Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: NZWOWTsiQJOEMbDiVpwr1BPLnkAp0rA7ffBCOCNBnqA=
Subject key identifier: F2:F8:97:2C:E6:47:71:9B:9F:F7:B6:3F:38:E0:DB:88:0D:90:A5:9C
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 019D9AAC1EDB9138E2875EC7FAA7FD9B0E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 1799
Signing time: Fri 17 Apr 2026 09:01:04 +0000
Manifest this update: Fri 17 Apr 2026 09:01:04 +0000
Manifest next update: Sat 18 Apr 2026 09:01:04 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: UpEY2ZnuJHPSofxt8ROsr6RRWuBx9iESqWv8Znouqe4=)
2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1e:db:91:38:e2:87:5e:c7:fa:a7:fd:9b:0e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Apr 17 09:01:04 2026 GMT
Not After : Apr 18 09:01:04 2026 GMT
Subject: CN=f2f8972ce647719b9ff7b63f38e0db880d90a59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:80:78:5a:a5:57:37:92:4d:2d:57:c6:81:
92:b4:40:a1:1f:dc:32:26:a2:a2:f2:27:e4:53:c4:
17:43:57:30:99:44:7b:9c:59:34:ae:b2:53:77:57:
ac:d9:75:a7:02:0c:f5:03:42:c1:4e:81:21:5d:91:
0e:f9:98:ad:39:96:ce:18:22:be:c2:f4:a3:40:56:
a0:49:1f:c0:61:67:59:34:35:7a:37:b1:2b:8b:8d:
5e:4d:2a:43:ab:85:d7:17:66:67:ef:ba:91:a6:50:
74:f5:18:81:ba:b7:7f:6a:a1:ff:cb:a7:c9:0e:39:
c9:36:a6:2b:76:7d:4d:4f:6c:e7:a4:47:ae:4d:33:
d5:43:2e:37:7d:39:63:b4:50:3c:72:de:48:56:0a:
fa:35:50:bc:8d:4a:e8:f6:3b:52:4d:8d:6a:d8:fe:
13:ce:26:20:8f:7d:53:3f:3d:66:1b:1e:37:a8:2c:
92:32:14:84:d0:71:a4:ce:9a:4d:32:ac:40:62:80:
f5:74:c6:5f:60:1b:88:03:48:9a:1d:4e:a8:c6:ca:
96:81:da:34:7b:37:ae:37:bd:fa:35:e9:ae:71:e6:
5a:2b:56:b8:b1:76:f3:84:fb:2b:ff:62:09:93:7a:
ab:2f:d7:b9:76:77:40:f8:5c:10:cf:44:1b:c5:37:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:97:2C:E6:47:71:9B:9F:F7:B6:3F:38:E0:DB:88:0D:90:A5:9C
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:f2:93:18:c9:d9:bf:a2:1f:05:16:60:1a:17:bc:fa:b0:
59:d7:75:10:b4:f4:c7:21:4a:80:16:f2:8b:5f:86:ce:8f:5e:
44:57:68:d3:0a:d0:84:9d:8d:3a:3c:3f:e6:17:50:0d:aa:2a:
e1:9e:58:9a:14:8b:57:cd:a8:57:58:3d:24:1d:32:17:04:25:
2b:5a:27:23:c7:7c:f4:81:f3:b4:2a:4b:ff:82:a0:2f:5f:bd:
26:d6:b5:71:9c:e1:72:0d:d6:ac:1f:60:c0:30:f6:5b:36:18:
68:44:28:91:39:79:b2:88:93:55:96:f8:73:03:ca:df:9e:2f:
e0:80:46:94:f5:40:d5:c5:93:8b:0b:6b:73:ec:9d:87:3a:72:
46:a4:f8:7a:20:d5:a2:cc:a2:54:bf:bd:7a:c8:29:20:d2:2f:
d6:3d:0a:57:46:75:88:24:e0:38:4c:1f:81:fe:53:b3:ce:d0:
b7:47:54:c2:b2:57:07:e5:17:e4:71:20:bc:71:25:13:b5:cc:
49:70:a1:bd:ef:16:b7:05:f3:a5:ba:65:3a:92:59:a0:7f:d2:
f7:a5:95:4d:16:71:b5:9c:a9:34:42:46:26:f7:1f:4c:85:12:
d4:11:97:9e:c7:f9:ad:1f:7c:ca:ec:a4:cd:5d:6a:8d:54:bf:
6a:ff:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:13 2026 by rpki-client