
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier: oZpaDZL1t7Vm/jfx33yUmo/auveFQOZcbm7tf9RgORk=
Subject key identifier: DF:AA:13:52:59:AF:09:F6:DF:66:6B:30:D8:25:D7:52:A2:E3:AF:6E
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial: 019D992B24BBA472BFC2741F8062266A1753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 02:00:34 +0000
Manifest this update: Fri 17 Apr 2026 02:00:34 +0000
Manifest next update: Sat 18 Apr 2026 02:00:34 +0000
Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: sBmQfDkXChP6Yj0j4NM0a2Lf7TgNvx2y9iCoHIDmVE8=)
2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:24:bb:a4:72:bf:c2:74:1f:80:62:26:6a:17:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
Validity
Not Before: Apr 17 02:00:34 2026 GMT
Not After : Apr 18 02:00:34 2026 GMT
Subject: CN=dfaa135259af09f6df666b30d825d752a2e3af6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:e7:4c:f7:d1:b5:78:d2:94:de:5c:73:1d:
38:d0:83:d8:e9:03:e4:d3:46:fe:03:e5:db:bd:4f:
9a:da:99:a8:b4:42:db:69:61:e2:d7:15:87:48:1b:
32:08:35:b5:3c:20:ef:f2:50:2c:cf:ec:bf:8a:65:
0d:73:40:82:b4:d2:e6:20:21:ef:6d:1a:dd:81:a2:
62:b0:67:0a:f7:38:2c:c5:3a:d3:07:17:aa:69:6f:
d8:52:70:2d:a2:a1:69:8b:19:d7:e1:48:7d:a9:af:
91:79:92:19:81:85:cf:ed:79:bb:20:c1:a6:92:e3:
5f:58:f5:dd:11:f0:37:6f:01:17:9e:59:45:f2:69:
d4:73:d5:0e:cf:a8:bf:d2:a1:d5:8a:05:63:26:b1:
bb:6a:d5:5c:b5:99:a4:11:d8:c2:24:f6:da:f1:8c:
7e:bb:ec:18:8f:d5:5a:a5:08:4e:75:52:96:e9:05:
28:2f:81:91:a9:97:0c:8e:ba:dc:84:2e:94:c9:f9:
7a:d8:3b:43:89:d2:f4:e9:2d:9f:b1:9b:2d:15:dd:
a7:cd:77:0a:d6:19:00:cf:d3:42:8d:90:ef:9c:1d:
43:25:07:d9:f3:ec:da:6f:ec:25:77:05:de:eb:cc:
d8:eb:97:cc:d1:d1:07:9a:dc:1b:48:e6:ed:66:6d:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:13:52:59:AF:09:F6:DF:66:6B:30:D8:25:D7:52:A2:E3:AF:6E
X509v3 Authority Key Identifier:
keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:dc:61:9e:73:16:1f:20:e0:b4:c4:3e:7a:83:4c:9d:dc:bc:
06:3a:0b:78:3d:6b:41:a5:15:4e:18:90:c6:82:5c:5f:c0:b7:
67:f0:6b:4c:e3:8d:ba:fd:f5:5a:86:c4:76:23:de:eb:d8:2c:
23:1f:a7:5f:06:33:b0:ac:ef:0d:af:77:1c:5d:95:2d:05:06:
16:f8:48:4d:3b:fb:48:32:b5:3f:c5:da:cb:ef:12:d1:7a:33:
a0:f1:75:0c:97:7d:58:8f:a5:10:09:8b:04:2a:34:a8:a0:97:
84:62:fa:86:a5:d2:6f:05:86:ed:eb:58:96:09:56:b2:9c:c4:
85:f7:2a:b7:b2:34:c1:76:bc:a5:d0:63:1b:6e:87:51:ed:eb:
02:b6:e2:5f:8f:78:c7:81:c8:3c:7d:32:22:89:79:e9:2f:83:
7c:a6:d4:a4:4d:55:5c:dc:28:0e:58:2d:5e:b9:e7:a7:1c:67:
48:89:62:64:00:6c:29:34:99:40:c0:44:ed:9e:fa:b9:92:b6:
99:68:75:a6:31:54:e9:d2:23:b7:14:e1:bc:fb:21:60:22:b3:
13:2c:a1:52:a8:a7:1e:b6:7c:ce:a0:07:a1:7e:48:6b:c3:1d:
14:94:73:e1:d9:23:d7:a4:61:d5:b5:90:05:43:21:5c:55:a7:
e0:e6:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:52 2026 by rpki-client