Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: tnlpESOTv9bR0fuLe4R1sOHHZvX3mlVmGClOqLzSmUQ=
Subject key identifier: 51:E7:63:2E:06:F7:33:9F:77:64:38:F1:16:E1:77:66:C6:79:F5:61
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 019FA9E2CDC1436ADB141886E42E077106E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 18AA
Signing time: Tue 28 Jul 2026 18:00:40 +0000
Manifest this update: Tue 28 Jul 2026 18:00:40 +0000
Manifest next update: Wed 29 Jul 2026 18:00:40 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: Ryb3Tl7/34Dxc0oWrjFPMPiZRq/2qFZUndyHVGCNyxU=)
2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:cd:c1:43:6a:db:14:18:86:e4:2e:07:71:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Jul 28 18:00:40 2026 GMT
Not After : Jul 29 18:00:40 2026 GMT
Subject: CN=51e7632e06f7339f776438f116e17766c679f561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:28:07:00:4d:a8:8a:f1:0f:88:b5:98:12:
c9:b3:0f:38:5c:0a:c7:7b:ad:48:68:dd:84:3d:f7:
bf:33:e4:83:e4:97:3d:6e:11:68:af:3d:84:23:e9:
ab:d5:40:3d:01:94:09:b4:ca:10:bd:b6:bb:00:48:
71:9d:11:48:a3:e3:71:2c:f6:57:6b:9f:9c:4e:50:
09:b6:4d:b9:67:da:02:43:fa:a9:67:00:20:6c:7f:
5f:a2:0b:e7:5b:bc:7d:41:69:9e:4a:8f:bd:22:f9:
c0:10:e7:d8:6b:4a:21:01:dc:eb:2b:57:97:b4:e9:
84:5a:66:9d:57:c9:2d:13:c8:49:01:1b:a9:22:b0:
a9:1b:c2:61:ed:d9:97:18:56:d4:15:45:3c:a3:d2:
89:1e:e4:30:77:94:1a:80:1f:9f:cd:31:94:29:96:
b2:c5:57:7b:f2:e2:d0:cd:65:b5:77:77:da:96:4c:
e3:75:c2:18:71:1d:1e:c9:27:5c:1b:a2:b7:83:e8:
c4:ae:8a:5a:45:7b:77:fc:31:a2:4d:ac:3b:00:3f:
1d:21:a6:11:e8:78:83:34:34:0c:3b:06:0c:2e:0b:
c3:5f:3d:87:bb:08:16:c3:39:5b:8d:f9:80:ed:bb:
c9:d2:2e:db:5f:06:de:69:23:5e:50:aa:8c:b0:96:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E7:63:2E:06:F7:33:9F:77:64:38:F1:16:E1:77:66:C6:79:F5:61
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:12:a8:f0:2e:64:07:d9:14:87:1d:4a:eb:0c:17:3c:db:
30:d9:a4:4d:43:30:c1:c6:dd:4f:5f:0b:07:38:bf:71:24:f7:
92:94:86:30:e6:1c:cd:29:1f:6d:b1:20:fd:27:17:b5:75:56:
f5:f6:46:ec:54:42:2b:54:3c:60:84:32:e7:35:d5:3d:cf:2e:
42:1f:40:96:28:2c:74:1c:d8:ee:20:2a:54:a9:21:14:56:53:
c5:2a:dc:00:9a:a3:55:c2:a4:7a:a2:73:2a:6e:98:63:49:45:
fc:04:57:bc:28:4c:9c:b7:f5:ce:65:cc:de:0d:cf:94:5c:ba:
38:11:3d:22:aa:3a:d0:78:78:0f:6e:15:cb:c4:cd:fd:0d:46:
42:63:09:9e:5e:e8:fb:86:2c:f9:33:28:a2:6e:de:8d:3a:d4:
cf:7b:af:73:d2:dc:f6:33:d0:36:77:bd:c9:f1:37:9b:e6:3f:
88:b9:f9:16:30:f7:bd:33:32:a9:1a:73:8a:52:17:52:60:e3:
31:5e:f3:3d:bb:d4:e9:03:22:e6:f2:3e:28:f9:ed:9c:6f:06:
21:8d:19:a6:6a:be:49:4f:a5:1e:fe:d1:62:df:e7:c9:19:a4:
3e:d8:8b:82:58:3d:fd:48:ef:69:1b:8a:3c:4a:37:fa:ae:1b:
60:86:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:42 2026 by rpki-client