Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier: 3VjYXTtXCsrRnZTfHwd65ySz6yLi3Evts73Fr54/gnc=
Subject key identifier: B0:96:50:20:3F:67:A6:2C:A1:0E:C0:F0:F9:A9:CF:00:72:DC:17:7E
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 01A11A875E64841A3DEBC56726A3DDF88D7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number: 1A9A
Signing time: Thu 08 Oct 2026 08:00:41 +0000
Manifest this update: Thu 08 Oct 2026 08:00:41 +0000
Manifest next update: Fri 09 Oct 2026 08:00:41 +0000
Files and hashes: 1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: TmicoolSqIhrfOyJoboIUmwXFO96Lus0inRsd24c/Yg=)
2: D_VQ3qcRrE1RcGz3L2hiZ5fs0q0.roa (hash: 3nNJVROdH+6QiOLIHdge07W05M5mKR5oevvpsKwNQMQ=)
3: R2U_cQMFZM4-GXgQbDyShKrCAGA.roa (hash: Ag9S/vdQiIdyQgvSbtnRDnW1NQNHuWeD+J3+pdenpE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:87:5e:64:84:1a:3d:eb:c5:67:26:a3:dd:f8:8d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Oct 8 08:00:41 2026 GMT
Not After : Oct 9 08:00:41 2026 GMT
Subject: CN=b09650203f67a62ca10ec0f0f9a9cf0072dc177e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:f1:f6:77:a6:4e:97:4f:b9:93:2c:c0:19:
db:30:11:82:92:26:81:02:b0:0a:f1:10:a0:07:c3:
d5:6a:56:f3:45:97:d5:c5:0f:fc:f1:37:38:c5:56:
16:11:ac:bf:d4:3e:a6:7c:b2:c5:b7:3d:66:0d:70:
b3:59:07:2b:92:04:dc:a8:ac:a4:d9:45:d7:1e:a3:
96:f6:2e:77:82:5c:3f:0f:11:ba:8d:07:13:88:7d:
42:cd:3b:08:a9:26:fd:27:5e:af:a4:b0:ab:18:5b:
bf:a7:ae:ad:13:59:54:b8:cd:28:42:8d:d2:b5:03:
1b:77:fa:41:74:1a:9e:82:b4:47:ef:1d:10:38:70:
fb:cf:fb:10:57:c2:0c:d4:d2:97:b0:82:37:77:50:
42:40:03:01:a7:8c:b7:bd:97:4b:b7:85:de:70:7d:
3a:34:ac:4f:12:0a:a3:f3:a4:5c:64:d1:c8:27:2b:
e0:0b:ca:68:0e:87:be:a7:58:00:cc:25:17:ac:d9:
1e:2f:c4:08:ba:12:1a:ac:b6:fe:f9:ce:44:8d:d2:
5e:0c:98:ac:83:dc:67:b5:dd:0e:b0:22:f8:5c:1c:
f0:e2:b7:2c:b6:e2:36:6b:2c:ac:df:d2:c8:de:a1:
8c:d2:7b:69:d0:5d:02:cf:0f:4b:98:ec:60:1f:c6:
5b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:50:20:3F:67:A6:2C:A1:0E:C0:F0:F9:A9:CF:00:72:DC:17:7E
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:63:db:03:be:5a:95:a3:ce:1f:f2:af:3b:66:42:75:d9:f4:
43:95:f3:66:d0:ed:6f:3e:de:6d:6c:5c:37:f8:90:b3:6d:0c:
2e:f3:9f:b8:6e:00:79:13:d5:2b:d0:6b:4b:93:ed:5c:33:c5:
83:51:b4:9e:4d:bb:cb:3d:10:e7:19:7f:97:53:c4:04:4d:c9:
27:5b:d1:e7:e3:65:fb:bc:e6:36:e6:07:6b:b8:b8:cd:42:dc:
c5:77:06:36:eb:d8:72:b5:87:54:ac:fb:72:8e:02:ab:38:d0:
26:41:d9:77:37:96:03:18:a3:62:4a:4d:b6:38:69:40:de:db:
25:1b:df:37:da:84:97:e8:cc:c8:c1:c8:51:7a:52:d9:0b:a6:
5e:08:58:ae:da:ce:65:68:83:84:27:44:7b:d4:37:a2:00:35:
83:fc:d8:a1:b8:4d:ad:ce:db:cc:cc:5e:6c:5b:dc:90:6f:3d:
3e:99:3c:95:05:06:af:b6:8d:b6:11:b0:85:7b:e5:de:fc:8a:
64:eb:ce:69:6e:82:cc:9e:0b:2e:d5:bb:a6:c3:f8:73:c6:5d:
3f:62:8c:7e:8c:be:bc:e0:6b:25:1b:0e:90:b7:d5:bd:6d:f5:
6c:14:cd:0e:df:54:d8:22:83:05:83:12:5d:cd:20:8c:86:a1:
9c:1d:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:27:58 2026 by rpki-client