
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: LEpZ/WKbsAgGMjjqmOXjixktjPFkCeKi9eNMgCIkmpc=
Subject key identifier: 15:29:FF:79:60:78:9C:A2:E7:75:8C:83:C6:AF:5C:23:A5:EA:56:2F
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019FA93E097697F1AF14B25FD647BE51DA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0D18
Signing time: Tue 28 Jul 2026 15:00:42 +0000
Manifest this update: Tue 28 Jul 2026 15:00:42 +0000
Manifest next update: Wed 29 Jul 2026 15:00:42 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: MwxkhrTAXQ5WmbhcEqWnUdGl7AeH0hpQkjbtIFH/xs8=)
2: E_z2BKaRiyCl5DiOiOwXUEhZn00.roa (hash: Ww/zs+NOD1x0VZOxV9lQwUEeAnQENZNlMv0OGXlh9YY=)
3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:09:76:97:f1:af:14:b2:5f:d6:47:be:51:da:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Jul 28 15:00:42 2026 GMT
Not After : Jul 29 15:00:42 2026 GMT
Subject: CN=1529ff7960789ca2e7758c83c6af5c23a5ea562f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:e8:45:62:0c:dd:19:e4:2f:4c:0b:d5:1a:
48:23:52:19:85:02:60:e2:fd:26:d3:e5:9f:ac:4d:
92:a1:b0:9c:32:65:44:ae:4c:8e:a5:b7:ec:66:d5:
14:f4:1b:b2:74:21:8d:91:7c:01:7f:ab:9a:f6:ab:
ad:2d:8c:02:93:7c:8d:e8:22:70:eb:96:c6:69:ad:
fe:b0:13:4e:30:73:4d:ea:a8:4f:ca:71:02:b1:d5:
a9:8c:98:a6:77:8b:7d:ad:3b:dd:69:81:26:f4:23:
01:f0:b0:74:b9:4d:6d:c2:67:17:58:c2:50:31:96:
d3:ed:45:c2:3d:c5:63:3e:36:33:bd:33:a8:34:1f:
21:6c:bc:b0:11:39:1c:b0:4b:11:d2:b5:d5:5e:28:
c2:b6:d6:e4:22:fd:b0:e1:30:b5:4c:34:e8:c8:24:
9e:a5:05:ba:57:dd:ae:d7:ad:37:fa:20:10:ce:42:
c7:c2:be:99:da:91:03:40:29:a8:84:b7:84:40:07:
c7:a3:cd:cd:9c:62:28:c8:33:a3:da:f7:c3:72:89:
c1:52:2b:46:96:84:53:55:89:82:bf:29:69:d2:d0:
c5:2d:95:ec:c7:08:ff:59:71:df:09:bb:45:bb:95:
0b:57:be:bf:eb:2b:96:b1:ca:7a:98:bb:a3:af:d2:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:FF:79:60:78:9C:A2:E7:75:8C:83:C6:AF:5C:23:A5:EA:56:2F
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8e:44:27:2e:78:e9:24:06:7b:d1:0e:93:28:70:07:2d:6f:
07:8d:4e:d6:e5:45:24:3b:65:23:85:b0:9b:8f:e5:a0:b9:af:
26:d7:3a:e8:f9:36:d6:48:ce:cd:f4:29:6f:96:ba:61:18:34:
7d:bc:33:14:d7:b0:96:f4:be:20:0a:cd:7a:74:6c:5b:b8:ec:
91:97:04:4b:03:27:ae:c4:ca:fe:44:c5:96:d2:9c:e9:4e:d3:
79:93:a3:2c:c9:24:b7:cc:c7:f6:da:a8:31:91:c4:a6:49:62:
40:d2:a8:e8:d7:fe:57:c5:e4:1f:b8:60:e8:06:1d:e6:66:e4:
5e:3c:64:c3:2d:ae:84:a2:5a:40:26:37:fb:bc:db:85:9c:95:
0d:c4:b4:49:ac:db:49:57:c2:24:cc:20:25:20:76:36:b2:01:
b7:72:a3:08:70:5e:63:b9:67:e1:44:f8:55:a1:51:b7:45:98:
30:0c:c1:5e:af:c9:af:3a:c9:f0:f0:c8:66:de:b7:d9:da:27:
6b:26:31:de:19:cf:ba:cd:02:bb:16:a6:41:b3:b7:3b:44:26:
3f:98:36:56:ea:71:7e:17:79:c6:fc:f9:f4:fa:3c:96:64:30:
e5:b2:d0:33:9a:81:c9:7c:59:fa:93:eb:a5:af:9c:33:37:ed:
90:b7:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:19 2026 by rpki-client