Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: HGezjCVPEidxa2kw6hK3pxju+gY53gWqif5VliJ8Smk=
Subject key identifier: 97:BB:AC:FB:12:53:4E:20:0F:0E:4C:47:65:6D:D5:AF:65:59:66:4B
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 019D992B2D76CD39DA2510580D4BC90B9AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:36 +0000
Manifest this update: Fri 17 Apr 2026 02:00:36 +0000
Manifest next update: Sat 18 Apr 2026 02:00:36 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: fMSSPoLEDhO85Y54n+Wd0DJLIq8JNPOpYCTxV41ptUg=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:2d:76:cd:39:da:25:10:58:0d:4b:c9:0b:9a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Apr 17 02:00:36 2026 GMT
Not After : Apr 18 02:00:36 2026 GMT
Subject: CN=97bbacfb12534e200f0e4c47656dd5af6559664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:c4:29:70:c1:1f:5a:e1:04:af:67:bd:1c:
36:0f:2f:03:2f:2a:0a:37:db:3e:50:b8:30:13:ef:
6f:2d:6d:5f:d2:cd:47:1e:62:8e:ab:0c:70:e7:67:
84:8c:c4:cf:17:f0:ac:1f:14:a3:0b:8a:32:09:60:
14:c3:6e:8b:ba:07:90:fb:d4:62:7e:b8:af:d1:ea:
c5:1c:f3:a6:36:2d:ae:85:8c:ec:a1:8b:fb:72:99:
6e:1a:2a:cb:2a:a3:a9:78:47:33:1b:6b:0c:11:8a:
3a:26:1d:24:10:36:d4:61:47:ab:cc:7e:dd:14:60:
cc:5e:8b:c1:2b:f3:8c:67:f8:c4:8d:d8:d7:ce:74:
c1:d3:c4:7a:f2:a4:65:3b:d7:96:48:0d:54:f4:b3:
ca:91:b9:8e:16:cb:88:11:8e:d0:77:dc:7d:91:c2:
c2:65:44:16:b1:6b:4a:3b:d0:6e:b8:4a:07:f3:ac:
f7:c7:40:cd:89:38:f7:00:6e:23:25:84:38:2e:c9:
42:c0:f7:59:0e:c1:8c:d5:60:3d:f9:35:f2:f3:69:
e0:9d:37:86:dc:2f:7e:66:09:a0:56:6f:50:ce:2e:
40:c5:0f:1d:f9:36:55:cb:26:f4:49:0e:79:9a:3a:
9e:17:17:80:fa:8b:bd:d8:f2:74:7a:93:49:17:32:
f5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:AC:FB:12:53:4E:20:0F:0E:4C:47:65:6D:D5:AF:65:59:66:4B
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:03:21:93:1b:f4:06:64:1f:14:bc:12:9f:c3:a8:d0:f6:8c:
7c:80:a3:b3:a1:5a:38:2e:ad:46:4c:e6:3c:fc:f2:f2:0a:5f:
86:31:1d:ff:33:1e:ca:02:df:b2:bb:a2:1a:89:5c:f6:9a:57:
25:4e:d2:ec:eb:50:8d:be:b2:7f:74:e9:87:e6:8a:91:f3:7b:
81:64:cc:db:ad:22:96:20:e2:36:6c:aa:e3:f5:99:c7:a4:cb:
82:bf:f5:9f:03:4b:ef:f4:40:eb:4d:73:96:b3:01:4a:16:d9:
7e:9f:fa:2a:53:02:4a:4e:7c:6d:8b:66:4c:3c:00:4f:73:81:
ec:3b:3d:08:9b:08:b1:f0:b4:8a:bd:a2:dc:2c:7b:3e:ef:75:
14:62:ff:fc:88:4d:21:ae:8b:10:ed:df:7c:c4:6e:41:aa:4f:
b1:af:f3:2a:fe:98:72:51:b3:89:51:58:66:38:c4:e6:bd:00:
6a:67:53:aa:b2:87:36:a6:2e:67:06:5e:02:85:f8:ad:0b:2d:
b6:1e:21:d0:4d:5d:25:80:1d:64:5d:4a:c2:6b:da:17:f4:8e:
91:7d:9b:37:3f:8d:d3:f7:ec:11:0e:00:f3:0d:c6:d8:20:54:
21:0a:4b:4d:e9:48:a5:a9:89:e1:72:ce:60:b6:c6:9a:0c:11:
d0:71:32:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKy12zTnaJRBYDUvJC5ruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz
NjBkMzIwHhcNMjYwNDE3MDIwMDM2WhcNMjYwNDE4MDIwMDM2WjAzMTEwLwYDVQQD
Eyg5N2JiYWNmYjEyNTM0ZTIwMGYwZTRjNDc2NTZkZDVhZjY1NTk2NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAbEKXDBH1rhBK9nvRw2Dy8DLyoK
N9s+ULgwE+9vLW1f0s1HHmKOqwxw52eEjMTPF/CsHxSjC4oyCWAUw26LugeQ+9Ri
friv0erFHPOmNi2uhYzsoYv7cpluGirLKqOpeEczG2sMEYo6Jh0kEDbUYUerzH7d
FGDMXovBK/OMZ/jEjdjXznTB08R68qRlO9eWSA1U9LPKkbmOFsuIEY7Qd9x9kcLC
ZUQWsWtKO9BuuEoH86z3x0DNiTj3AG4jJYQ4LslCwPdZDsGM1WA9+TXy82ngnTeG
3C9+ZgmgVm9Qzi5AxQ8d+TZVyyb0SQ55mjqeFxeA+ou92PJ0epNJFzL1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe7rPsSU04gDw5MR2Vt1a9lWWZLMB8GA1UdIwQY
MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt
MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2
LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQMhkxv0
BmQfFLwSn8Oo0PaMfICjs6FaOC6tRkzmPPzy8gpfhjEd/zMeygLfsruiGolc9ppX
JU7S7OtQjb6yf3Tph+aKkfN7gWTM260iliDiNmyq4/WZx6TLgr/1nwNL7/RA601z
lrMBShbZfp/6KlMCSk58bYtmTDwAT3OB7Ds9CJsIsfC0ir2i3Cx7Pu91FGL//IhN
Ia6LEO3ffMRuQapPsa/zKv6YclGziVFYZjjE5r0AamdTqrKHNqYuZwZeAoX4rQst
th4h0E1dJYAdZF1KwmvaF/SOkX2bNz+N0/fsEQ4A8w3G2CBUIQpLTelIpamJ4XLO
YLbGmgwR0HEyjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:57 2026 by rpki-client