Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File: B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier: dVQsuJ01fGB7uvdpA/5S1B1c3FC0FHjcfHwwRGeT0mg=
Subject key identifier: C3:CF:85:5E:6E:33:49:72:C8:47:BC:94:6A:BB:96:71:DC:40:12:66
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer: /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial: 019D9AAC14BAAA08784CB269C117FF8760E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 09:01:01 +0000
Manifest this update: Fri 17 Apr 2026 09:01:01 +0000
Manifest next update: Sat 18 Apr 2026 09:01:01 +0000
Files and hashes: 1: 0xSPcCHliFnpwMFUmv26_TkbvbE.roa (hash: abIn3m5KuYMzd33dZvCYHDE1IStZlNhAz5LIcGESnpE=)
2: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: UG+r6S9tWo5A4+FmefW8ltUTTzZVO7F40HbDRe7AwhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:14:ba:aa:08:78:4c:b2:69:c1:17:ff:87:60:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Validity
Not Before: Apr 17 09:01:01 2026 GMT
Not After : Apr 18 09:01:01 2026 GMT
Subject: CN=c3cf855e6e334972c847bc946abb9671dc401266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e1:67:1a:cf:aa:85:95:e7:da:5b:74:bc:2e:
18:1f:7b:d6:23:b9:2c:7a:7d:fc:a1:ad:0b:d9:2e:
53:9a:13:9c:51:85:8f:19:c7:c1:80:0b:a8:bd:cf:
c0:07:8e:4f:7b:54:32:7a:dd:21:d1:bb:1d:b5:c5:
c6:57:25:5b:e3:8f:10:19:65:c4:e8:e8:8f:41:4e:
49:95:4c:cb:8d:c9:98:fc:71:5e:5b:0f:06:49:51:
0e:16:d7:5b:3e:cc:cd:b2:51:2c:ff:76:d3:5e:f6:
4f:ae:e5:c0:bd:a0:16:22:19:03:01:95:42:d1:4c:
03:8a:90:c2:62:bf:a3:3a:6f:b9:47:91:78:c6:a5:
53:a7:69:14:f7:3a:9c:75:b7:61:dd:e9:5a:72:43:
0a:01:40:b9:b7:23:b2:60:40:1a:70:61:8d:51:49:
51:d7:4c:d5:e4:0a:e0:e7:fd:d0:59:be:ed:6d:ac:
d9:f6:15:a2:83:e6:e2:2c:b8:f0:4b:3a:ba:f8:72:
9f:1a:71:25:84:a6:7b:ba:38:53:e2:6b:65:97:9c:
6b:04:45:bf:4f:bb:9e:84:a0:9a:fb:11:9c:45:2d:
b6:df:65:19:03:48:40:89:ea:19:fa:12:2c:0c:ac:
cd:da:9e:76:5e:12:0e:d2:bd:cd:42:9c:80:49:2f:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CF:85:5E:6E:33:49:72:C8:47:BC:94:6A:BB:96:71:DC:40:12:66
X509v3 Authority Key Identifier:
keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:84:f9:c2:00:94:45:4d:59:f5:a4:56:46:77:cd:f5:99:f9:
f8:43:0e:3b:d4:ac:42:6c:ba:4e:05:b0:a4:5c:c5:a2:8a:13:
f9:3f:28:da:f0:9e:fd:64:f3:fb:c7:6c:c6:f3:2e:0c:6d:dc:
1a:37:a9:5c:24:75:e6:d3:92:88:88:e5:08:2a:a7:4d:ad:ec:
46:04:34:f4:12:e0:e3:bf:f5:93:10:1b:de:4b:5e:6a:a0:e8:
6c:d6:93:6f:92:3b:ad:a0:0d:55:ba:52:50:ed:e5:09:7c:2d:
99:4e:2f:c6:e3:94:97:e6:e4:d0:e3:d8:d5:b7:12:07:44:36:
15:91:36:e0:40:fa:fa:b2:f0:b7:c5:35:d3:f3:2e:14:d2:7b:
a5:d6:46:85:76:f3:b7:76:8b:c4:5f:9e:3f:31:4a:12:5e:0f:
e1:82:3c:d2:c5:22:c9:62:78:a5:98:ea:36:7b:b9:f4:33:94:
af:c7:62:69:d7:3a:79:47:26:ba:42:19:ff:98:de:7b:33:17:
b5:cc:27:be:0c:9b:fe:89:96:56:00:f2:66:d5:7e:6a:99:ec:
e1:99:c7:00:61:3b:f5:ac:fc:dd:d9:ea:92:4c:ce:69:21:e4:
55:62:e4:e9:25:32:e9:dc:bc:0b:15:c0:cd:1a:71:c3:ac:27:
40:ad:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:26 2026 by rpki-client