Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: fjEKF1Fy0+j2A/rMb0SaIqPTHO0vuTVGXks+a+tS9bk=
Subject key identifier: F6:8F:5F:BA:77:8C:50:C1:C6:3E:CB:44:61:FF:99:22:69:5C:A0:25
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 01A0C4445631E88BC5005C4A4699B1D3890A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 14:00:07 +0000
Manifest this update: Mon 21 Sep 2026 14:00:07 +0000
Manifest next update: Tue 22 Sep 2026 14:00:07 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: YF+O6no00kURi7172+gxZpDba4aYUMzZGtge6U0RJ7w=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:56:31:e8:8b:c5:00:5c:4a:46:99:b1:d3:89:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Sep 21 14:00:07 2026 GMT
Not After : Sep 22 14:00:07 2026 GMT
Subject: CN=f68f5fba778c50c1c63ecb4461ff9922695ca025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:0f:b3:9a:b9:ce:8f:e5:af:83:25:d6:d6:
ee:8d:ee:bf:3a:af:17:d5:d8:12:2f:52:51:34:9c:
af:67:3f:5d:0d:fa:eb:80:fe:83:08:62:3a:e4:58:
30:35:df:b4:dc:bf:5b:a6:dd:97:53:07:9a:b9:a4:
95:b6:10:4a:ca:f3:4a:5d:0b:58:dd:85:e9:f1:6a:
66:07:5a:fb:b3:bc:da:f9:50:36:b0:f8:4f:d5:ab:
72:c3:f1:8c:34:26:c4:b3:41:fa:f7:c9:f7:9b:63:
3c:69:cf:f1:aa:62:95:5d:f2:cb:e2:33:d3:b0:2b:
7c:ad:4a:8e:bd:74:c3:5d:f4:50:15:68:e7:7b:23:
dc:df:dc:00:15:32:29:34:4a:b6:b2:12:9f:8a:67:
16:45:55:c7:dd:ee:0c:b9:89:38:87:54:83:e0:9c:
75:17:a1:2b:57:77:c8:97:06:d6:76:02:1f:52:b7:
fa:de:52:46:a6:ea:1a:4c:20:fa:f9:96:81:96:a0:
1c:7c:23:d2:30:38:7f:21:64:63:06:91:c6:58:c5:
eb:e3:82:b1:ac:f0:87:a3:54:4f:14:6a:8c:fe:0d:
79:2a:1a:68:ba:0a:44:ef:b5:fd:a2:21:23:ef:08:
b7:30:d9:5a:27:48:3f:39:59:12:1c:db:43:b9:44:
fd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8F:5F:BA:77:8C:50:C1:C6:3E:CB:44:61:FF:99:22:69:5C:A0:25
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0c:46:fd:68:5f:33:cb:ea:34:10:0b:85:9d:7a:91:6e:84:
e7:68:4d:26:fb:e3:3b:4e:f6:00:5a:67:e0:02:cd:17:85:15:
44:7e:bc:19:a0:f4:49:84:ec:43:97:92:4e:f6:08:bc:73:1d:
c7:d6:b9:21:15:9f:dc:23:7c:45:ba:86:fd:73:d7:b1:7a:4b:
ef:43:ad:48:e2:54:d2:62:6a:78:43:40:24:d4:6b:c4:9e:c0:
c0:30:be:65:ca:6d:2e:d5:70:05:08:44:f4:11:73:74:a0:66:
d5:cb:5f:d5:1c:da:cd:2d:8d:ca:1b:05:5d:04:b2:2e:da:5a:
66:54:98:96:33:65:c6:30:5d:f0:32:6c:7f:74:7e:36:49:0a:
0e:b4:b6:5e:8d:71:48:d2:93:ef:81:6a:81:e5:0d:1b:28:92:
0f:48:1c:5c:a4:fa:53:e6:b1:0c:80:ad:82:62:73:6d:30:e1:
5a:03:65:1d:16:35:5b:5a:64:cc:1b:60:54:81:60:65:2e:0e:
26:3b:84:f4:7b:21:a2:25:00:eb:01:32:78:26:27:77:3b:2e:
2a:ed:73:42:1e:32:23:17:e9:59:f0:67:e9:6e:7f:95:68:46:
f0:0d:d6:15:ee:00:41:41:45:b1:fd:87:e1:8c:3d:d1:81:43:
3b:04:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:12:36 2026 by rpki-client