Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
File: B0ejbXdop7MKTuy7aWTIwjfXRAE.mft (raw, json)
Hash identifier: dDbz09uMLYqI0XdcVs38OdtfOeDb0ieyrzqj/PpXp5I=
Subject key identifier: 8F:3C:CF:A7:8F:34:DD:95:03:86:47:EA:B4:BE:BF:A5:99:A7:7F:5B
Authority key identifier: 07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
Certificate issuer: /CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Certificate serial: 01A0DB3B6A568EDF28098E4DE1DFED7FD9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 01:01:39 +0000
Manifest this update: Sat 26 Sep 2026 01:01:39 +0000
Manifest next update: Sun 27 Sep 2026 01:01:39 +0000
Files and hashes: 1: AiPCwT2mOHblP5OWBwZI_2If-qc.roa (hash: ZI02ce5tKSPDXFD64PX8BGZ+5za9hEAGoOG8T2YkDzY=)
2: B0ejbXdop7MKTuy7aWTIwjfXRAE.crl (hash: zwmJwB3i8IaWH6e7sGYz0LczfXUV8WrPd1HAkChpaGk=)
3: R6tX7n1EUzhS2Rc8AgVfdcymHjg.roa (hash: nb/6KQdFOLZV09sF9OK9gvGL0HQoI0XdoKq2+mGgfyY=)
4: Rv-jwelP5qAOVsTY2O3lL6StCzI.roa (hash: 3p4Tm23LFUYRqfwgQDQDi43EjAXLyoXTDot/c2J7+7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:6a:56:8e:df:28:09:8e:4d:e1:df:ed:7f:d9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747a36d7768a7b30a4eecbb6964c8c237d74401
Validity
Not Before: Sep 26 01:01:39 2026 GMT
Not After : Sep 27 01:01:39 2026 GMT
Subject: CN=8f3ccfa78f34dd95038647eab4bebfa599a77f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:16:58:da:58:21:a2:d6:b2:18:95:89:24:
d2:c5:33:ba:9a:fd:bf:84:11:db:27:6a:86:03:4e:
f7:76:08:2a:05:72:fa:48:87:8e:67:be:9e:a4:ff:
77:c7:a5:07:ca:53:3a:4f:5a:6d:3b:d7:34:8f:ff:
ab:43:a0:12:30:22:1b:47:09:e1:aa:85:46:3e:cc:
4d:51:56:29:0a:35:b7:7d:af:bf:80:34:a3:4a:9f:
ef:48:21:e7:f2:dc:73:3b:51:aa:6e:f8:8b:a3:b8:
a8:b1:df:93:fa:48:07:19:c7:8a:d4:37:bd:d6:63:
fa:e4:31:ae:89:79:d5:20:1f:c3:00:db:bd:e2:1b:
a8:88:81:c7:e0:a1:c7:91:2f:37:ac:34:fb:db:bb:
50:c8:a1:2b:4f:cf:d4:d4:d1:fc:02:3a:46:56:d3:
8c:09:4a:f8:95:ef:e3:b3:4e:32:f1:d1:f1:81:f5:
92:e5:be:71:d2:d5:c8:3c:95:bf:38:22:03:c2:d2:
36:25:64:b4:40:3a:2b:e7:03:46:63:b8:95:61:08:
18:6a:54:68:b8:2a:c6:fb:97:cb:26:e8:94:03:2e:
75:2a:6c:4f:78:36:d0:06:79:80:86:8f:6d:be:5b:
8e:7c:4a:51:23:18:eb:fc:dc:77:b1:14:ac:9a:b8:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3C:CF:A7:8F:34:DD:95:03:86:47:EA:B4:BE:BF:A5:99:A7:7F:5B
X509v3 Authority Key Identifier:
keyid:07:47:A3:6D:77:68:A7:B3:0A:4E:EC:BB:69:64:C8:C2:37:D7:44:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0ejbXdop7MKTuy7aWTIwjfXRAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9eaf1e-c9ec-466d-8371-aabadd0719ba/1/B0ejbXdop7MKTuy7aWTIwjfXRAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:33:80:93:33:6e:ee:4d:4d:62:68:3c:7c:41:1a:16:b7:e2:
78:0b:4b:3e:93:c3:af:0c:42:bd:e9:47:aa:4a:42:17:30:e5:
28:13:aa:23:d9:81:8b:77:fe:0e:d4:a6:4a:63:46:4b:18:19:
f1:f1:46:58:f7:96:be:54:ee:5b:20:87:08:82:31:6c:45:39:
72:50:d1:c2:05:52:d4:65:85:0f:18:bf:fa:74:34:b7:f6:ab:
ea:b0:e1:0d:cb:1f:2f:e2:c3:06:1d:a1:00:9f:3a:84:41:be:
bb:e3:df:a9:28:62:a4:3f:da:6a:4f:39:d1:3f:db:89:40:fd:
f7:36:d0:f6:5a:41:3e:75:6e:9a:65:79:b2:07:9d:64:7e:13:
04:86:b3:70:ac:90:b5:b4:d3:ec:a1:6f:3d:ee:1b:37:0d:c7:
f0:81:e1:ff:54:d5:53:8a:89:7d:9a:89:65:81:8e:85:6b:dd:
ab:44:c2:c3:9d:37:88:36:4c:df:93:6d:68:17:58:5b:fc:f3:
ad:a2:72:ef:b8:b2:78:18:7e:5f:af:a9:e1:e0:1b:ae:c1:8e:
b6:18:1d:5a:0a:ac:f0:62:d5:c8:61:5c:86:07:af:25:5e:4f:
c9:b9:5d:b1:c3:ef:af:83:5b:92:4c:a3:a8:6c:8b:56:0d:47:
37:dd:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:34:34 2026 by rpki-client