Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: gH80r0Tnl+3SspQXCB2QKr+WSPB9z7ufURih4aMotfs=
Subject key identifier: 14:FF:62:B0:00:B0:01:38:35:96:6D:0B:A7:05:4C:AC:10:F5:6B:0A
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 019CA86ADF6E2486B241B51EDD993F3A9D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 0B89
Signing time: Sun 01 Mar 2026 08:01:42 +0000
Manifest this update: Sun 01 Mar 2026 08:01:42 +0000
Manifest next update: Mon 02 Mar 2026 08:01:42 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: C9GYtbWEkCFC9fIjQ5Dh/p6pz5PWaKDUDByQhCNaADM=)
2: fJL_3yJ-c6mNDdaD5lADLkXjGvQ.roa (hash: MpRA99Kyyzl1J5oPIvWn+XfiQkdUHbddqAT22yvxz8w=)
3: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (hash: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:df:6e:24:86:b2:41:b5:1e:dd:99:3f:3a:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Mar 1 08:01:42 2026 GMT
Not After : Mar 2 08:01:42 2026 GMT
Subject: CN=14ff62b000b0013835966d0ba7054cac10f56b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:24:ee:f8:40:9e:ed:c1:28:f9:fc:22:87:
e2:b5:d6:c6:04:4d:8d:4c:eb:f1:26:f9:20:d2:85:
90:41:f9:29:f1:6a:77:bb:8e:50:91:ef:36:bc:56:
f1:61:d8:c7:0d:33:79:b3:4d:43:4a:4f:f5:d8:13:
7e:61:15:54:fc:51:73:5d:b2:f5:f7:7f:ef:c1:9a:
1f:83:04:f8:b2:f5:c0:bb:4c:dd:d3:10:2f:17:8f:
82:4b:3e:43:28:b0:30:ea:22:1e:f9:b0:45:47:e6:
3d:52:26:ae:73:9a:97:bf:ec:b5:c6:99:95:df:2d:
87:ef:ff:ac:91:72:4e:a1:3e:53:de:70:2d:a1:b1:
9d:67:c6:a2:8e:82:00:cf:1e:f6:84:26:46:d4:18:
c8:3d:3b:8f:05:1a:1c:32:bd:cf:a4:e4:dc:d4:89:
98:03:d2:a2:8c:86:fa:ea:97:6f:6e:4c:82:92:8f:
65:c5:d0:0c:93:dc:89:d7:7b:3b:d8:3d:8a:ad:98:
68:2d:e3:ae:22:70:53:22:0b:1e:54:2f:7f:50:75:
a6:ce:73:d0:c6:7e:40:9e:ff:e4:b1:3c:6e:e8:30:
af:d9:8d:0a:08:50:e5:cb:b0:b0:da:6c:aa:1a:97:
90:c7:3b:b5:1c:fb:a9:87:42:eb:80:8c:61:79:d9:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:62:B0:00:B0:01:38:35:96:6D:0B:A7:05:4C:AC:10:F5:6B:0A
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:e0:fe:06:e0:a6:4b:c4:59:2b:e1:17:13:65:ae:1c:7b:
00:f3:8a:11:9f:e7:74:04:d7:bc:55:56:30:dc:5b:93:fd:0a:
99:bf:e1:de:9c:2b:a8:c0:4b:ec:e2:3b:ca:77:33:f4:79:0c:
54:bb:ce:fa:75:cf:c3:f4:4b:e6:76:db:7e:54:bf:8a:66:8b:
d2:86:eb:18:e3:ca:47:49:e4:88:85:38:d9:b3:ae:d9:45:bf:
e8:8b:e9:74:d0:7b:e2:7d:2a:08:20:a2:30:f5:49:b6:5f:5e:
cc:50:8e:53:d3:1e:f0:2b:65:47:d0:55:e5:62:6b:2a:0f:07:
1c:8d:7c:1f:1f:fb:8c:ef:cb:79:c6:68:5b:ed:43:d0:cc:ce:
cc:50:30:7b:1d:de:85:7d:f3:e6:29:70:d2:5f:59:7f:cb:78:
fe:8f:ed:8c:cf:bf:54:e4:95:af:39:c1:6d:a9:57:38:84:06:
87:87:3c:d4:20:1e:86:57:a6:a7:e8:3f:56:90:17:20:1f:58:
25:06:1d:f1:a9:af:2d:f5:84:cf:9d:c6:4e:bc:e0:b2:3d:3d:
af:13:f9:9d:d1:cf:8f:a5:b3:30:d0:58:0d:b4:e4:b5:e3:c8:
18:e0:c2:2f:a6:33:db:eb:b2:08:2b:2d:7c:a9:23:b9:5e:49:
4d:42:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:31 2026 by rpki-client