Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: 24IbZMyE4xBkyCNbvK4pfMJBF+kWg3y4x2uCpPTTttw=
Subject key identifier: 75:D8:FB:25:7A:AB:85:15:0C:D4:D0:A1:78:34:96:DB:EF:F3:41:EB
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 019D988693BE93287B12B5951A6F72F31E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:49 +0000
Manifest this update: Thu 16 Apr 2026 23:00:49 +0000
Manifest next update: Fri 17 Apr 2026 23:00:49 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: 492Rx6+aB2++GCr5IxO27ZkCMewyxSDfHduaAzqDBfo=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:93:be:93:28:7b:12:b5:95:1a:6f:72:f3:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Apr 16 23:00:49 2026 GMT
Not After : Apr 17 23:00:49 2026 GMT
Subject: CN=75d8fb257aab85150cd4d0a1783496dbeff341eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:18:bb:b9:fe:c9:86:c2:e7:f5:b3:08:db:
f9:32:f8:4d:be:84:f4:56:26:a7:6a:88:1a:e3:17:
9b:24:a2:ce:ae:c5:32:e7:61:9b:d4:e0:98:32:45:
c9:43:1e:22:62:e1:af:74:06:7b:68:bb:72:52:7a:
a2:f5:ad:d1:13:d8:4b:7d:44:70:d9:fd:52:98:73:
0a:9f:f4:ab:a9:4d:14:46:80:96:3a:7e:59:f7:de:
cd:96:8f:a0:ee:76:6b:85:23:10:03:64:b8:ff:f0:
e8:5d:5d:93:3b:10:12:c2:63:c9:13:ea:b5:15:f9:
c9:ef:ff:53:38:42:7f:24:89:49:ea:6e:c5:e1:9d:
4f:34:b0:f3:c6:72:cf:3a:af:e0:3a:4d:bb:2f:f0:
c4:12:23:2a:c4:21:8d:0f:32:e1:51:5b:79:ec:18:
05:8c:d6:70:37:3f:d4:2e:4a:73:61:50:13:ca:c8:
0b:cf:08:89:a0:b2:17:1c:f3:3b:f4:d7:a8:dd:bb:
60:b8:56:25:51:6a:06:ff:e3:56:3e:a7:6e:48:8a:
e3:f8:51:f7:2b:6e:81:27:c1:d4:f2:97:25:7e:16:
c9:bc:98:b7:f6:4e:96:05:ba:2f:28:d7:9b:4a:5a:
f1:91:96:8e:14:12:94:b5:01:3e:4e:16:9d:29:25:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:FB:25:7A:AB:85:15:0C:D4:D0:A1:78:34:96:DB:EF:F3:41:EB
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:82:6a:19:a3:91:f1:c0:9a:86:3e:ac:65:fb:1c:33:58:9b:
94:1e:a6:6f:07:b7:21:68:9d:12:11:f8:cd:44:b7:64:c4:68:
2f:37:d2:49:d7:6d:59:ad:be:85:e4:df:27:5c:76:2f:ac:3a:
55:11:a0:51:01:fa:20:5c:6a:a0:f4:28:d8:47:bf:d5:3f:39:
8b:5b:79:29:72:ee:57:4c:ea:99:a7:93:f2:22:1d:6d:4f:22:
fb:f0:73:cc:93:37:f6:c2:f6:68:54:93:2f:a8:44:e7:44:7f:
00:85:97:c7:28:c7:92:64:44:a9:c1:7a:b4:19:70:53:60:86:
f4:6d:b2:73:0b:8a:a4:89:1f:c8:60:ed:01:bc:0c:6b:ed:50:
69:75:df:ff:31:4e:95:24:41:9b:82:79:06:0f:47:64:e1:a8:
c9:df:93:a6:11:0f:53:67:db:2a:9d:14:be:01:25:4c:2c:05:
60:3f:bd:ff:15:9a:11:85:3f:8f:59:6c:32:98:b5:96:34:9b:
f2:ac:e5:b6:ea:cc:4e:2f:d5:f9:3d:98:a7:25:d5:09:c1:60:
80:d1:a1:5f:77:c2:97:b7:b3:8c:06:44:62:a4:65:0d:73:8b:
67:e1:0c:af:b1:16:5e:9b:81:01:50:22:97:fb:2a:82:04:ce:
45:c7:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:14 2026 by rpki-client