Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: DL7wafan+tYroy+doiCeTFRPbdwwzuK15aAp8RZapuw=
Subject key identifier: 4B:7D:A6:FC:AD:C9:0E:5F:BD:4F:24:4D:B9:B7:CA:67:A3:79:3F:1E
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019D9B19EA81599D630820F56BE469CF2379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 11:01:00 +0000
Manifest this update: Fri 17 Apr 2026 11:01:00 +0000
Manifest next update: Sat 18 Apr 2026 11:01:00 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: xqPZRElz4+Mg614+y8xzg9aaqGKZ5cexkKwfCrMLvuA=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ea:81:59:9d:63:08:20:f5:6b:e4:69:cf:23:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Apr 17 11:01:00 2026 GMT
Not After : Apr 18 11:01:00 2026 GMT
Subject: CN=4b7da6fcadc90e5fbd4f244db9b7ca67a3793f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:3c:bb:d8:79:07:b2:ef:4f:d1:a4:be:16:
76:59:58:83:c1:23:6c:c8:ce:3a:f2:74:b8:7d:85:
dc:39:ae:0e:af:bb:e5:ee:b6:bf:04:7b:7f:84:94:
a1:32:15:77:4b:f8:79:a6:99:2f:b7:e1:81:82:99:
8f:e3:41:25:ce:57:bb:eb:e2:43:40:41:3a:cc:97:
57:02:60:63:49:e9:05:54:8b:e3:4f:29:c7:b0:71:
a7:56:00:1e:a9:db:8b:50:94:45:73:27:b6:08:ef:
a9:42:2e:39:12:1d:15:0f:cd:1f:aa:84:c5:b6:6e:
aa:65:a1:4e:22:a1:76:b1:5d:b3:64:11:91:c8:d0:
fd:15:13:b7:f2:4b:32:10:21:0d:3d:50:47:67:79:
98:97:92:89:b0:29:6d:dc:34:97:2f:2b:04:01:87:
6c:31:9e:16:a8:a5:8b:d3:a3:4f:aa:c8:c8:d8:80:
3b:64:d1:31:99:1f:d1:9d:0c:5e:63:3f:3a:cb:73:
4b:c7:02:8c:2c:29:e1:d1:77:af:c9:26:d5:54:40:
34:69:2b:f1:83:c0:26:f5:f0:37:d2:71:e3:5f:3c:
bd:de:8c:10:76:5d:34:9d:00:dd:bb:a7:02:7f:0f:
9d:40:e9:c2:95:6e:25:95:78:e8:40:8a:d4:1a:55:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7D:A6:FC:AD:C9:0E:5F:BD:4F:24:4D:B9:B7:CA:67:A3:79:3F:1E
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:91:bc:9e:b0:29:ed:52:5d:63:9d:45:17:20:7a:e6:8f:
22:ae:ca:79:e3:c5:87:bb:4d:96:03:8c:b6:c9:68:20:ea:4e:
97:9c:ca:93:84:9d:24:74:dd:8b:bc:59:2f:02:a3:67:5d:73:
12:eb:74:2a:fb:97:9b:45:bf:98:25:e6:13:d9:75:cd:86:a9:
9c:fd:a4:d1:ef:84:2a:3a:25:54:57:91:5d:f2:f6:31:2d:a5:
b5:34:a3:37:b4:ff:40:0c:11:8a:59:6c:63:8e:dd:82:b0:7b:
24:01:39:18:4d:6e:f6:14:fd:f7:e7:bd:70:83:bb:d5:0e:c3:
62:a0:ba:52:ac:37:b0:0d:dd:b8:0a:a9:df:0f:4c:1b:3c:04:
7d:10:dc:5f:f6:ae:d1:2b:ba:66:0a:ba:f2:0e:88:f4:be:d9:
76:7c:97:94:b2:a9:24:58:1b:f6:2c:13:99:dd:2b:d6:24:b1:
97:b1:d4:d2:1c:af:08:74:83:54:5f:a3:d3:65:6e:43:cc:9f:
13:ac:61:83:12:b8:a7:4f:19:e9:68:53:3f:36:42:85:42:07:
31:79:3a:ec:b7:47:35:fd:c0:a9:5b:0d:3b:ed:4f:45:2e:02:
aa:b7:aa:e5:08:73:9a:b1:9c:1f:c9:d4:04:a3:9a:de:0c:28:
d1:96:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:58 2026 by rpki-client