10:
53:93:a6:61:2a:5b:c5:bc:16:bc:9a:aa:80:2e:95:9e:16:95:
b2:aa:17:4a:dd:ae:de:57:58:b8:5c:9d:7d:92:cc:68:33:5c:
77:ef:f6:15:71:e1:8a:84:49:eb:61:d0:42:8a:89:43:4d:8c:
8f:01:56:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:40 2026 by rpki-client