Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
File: B9oDycgmha5taz0h1oS7z0aL91s.mft (raw, json)
Hash identifier: gcPtMB2oXIXnBVQYiYCXfoN3UqEjlSssinII7rj95K8=
Subject key identifier: 4E:94:F7:B4:1E:9B:9F:E1:94:52:C8:A3:DB:2D:A5:99:FC:21:C7:3E
Authority key identifier: 07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
Certificate issuer: /CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Certificate serial: 019EBFFF4E10BBBB85A059BA11F49E3201AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 08:00:40 +0000
Manifest this update: Sat 13 Jun 2026 08:00:40 +0000
Manifest next update: Sun 14 Jun 2026 08:00:40 +0000
Files and hashes: 1: B9oDycgmha5taz0h1oS7z0aL91s.crl (hash: tGsYE/cIpazHGaIUNmFOXZwLGHETs6O739QyiCqB4os=)
2: Syb092w3bd2oaQmW0hCkBeEn6RU.roa (hash: mb8QxEtZKShJ4BbZE89JSkmaplhcEQtWMF/0Fv1cDnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:4e:10:bb:bb:85:a0:59:ba:11:f4:9e:32:01:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da03c9c82685ae6d6b3d21d684bbcf468bf75b
Validity
Not Before: Jun 13 08:00:40 2026 GMT
Not After : Jun 14 08:00:40 2026 GMT
Subject: CN=4e94f7b41e9b9fe19452c8a3db2da599fc21c73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:18:ab:41:03:9b:2c:00:f7:24:f0:65:d9:
91:73:6d:9a:a5:b3:79:df:1c:4d:07:cc:19:0a:d7:
51:2c:18:1a:30:54:60:5d:47:37:9c:2b:5d:48:49:
ea:c2:5f:c3:d6:f4:bb:1c:f9:52:15:21:9f:62:37:
d6:e5:81:87:e4:95:04:e2:eb:e9:3f:0b:e7:f8:f8:
a1:d3:02:be:59:0d:3b:37:18:ee:69:49:0c:5c:ec:
44:00:2d:48:80:37:cd:df:11:ce:5b:e8:a2:54:b2:
4a:69:d0:53:3e:9d:3c:59:90:67:93:2d:1b:c0:5f:
67:82:9e:ca:2c:fd:39:21:bb:04:8f:b9:79:9f:00:
2a:11:88:7f:cd:e4:b6:d8:ef:7f:2b:d1:75:31:02:
a8:14:99:b7:a1:8c:ca:96:ce:48:5c:1b:c7:11:7c:
88:c9:08:38:6a:fb:72:5a:1d:99:d5:46:56:63:ef:
73:39:fb:2e:8b:99:ad:8c:91:a0:97:90:c3:02:02:
8e:30:49:fb:5b:e4:ea:76:1d:84:ea:45:88:f5:1a:
d3:4c:cf:cc:a2:b8:00:69:89:fa:24:84:70:13:fc:
62:7a:37:40:f9:d8:90:87:5a:b5:18:80:fa:c7:30:
95:78:ad:7a:e2:6a:b0:c7:5e:00:d9:2d:9f:34:07:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:F7:B4:1E:9B:9F:E1:94:52:C8:A3:DB:2D:A5:99:FC:21:C7:3E
X509v3 Authority Key Identifier:
keyid:07:DA:03:C9:C8:26:85:AE:6D:6B:3D:21:D6:84:BB:CF:46:8B:F7:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oDycgmha5taz0h1oS7z0aL91s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/deef22-2624-49b6-a23b-aa01dcd3dfa7/1/B9oDycgmha5taz0h1oS7z0aL91s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0a:c9:ee:36:26:0e:8c:ce:72:46:74:9f:6f:47:5d:dd:d7:
b8:01:09:4f:30:75:10:a0:07:e7:01:24:38:13:7e:f4:d4:ac:
a5:1d:d8:b0:bd:ba:9f:93:d4:fa:be:33:42:1c:70:04:be:1a:
72:f6:a2:d6:2c:f0:fd:57:24:4b:d2:60:9c:64:f5:c1:7a:d3:
18:3b:22:70:0a:69:85:0c:4e:56:59:47:3d:10:d6:b1:b2:13:
6c:9e:3c:85:43:01:45:94:ea:b4:cc:d3:4a:78:6c:33:fe:9c:
3a:0f:90:41:29:c7:a2:7d:57:86:de:ef:15:77:db:41:48:cc:
65:1d:2b:a3:12:32:77:e1:4c:81:1a:ac:9e:19:b9:dd:99:93:
54:21:32:71:20:f3:a6:2d:e5:1d:83:2b:5d:2b:ab:33:69:3e:
bb:71:d9:8c:ed:7c:48:8e:39:ca:a0:6e:5b:65:bd:2e:62:37:
e8:1e:ff:f4:75:8b:c1:ac:4e:b3:10:e8:66:c2:5c:fd:6d:40:
de:e6:7e:d4:8b:49:e9:a6:c8:76:c7:1d:40:2b:2b:a8:70:ce:
ed:81:8e:e9:5d:d1:78:5d:01:1e:d3:84:3e:6d:4e:61:49:90:
7b:bb:02:15:27:92:12:a1:a2:89:9a:c0:82:51:93:72:91:1f:
38:6e:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:52:11 2026 by rpki-client