Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File: B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier: pgruF7tP8CPD3xtGLacvj6LLNHHeCPnXck4mxesBcvg=
Subject key identifier: 71:78:8B:8B:74:77:ED:71:A5:82:9C:D5:C4:C0:0C:52:23:1F:A2:15
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial: 01A0C444DCA380E3D9B26EE3973911C94798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 14:00:42 +0000
Manifest this update: Mon 21 Sep 2026 14:00:42 +0000
Manifest next update: Tue 22 Sep 2026 14:00:42 +0000
Files and hashes: 1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: J8IarbmtLzSzm5Eyh/37EC5/xHJiRP832VxtRS47D8Q=)
3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
8: q3xB1TlmhDj055zlvy4aiXlZXlk.roa (hash: 3L2aJ4MWJ0YKmWL4+Damuuwr/sJjzRrBG+ZnvYerwp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:dc:a3:80:e3:d9:b2:6e:e3:97:39:11:c9:47:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
Validity
Not Before: Sep 21 14:00:42 2026 GMT
Not After : Sep 22 14:00:42 2026 GMT
Subject: CN=71788b8b7477ed71a5829cd5c4c00c52231fa215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:7a:7c:a9:5c:81:95:ad:d3:5f:1e:10:0a:
7b:f5:b8:51:87:41:48:cd:ed:49:88:a8:4d:4d:42:
7e:bf:e3:fa:ad:fd:d9:d6:82:53:f2:24:89:7b:a7:
f1:c7:89:73:7e:af:77:52:ec:ba:c4:fb:3a:b0:99:
90:da:3d:46:88:b2:c6:56:e1:06:ca:38:21:61:93:
96:1c:2b:cf:82:cf:3f:60:04:d2:52:6b:67:1b:19:
39:09:0d:f2:ba:b8:92:66:35:09:fe:78:d2:7b:a8:
6a:96:f4:b6:71:10:c2:18:b1:3f:17:00:92:d8:39:
b7:40:80:ad:38:06:4b:83:95:4c:e7:84:e7:ac:19:
83:ff:f4:10:f0:43:a9:1b:1b:14:33:04:12:9d:6d:
28:eb:80:94:d3:e1:40:ea:14:3e:a9:e4:24:f9:97:
81:63:13:b0:c6:12:5b:d7:08:cc:11:8e:d4:65:9b:
71:db:50:e8:cc:fa:b8:d5:b5:67:2b:b1:e6:d5:b8:
21:99:8b:4b:f4:7a:2d:e8:dd:8a:30:c3:b3:fc:f9:
36:db:2a:b8:b4:e8:f3:f3:65:e6:19:a2:8b:52:3b:
e2:44:ea:f7:12:c5:8d:cc:56:c3:b9:a0:8e:39:40:
2c:f9:18:1e:1e:ac:21:1c:33:d0:00:70:02:fc:ca:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:78:8B:8B:74:77:ED:71:A5:82:9C:D5:C4:C0:0C:52:23:1F:A2:15
X509v3 Authority Key Identifier:
keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5e:8b:ed:17:a3:f7:83:d6:4e:35:29:c2:47:84:a5:00:5d:
ca:05:ad:9e:10:6c:65:b9:3d:38:3c:f3:88:f5:18:21:d6:16:
a1:07:16:e4:0f:b3:e9:97:e5:5e:62:51:04:c9:6b:00:05:58:
41:2b:49:a5:77:5b:c9:17:1c:bb:0e:fc:a6:34:3c:5d:f0:e8:
fe:e8:e0:e2:10:f9:3b:db:46:44:e4:39:f5:ed:61:96:47:e7:
aa:92:b8:6f:33:a4:a0:c5:46:56:3a:34:eb:b9:ab:98:80:14:
85:72:cf:74:43:4c:62:13:80:46:7f:7d:d5:ed:bc:08:a0:3c:
0e:43:1d:b4:cb:9b:08:81:90:92:ca:8c:3b:84:9e:25:c9:a7:
3e:a5:d7:de:69:05:e4:0a:10:bd:af:eb:4c:b1:b1:b2:ca:ee:
3d:33:bf:68:08:99:9c:79:cc:9d:07:5f:39:f0:c5:cc:ff:37:
8b:a6:be:43:5d:a3:52:72:59:39:d0:61:65:37:0e:86:1b:86:
67:ca:cb:0e:c2:8b:74:56:af:d2:ca:35:a2:bb:4e:ca:25:99:
c8:37:77:1c:97:78:d1:0a:8b:2d:c9:4c:3d:30:4a:9c:13:e0:
83:79:60:bc:ad:b5:0c:44:7d:8b:70:38:c6:58:28:22:81:ca:
1d:28:50:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:43 2026 by rpki-client