Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: FIfD/7b0LiFNmTgo1yeavoFeTD7lzCMeOjUCeJlJa2o=
Subject key identifier: 78:03:B8:F6:FF:21:32:DC:34:37:46:17:B0:1A:DE:F3:56:C7:90:EA
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 01A0C77CE9339AD72BEA88A1DEA18F453DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 05:00:47 +0000
Manifest this update: Tue 22 Sep 2026 05:00:47 +0000
Manifest next update: Wed 23 Sep 2026 05:00:47 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: r8CRPfcZeNBlz826WHFqTdEZC3Ga7VQ3ZzAi+RSsYZU=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:e9:33:9a:d7:2b:ea:88:a1:de:a1:8f:45:3d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Sep 22 05:00:47 2026 GMT
Not After : Sep 23 05:00:47 2026 GMT
Subject: CN=7803b8f6ff2132dc34374617b01adef356c790ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:da:66:ba:98:33:01:fe:c0:3e:bf:c3:d9:
c5:f7:e2:56:fd:a3:1b:24:da:b9:c9:0e:55:65:d8:
27:65:32:8e:31:a3:42:27:77:1a:a7:49:8f:38:4d:
e4:e0:40:14:e6:5e:f5:02:a8:31:6d:2a:62:ee:7d:
94:29:57:d9:83:ff:de:6a:61:77:40:01:fb:e6:e3:
6b:75:f6:37:b3:1e:19:77:d7:22:37:a0:dc:81:d9:
f7:52:3a:df:ec:80:9d:c5:6e:f7:d1:49:e8:29:80:
7b:9f:e8:38:38:3d:af:2f:7a:e1:d2:ee:3c:42:d3:
f7:98:31:40:99:81:7f:ad:44:35:b5:a8:04:d8:24:
6d:7c:6d:bb:ea:50:37:38:b1:93:7d:23:b9:25:8d:
cb:db:c2:0f:44:46:e1:89:1d:34:2e:5f:c8:00:4b:
72:9a:52:ce:6c:a4:b0:13:cb:56:85:73:92:89:ef:
0b:d3:43:2c:39:6a:ee:6d:92:8a:7f:df:0b:8d:68:
07:4e:53:ea:26:07:0c:0b:59:24:d0:f3:be:d1:af:
84:fd:0a:fc:d0:5f:f7:86:8a:25:b1:9e:c5:03:3f:
32:aa:62:fb:e0:d0:04:8d:33:fd:82:85:f3:96:85:
21:24:d2:f6:67:32:11:ca:43:1f:fb:da:a6:fd:5d:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:03:B8:F6:FF:21:32:DC:34:37:46:17:B0:1A:DE:F3:56:C7:90:EA
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:80:68:17:4f:6c:ae:55:ea:1b:5f:60:dc:b0:fb:9f:cc:8a:
21:60:dc:f3:ea:a3:09:5a:aa:30:96:6d:38:64:44:3f:a2:2b:
e4:6c:be:21:db:18:e0:9c:07:c3:28:86:1b:59:70:20:9b:6e:
04:65:54:3c:41:82:96:32:34:57:52:a4:20:39:4e:13:16:7c:
b0:4e:f3:51:d2:67:b6:21:19:7b:ff:01:49:06:18:1c:a6:ab:
a8:22:8a:00:8b:96:70:c4:17:0e:71:6b:cb:82:49:fc:97:21:
b1:e2:5b:b9:d5:09:ea:90:c5:3d:2b:81:0e:2e:ae:de:07:79:
7e:ba:f2:31:ee:dc:b1:92:6d:8b:4c:cb:90:29:e3:ad:0e:40:
78:6a:82:5a:bc:af:80:dc:56:d3:96:56:29:d0:09:9f:80:ef:
d9:fd:58:f8:a6:64:08:b4:ef:a4:cc:57:8a:ea:a5:0f:1c:fc:
ae:8c:28:2c:5b:fd:78:db:d9:77:ef:f8:01:45:e9:7f:7f:dc:
c3:52:4e:01:ef:71:01:8e:5a:6d:e9:09:91:4a:a0:08:97:3c:
e4:2b:36:8b:d7:13:c1:ce:23:c2:d7:3d:ac:4c:da:5d:cd:aa:
86:fc:b0:8f:2f:08:a0:f2:6d:1a:aa:a1:af:54:d6:21:65:59:
ad:01:e5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:31:29 2026 by rpki-client