Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: d4wToSC4H9YZzKnzDIebdle0QUXpnlVlt3CtPDLSfdo=
Subject key identifier: 30:AF:BD:95:AF:B9:49:EB:FC:EE:A9:58:3E:A6:F4:DE:37:99:5E:EB
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019CABA1FC31B233447C88BFED92D5A50664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: OEPoR4PUM9eYMU6LYt1W6T/OSAxAnplQziJP64SIDos=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fc:31:b2:33:44:7c:88:bf:ed:92:d5:a5:06:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=30afbd95afb949ebfceea9583ea6f4de37995eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f6:03:88:30:cc:5a:fc:47:72:55:b1:6c:ac:
9c:37:3a:63:e8:6b:26:28:4c:ee:d6:93:02:44:64:
51:54:99:ce:35:21:67:b5:3d:73:ef:34:6d:68:79:
0a:50:d2:a0:15:d7:43:7a:b3:af:6c:cc:ee:2d:d1:
4e:eb:55:f3:e2:24:5d:ac:fb:65:65:ea:4f:7c:f4:
1c:9d:ef:8c:fb:e7:91:e8:74:bf:01:d8:ac:6a:8a:
ce:45:a6:86:18:b8:ed:a3:51:62:ce:72:a8:70:8f:
04:d6:a2:c0:41:5e:4b:9c:91:e6:9f:f5:d0:ea:dc:
04:0b:15:d3:62:78:b7:9a:a4:d9:89:67:4a:fc:1b:
7a:f0:69:2c:96:ec:02:c2:ff:56:a9:04:82:c5:78:
57:51:6c:31:52:37:f9:50:5f:a9:15:7e:53:9e:05:
38:24:84:48:5b:bb:e8:e0:70:c9:0f:45:eb:6c:bc:
20:87:a4:a8:2b:7c:e3:20:d5:cf:fe:73:47:d9:7a:
aa:cc:2d:7e:19:d7:2a:07:dc:2e:97:ba:e8:1d:f0:
84:94:5b:48:a2:df:31:8c:50:5a:05:d5:8b:ac:2d:
f8:e4:22:ef:53:bd:f8:aa:2f:54:13:16:c2:46:09:
d9:ef:b9:68:ef:67:01:e4:c5:c2:b7:c5:0c:36:39:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AF:BD:95:AF:B9:49:EB:FC:EE:A9:58:3E:A6:F4:DE:37:99:5E:EB
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a2:bf:01:d5:92:b4:2b:44:75:4a:bb:f4:f8:ea:ae:02:a2:
85:89:89:28:7b:b4:fb:5a:ce:16:79:d4:70:0a:ba:2c:f6:11:
a0:20:72:dc:f9:8f:00:56:82:a4:97:ad:b0:cb:67:a1:cc:cd:
56:c6:95:7d:83:36:74:e6:13:fc:b7:81:ee:8b:b3:f5:54:60:
3c:a6:c3:b7:d5:ba:d6:96:bc:2e:f1:c7:cc:35:c1:6d:37:76:
d2:4c:e4:14:47:4c:87:44:7f:98:51:d6:0f:8f:b0:7a:75:20:
07:ec:6a:6f:dc:a0:24:5e:dc:6c:e1:14:b4:a9:99:24:5e:f2:
1a:28:d9:cd:41:96:c5:7e:c0:43:aa:81:de:1e:a8:2b:c4:ab:
5b:67:9e:b5:9a:f3:de:3f:a3:fb:17:5d:6e:ad:b6:f5:56:e6:
4f:fa:e5:51:9c:fe:f0:aa:9d:80:7e:59:44:5b:7e:22:fc:34:
3e:eb:d1:3b:3d:fc:68:c1:25:ce:4b:5b:dc:c2:1c:33:82:ae:
84:6b:b4:47:10:c7:b6:dd:e7:2d:c1:a4:9d:33:7d:b1:98:5b:
67:b9:df:43:e8:1a:af:49:42:93:45:07:f9:bf:55:f6:3a:e7:
f2:61:bb:9f:5a:d0:c6:4d:3e:cc:aa:72:b3:db:dc:67:ac:62:
a2:52:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:18 2026 by rpki-client