Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: 06/jQq6rs5zz69hhLaEuhxEHjY1GVQpCp0a8bZA4Ito=
Subject key identifier: B5:6B:40:BA:BC:11:86:6D:6C:67:7F:3B:4C:BC:D3:03:D8:9C:C6:FA
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 019CABA262CF5644D4E1EEDD188E3206F8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: Ptz1bE+VF1LPHHwwa60ucykJo3bZgkD5rl9GytAH0EI=)
2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:62:cf:56:44:d4:e1:ee:dd:18:8e:32:06:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=b56b40babc11866d6c677f3b4cbcd303d89cc6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7f:1c:9c:2b:c5:3a:2c:d4:bc:53:c5:e6:58:
1d:66:7c:aa:52:c5:8b:ff:60:33:57:98:75:25:48:
1b:d0:d7:e6:f6:c0:1f:e2:d5:2e:76:72:48:f7:b3:
0d:09:fb:0c:1c:b9:e5:4b:56:c1:aa:39:e7:78:5c:
b8:a0:4e:75:5b:90:17:68:cf:5c:e2:3e:2d:95:be:
b7:7a:51:5d:f9:c7:26:95:c2:09:ba:8e:a6:b5:55:
a7:08:c9:45:a6:67:af:5f:ea:92:be:b4:bf:cd:15:
bc:7f:a3:6c:ad:b0:18:ac:16:d4:e0:aa:71:f1:9e:
14:75:d3:c2:4e:6c:f3:e9:68:a8:a5:2c:fe:d7:03:
47:ba:fe:55:71:38:cf:ec:bf:4d:3a:bb:c7:24:f3:
f2:6a:7b:d4:e7:d4:6e:71:e2:a6:4f:d1:2e:db:73:
3e:b1:79:50:44:41:23:8b:ef:c9:79:a1:59:ac:ea:
23:ad:45:45:98:c7:2e:ff:42:50:dc:b9:10:53:63:
cf:0b:9c:aa:dc:ca:5d:dd:ec:28:90:27:fc:96:ef:
42:51:12:86:2f:8b:bb:62:5d:6b:29:ae:d8:d2:f6:
0d:0c:54:98:ce:49:6f:fe:a9:cc:c5:54:43:b0:52:
f2:20:91:78:18:5f:3f:16:93:62:8b:a6:f5:bf:79:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:40:BA:BC:11:86:6D:6C:67:7F:3B:4C:BC:D3:03:D8:9C:C6:FA
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:80:61:c1:04:3d:84:e9:91:ca:5c:79:ec:9e:cb:72:e6:
86:3c:53:9a:19:a1:18:db:83:6b:51:fa:0c:a5:a0:72:ef:67:
fb:97:d7:3f:f7:f4:3d:26:01:fa:3a:c5:b4:65:9c:d5:a6:2e:
85:26:59:78:20:ba:0d:ce:c7:7c:d0:0b:8a:8d:f3:79:b7:96:
cf:74:c5:01:26:82:ba:7f:7a:c2:f3:66:fe:31:2f:b3:5d:7b:
cf:6b:6d:9a:ba:b7:d5:ce:0d:d8:f0:ea:56:7d:3f:6c:da:90:
b1:45:8e:e9:d7:85:56:37:56:b7:9c:23:f8:e0:4d:44:d3:a2:
31:9c:fe:93:44:bf:0f:7c:8f:c3:93:83:44:34:be:ff:b1:23:
be:6a:d5:bf:96:34:a1:e4:70:78:5e:f6:ee:bf:56:e2:fa:c5:
44:20:a6:80:2f:87:92:fd:c3:bf:58:68:df:7c:3d:9c:fb:ae:
67:4a:9b:f7:c1:af:7c:e8:83:9d:c9:5b:08:97:df:6c:27:a6:
1d:04:bd:7c:65:d6:7a:0c:94:b5:36:1c:25:df:0d:2c:bd:b5:
5a:6f:b8:8c:18:52:d0:01:6a:ae:f1:ab:f3:2e:0a:a0:0e:fd:
d8:02:7a:7a:0a:3e:57:04:69:88:e2:a3:f0:b8:26:cd:89:74:
94:d4:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:25 2026 by rpki-client