Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: 6F99g+hmrg3z0JdpXGncEi8oBH7WoZKQoa/ybFKCbFo=
Subject key identifier: DF:03:D9:4C:BB:72:32:3B:2F:6D:B7:8B:D6:5E:EB:60:07:E2:FC:F6
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 01A12089B289A291ADDC2C12CAE769BE0A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 1A98
Signing time: Fri 09 Oct 2026 12:00:57 +0000
Manifest this update: Fri 09 Oct 2026 12:00:57 +0000
Manifest next update: Sat 10 Oct 2026 12:00:57 +0000
Files and hashes: 1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: vrczOdR31zP8pUyhqHsmw2RCMirXKSyfWx8WxrLvbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:b2:89:a2:91:ad:dc:2c:12:ca:e7:69:be:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Oct 9 12:00:57 2026 GMT
Not After : Oct 10 12:00:57 2026 GMT
Subject: CN=df03d94cbb72323b2f6db78bd65eeb6007e2fcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:06:b5:a3:05:0a:17:35:bc:de:ce:03:02:
91:5d:17:41:b4:d0:c3:9a:6e:b8:b2:bc:5d:31:35:
32:8d:5d:af:20:ce:56:8c:50:20:71:50:89:7e:0f:
46:a0:20:14:a8:e6:ee:cb:7f:b1:79:cb:73:77:fa:
67:0e:19:a6:1f:75:09:a6:65:35:6e:f7:50:37:d9:
1c:24:ce:c5:82:04:43:be:97:cf:d5:fd:b6:a8:ca:
08:ec:2a:25:08:c3:23:63:26:11:e8:74:67:4b:9a:
02:a0:0a:6b:a8:18:f3:e4:42:4f:0f:6d:78:50:3b:
f7:1a:1a:4d:3a:97:36:95:e1:c6:66:cf:64:0a:5f:
4d:13:e4:b5:4f:cc:49:f6:b9:82:b6:4f:69:98:eb:
68:d7:36:f8:34:42:07:93:df:8c:80:69:0a:a0:3c:
ea:1c:fe:46:a5:98:47:1c:c9:68:b6:ad:60:5a:6b:
56:ce:bd:68:c4:83:39:4b:c4:54:2a:ba:fe:5c:1c:
cb:38:ce:d1:b9:9b:12:b4:b4:8c:13:43:d0:70:8e:
17:d3:38:b6:0a:1a:c7:8d:34:c2:da:ac:dc:1f:9f:
00:84:1d:ca:8e:79:75:a8:36:8a:68:01:65:ce:26:
16:8e:06:1f:3a:ad:a2:65:d4:ff:0e:7d:05:6b:a2:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:03:D9:4C:BB:72:32:3B:2F:6D:B7:8B:D6:5E:EB:60:07:E2:FC:F6
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a1:a5:cb:d9:58:b0:b3:db:42:7e:68:76:bd:d4:dc:4e:94:
a5:23:46:b6:a3:24:cb:25:90:c8:7e:75:e8:20:4c:1e:a1:8a:
1b:82:96:84:c5:ea:4c:e1:8d:a4:34:0b:5c:0d:98:94:82:04:
c3:19:24:0f:7f:67:f8:b5:f8:28:09:80:a5:88:f5:3d:01:8c:
c7:e8:1d:76:f4:a2:2a:c3:15:13:80:7f:97:52:a6:3e:75:22:
03:fb:04:94:c0:13:0c:12:bf:9e:24:59:1d:30:ab:2a:a6:64:
a9:51:f9:fd:d3:7a:5d:d5:50:16:1f:f5:00:3e:34:bb:3a:47:
74:d0:50:86:c4:01:d3:e4:40:f7:bb:42:44:56:16:c1:2e:45:
fc:6c:2c:52:20:4b:bf:2c:93:24:aa:e9:a9:9f:c9:73:b5:da:
18:6a:9c:db:ae:9e:5e:d6:6a:57:6a:5f:f1:35:97:64:51:2a:
bc:96:2d:57:84:25:fc:1d:44:d6:63:90:5d:09:e9:73:bc:15:
bf:fe:b5:23:78:35:29:6c:ca:13:0c:81:d3:58:0a:62:ab:be:
f1:38:9d:f3:ca:b2:6f:da:9e:e3:6c:25:93:c8:9c:07:46:ce:
fa:23:ac:51:82:7b:32:22:7b:4e:39:c3:53:e7:63:74:b4:23:
46:5e:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:35:18 2026 by rpki-client