Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: zJN4a0/dktwWiwBovtcxO78q1QH0+6/+gT/QaK+4RFM=
Subject key identifier: 1D:1A:8D:31:72:D3:A0:38:3B:27:6A:63:D6:B5:22:78:FA:99:41:77
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 01A0C8217FA616E64FC0B22763D03CC0FEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 08:00:33 +0000
Manifest this update: Tue 22 Sep 2026 08:00:33 +0000
Manifest next update: Wed 23 Sep 2026 08:00:33 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: Ih5T+4TH9spkYjjpkBMyB/MDbiXd4rRAJweKPji0PuY=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:7f:a6:16:e6:4f:c0:b2:27:63:d0:3c:c0:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Sep 22 08:00:33 2026 GMT
Not After : Sep 23 08:00:33 2026 GMT
Subject: CN=1d1a8d3172d3a0383b276a63d6b52278fa994177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:62:09:95:54:8a:1c:18:6d:e7:56:db:1e:
f1:ea:11:c6:28:27:5f:4e:eb:30:9f:d2:82:20:ea:
de:78:0f:8b:12:89:ea:f5:b9:2c:db:d5:75:2c:c8:
1a:aa:ec:57:aa:d4:38:97:fe:51:21:b7:8e:7a:7d:
7a:fd:ad:8c:8d:6c:4c:58:96:16:65:76:d0:d5:61:
b3:d4:cb:fe:28:88:6f:57:f9:20:1a:fa:44:7a:d8:
d8:39:7c:f1:0a:54:f5:34:aa:ca:d0:65:64:8a:2a:
d2:f0:85:4f:24:96:05:87:e2:99:c4:75:d3:ff:27:
c5:8d:8e:f0:2e:0b:ae:dc:ca:c9:6c:9a:93:9b:f3:
5b:61:fa:62:d3:94:65:1b:a0:56:39:10:7a:98:61:
e3:91:89:d3:3a:bb:46:f7:a2:8b:1a:90:6e:98:e8:
7f:34:d8:51:71:4f:73:7a:30:a2:3c:d8:f9:9c:8d:
ff:91:f9:1f:9e:73:9e:a5:ac:7a:96:73:f4:44:b2:
e2:0b:f0:5e:5b:72:0b:48:0c:19:dc:a1:e3:c9:b6:
bc:c4:d6:9a:b3:ac:2b:59:7e:d0:d5:3b:ef:3d:ac:
81:a0:31:61:b1:a0:77:ee:e4:cb:6b:67:a2:f2:28:
4d:7c:2b:e1:c8:1b:c2:d4:0d:98:93:ff:f6:1a:66:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1A:8D:31:72:D3:A0:38:3B:27:6A:63:D6:B5:22:78:FA:99:41:77
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:69:c7:c0:ec:2d:b6:ac:60:63:4b:0f:42:f7:8d:8d:ff:ee:
f1:5c:8f:8a:c8:41:26:d6:c1:d5:26:41:fd:25:35:77:c5:6d:
61:70:ec:9f:2d:4d:65:25:5a:ef:bf:d3:68:e7:fa:34:a4:78:
86:a0:03:47:66:fa:16:e7:d0:ba:8f:c5:93:00:b1:9d:19:99:
f9:f3:9d:9c:52:d1:71:90:26:4c:aa:ac:e4:f4:17:65:c4:91:
bf:5c:4c:fc:b2:4c:fe:03:98:3a:06:7e:77:8b:31:ed:2f:bd:
aa:55:6a:bf:31:13:38:f1:61:6f:d0:34:92:30:84:e1:a7:5c:
10:a6:42:7a:d5:69:1e:a9:e9:c7:ce:60:10:7f:d6:db:07:98:
95:36:6c:bb:52:7e:e1:e3:40:4f:77:49:d9:ca:0c:48:21:f0:
ad:bc:55:ef:9d:b8:80:73:f1:a7:50:50:3e:71:be:ae:b1:46:
04:90:35:d6:cc:6e:3c:39:87:00:33:b6:95:a5:51:30:47:19:
98:ec:1e:e6:57:47:46:df:99:6d:82:3d:cf:71:5e:ca:a5:dd:
a2:37:cd:d9:3c:a9:5b:1b:ce:fe:70:cd:76:10:26:4f:81:47:
36:f1:a9:52:80:d1:d8:ab:cb:a6:32:ac:c0:54:bd:75:e1:47:
c5:34:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:01:38 2026 by rpki-client