Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: 3oGpXfQxB0KWriD3HkbPUxTeeJSMId4uFflnF6Ctqfw=
Subject key identifier: A7:03:05:9C:DB:6D:11:56:34:A5:0D:76:BC:90:28:1F:0A:45:6F:92
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019D98BD528C2674437B68CD9C42221FA62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0F45
Signing time: Fri 17 Apr 2026 00:00:37 +0000
Manifest this update: Fri 17 Apr 2026 00:00:37 +0000
Manifest next update: Sat 18 Apr 2026 00:00:37 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: upxMAQvbugnonHNX6MI8xweF2TMGIsX3HAlBgEJge3o=)
2: PCSAe779gtpQ1Sa05bIdrwV78eg.roa (hash: 1GxEJL4LImItt+ibKMd5aWwhrXtd/cVEdDLJESE/oBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:52:8c:26:74:43:7b:68:cd:9c:42:22:1f:a6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Apr 17 00:00:37 2026 GMT
Not After : Apr 18 00:00:37 2026 GMT
Subject: CN=a703059cdb6d115634a50d76bc90281f0a456f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:96:8b:fa:7b:3f:04:f9:90:65:99:31:da:
de:94:44:13:06:52:df:e6:de:2e:82:02:e6:61:ba:
71:60:f6:53:f3:0c:c7:25:fb:bc:06:cc:1c:bb:13:
77:6d:60:d8:d5:6a:c1:eb:4b:38:26:b7:bc:21:19:
e8:f7:03:18:59:2a:20:05:49:12:19:53:df:06:f9:
f6:a6:bf:2d:af:6f:99:df:d4:4c:21:fd:d0:9d:2f:
af:c1:5d:0f:ea:7d:98:61:32:99:b2:7f:a9:7e:dc:
94:e7:17:34:65:6f:a3:0f:1e:87:42:0a:ce:f1:49:
6a:60:b4:23:6c:40:bd:04:c0:56:f6:16:0d:a2:83:
58:4e:b8:d3:46:c6:11:09:c3:7a:ab:02:c2:59:ad:
17:c6:99:21:b0:e2:31:c7:88:57:d3:56:b3:f2:8e:
b7:95:50:cd:1b:93:b7:a3:e8:94:0a:32:19:71:2d:
29:1d:a3:0d:9d:75:8e:39:83:5c:da:3a:6e:55:10:
ac:a9:3e:50:80:ca:91:5d:bb:2e:38:89:da:86:3a:
1f:ac:59:ad:e5:2e:66:47:20:b7:ed:4d:af:0f:fa:
db:aa:80:e1:e4:59:52:18:46:99:99:72:ff:96:fc:
fb:46:87:57:c1:e8:cb:3d:eb:ce:7e:4f:ad:23:cf:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:03:05:9C:DB:6D:11:56:34:A5:0D:76:BC:90:28:1F:0A:45:6F:92
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1a:56:61:c4:20:38:32:7a:38:11:0d:e4:db:07:e3:0e:fa:
bd:95:a2:c1:04:77:32:5e:0a:95:a7:b1:0d:db:7c:7f:ff:5a:
30:5f:46:3e:a8:6e:77:ac:57:30:94:e2:04:3d:50:f0:41:8a:
9c:fe:d7:91:59:03:cb:2c:94:12:c8:fb:9f:c8:1b:0c:3c:7b:
50:e4:bf:77:f8:88:9b:0a:6e:e2:dc:42:3b:02:e5:88:aa:0c:
af:a6:ef:67:f7:ae:e9:99:ec:b6:75:30:10:ae:51:29:2c:05:
53:a4:66:46:35:79:a9:8a:d1:41:7d:c9:59:d8:02:c3:6d:89:
df:fb:a0:86:75:0b:fc:e6:27:a0:06:99:8a:bf:17:47:14:d0:
d8:a6:57:9d:59:22:00:1e:95:3f:88:e2:74:91:0c:11:7f:66:
87:9c:25:3d:c1:44:9c:ef:20:b3:b5:46:43:9a:84:ee:2f:50:
48:94:a3:7c:d2:1c:7c:70:8a:1c:ed:48:92:4b:91:4d:49:80:
52:d9:77:a6:d3:51:43:8f:33:80:3c:c8:c4:48:d7:a4:b4:bc:
91:12:66:b3:fc:9d:78:17:dc:19:81:bd:22:9e:43:a8:fd:b5:
b7:2b:71:bb:24:6b:91:e7:e2:2b:52:06:27:72:1b:a2:3a:5a:
db:c9:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:16 2026 by rpki-client