Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: Smcv2/TiDFOOLOd2UARvMtu6OgYmHWaQ3CE3U6Cu4j8=
Subject key identifier: BF:0B:7A:FC:AD:DA:3D:C4:12:50:7D:8D:33:26:9E:84:94:19:EC:C5
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 01A1DE396524D1CD6A5406D3E2C0CCA2DCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 08:01:05 +0000
Manifest this update: Sun 15 Nov 2026 08:01:05 +0000
Manifest next update: Mon 16 Nov 2026 08:01:05 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: KqZY0903+KE5WzucaM/0v0i3Ogijuevq58cHR+g0RmY=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:65:24:d1:cd:6a:54:06:d3:e2:c0:cc:a2:dc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Nov 15 08:01:05 2026 GMT
Not After : Nov 16 08:01:05 2026 GMT
Subject: CN=bf0b7afcadda3dc412507d8d33269e849419ecc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:fc:86:54:05:d0:54:c1:54:c0:56:d1:d1:
3b:cf:d6:0d:d4:dc:8f:d5:4d:4a:0e:df:00:03:ea:
bd:ac:c4:42:89:e4:41:e5:a5:ad:ab:3e:a9:4a:e7:
29:ee:81:16:d3:f9:65:a3:ad:14:00:06:b4:2c:b2:
4e:21:4d:74:ea:d3:f4:9c:33:b0:98:03:36:f0:64:
fb:c8:b7:21:83:f7:8e:01:cd:14:32:3f:1a:00:6f:
83:74:97:83:18:83:ee:e2:7f:4b:b9:34:a2:94:03:
f2:de:3f:9b:36:2f:b3:87:2a:df:a5:82:8f:c1:80:
db:22:1e:cf:2b:f5:eb:09:f6:e4:a3:05:ba:5b:75:
f9:98:15:97:3f:8a:7d:e1:57:df:fe:3d:fc:9a:35:
10:b5:b6:dd:f7:64:22:11:e3:bd:11:7d:b7:a7:a8:
4e:16:2d:e9:93:a3:75:cd:e8:c6:7d:ea:d2:da:cc:
ce:66:ea:fd:65:93:a4:3c:2b:c7:ce:34:90:ea:d8:
95:46:18:34:27:14:02:9c:86:55:5c:28:ce:fe:52:
04:39:1b:b3:68:c2:5a:bd:14:67:c3:7c:96:c4:0c:
01:61:8c:54:0b:7c:7f:bf:10:fe:96:69:e5:b3:88:
67:b2:13:64:ee:1a:08:3a:88:65:fc:4b:2a:4f:be:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0B:7A:FC:AD:DA:3D:C4:12:50:7D:8D:33:26:9E:84:94:19:EC:C5
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:86:5d:73:a9:0b:1b:ab:9c:de:79:8c:ac:5c:6d:75:01:55:
c6:63:2e:fa:16:7d:d5:23:99:f3:76:7f:36:7f:71:47:6e:d9:
d4:ed:1e:55:06:16:11:54:b5:b6:61:ff:33:6c:bf:70:14:ee:
3e:f5:71:58:88:ab:da:b5:4c:09:b1:f1:42:62:3a:d7:64:f0:
53:aa:b8:60:34:85:ed:6d:08:61:b4:61:b6:57:07:60:5a:ed:
92:1e:ad:19:f3:f1:86:1c:a1:e6:fa:6b:68:2d:b6:c8:15:5d:
61:af:cf:9f:4d:04:75:9b:05:c6:16:c2:22:38:08:9e:d4:c1:
8a:87:f7:f4:20:8b:40:a5:8c:7b:8f:1f:ea:d3:13:9f:7d:55:
7f:18:9f:81:36:6a:bf:6c:eb:93:31:e2:0a:97:99:32:cf:f3:
ac:b8:b6:67:ab:9c:1c:f9:68:71:a3:4a:ab:c3:b0:37:53:66:
68:12:07:80:17:55:c4:17:4e:69:7d:87:29:05:89:dd:e7:f5:
8b:ab:c4:65:17:49:d2:63:25:10:f0:22:9e:02:57:bc:3e:f5:
bd:6a:91:4f:9d:d7:9e:14:a8:d2:21:34:f8:7b:a9:59:68:31:
2c:5b:7c:99:60:41:14:0e:bc:1a:d0:23:fd:c5:10:48:24:1a:
ab:b8:70:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOWUk0c1qVAbT4sDMoty8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1
NmQ0NWUwHhcNMjYxMTE1MDgwMTA1WhcNMjYxMTE2MDgwMTA1WjAzMTEwLwYDVQQD
EyhiZjBiN2FmY2FkZGEzZGM0MTI1MDdkOGQzMzI2OWU4NDk0MTllY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIr8hlQF0FTBVMBW0dE7z9YN1NyP
1U1KDt8AA+q9rMRCieRB5aWtqz6pSucp7oEW0/llo60UAAa0LLJOIU106tP0nDOw
mAM28GT7yLchg/eOAc0UMj8aAG+DdJeDGIPu4n9LuTSilAPy3j+bNi+zhyrfpYKP
wYDbIh7PK/XrCfbkowW6W3X5mBWXP4p94Vff/j38mjUQtbbd92QiEeO9EX23p6hO
Fi3pk6N1zejGferS2szOZur9ZZOkPCvHzjSQ6tiVRhg0JxQCnIZVXCjO/lIEORuz
aMJavRRnw3yWxAwBYYxUC3x/vxD+lmnls4hnshNk7hoIOohl/EsqT76/UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8Levyt2j3EElB9jTMmnoSUGezFMB8GA1UdIwQY
MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt
ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1
LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYZdc6kL
G6uc3nmMrFxtdQFVxmMu+hZ91SOZ83Z/Nn9xR27Z1O0eVQYWEVS1tmH/M2y/cBTu
PvVxWIir2rVMCbHxQmI612TwU6q4YDSF7W0IYbRhtlcHYFrtkh6tGfPxhhyh5vpr
aC22yBVdYa/Pn00EdZsFxhbCIjgIntTBiof39CCLQKWMe48f6tMTn31VfxifgTZq
v2zrkzHiCpeZMs/zrLi2Z6ucHPlocaNKq8OwN1NmaBIHgBdVxBdOaX2HKQWJ3ef1
i6vEZRdJ0mMlEPAingJXvD71vWqRT53XnhSo0iE0+HupWWgxLFt8mWBBFA68GtAj
/cUQSCQaq7hwEA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:22:07 2026 by rpki-client