Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
File: B0fQbRS6TieAl_NagMcVaEysJmE.mft (raw, json)
Hash identifier: dF6GT6SXl0uEzPukOExtM5gsqPZ3niSFXkSAol4baA0=
Subject key identifier: 3C:8D:54:8E:91:5D:03:74:7E:EE:A3:0D:C0:12:7C:7D:DC:A9:CB:83
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Certificate issuer: /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial: 019D9AE36A5DAE2C83DCDC15CCDD6F663C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
Manifest number: 02DE
Signing time: Fri 17 Apr 2026 10:01:28 +0000
Manifest this update: Fri 17 Apr 2026 10:01:28 +0000
Manifest next update: Sat 18 Apr 2026 10:01:28 +0000
Files and hashes: 1: B0fQbRS6TieAl_NagMcVaEysJmE.crl (hash: O39ToU+dv57lOZtYUBoNfm9IABXxapyOEk1Otc4MgnE=)
2: TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (hash: iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:6a:5d:ae:2c:83:dc:dc:15:cc:dd:6f:66:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
Validity
Not Before: Apr 17 10:01:28 2026 GMT
Not After : Apr 18 10:01:28 2026 GMT
Subject: CN=3c8d548e915d03747eeea30dc0127c7ddca9cb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:f5:fe:6e:56:65:01:94:88:ca:f4:3d:14:
cf:33:d2:1e:ea:35:26:c5:ec:a8:86:42:1c:8c:83:
6b:2b:dc:af:5e:4d:28:12:dd:ce:58:e4:fa:4b:7d:
da:de:25:2f:e7:16:63:57:a2:21:da:5b:04:e3:68:
66:86:b9:73:5d:78:40:26:c5:c1:80:7e:2b:ab:f6:
1d:52:e3:0f:44:c4:9d:f2:d4:e8:66:11:0c:df:3b:
59:ea:8c:de:9a:fe:f0:4c:a1:d4:55:9c:f1:c7:ab:
ba:40:14:ac:5e:d3:bf:93:7e:14:fe:8b:5d:14:79:
9b:90:ef:99:d0:2d:a1:ae:c6:76:f1:43:bd:d5:86:
d7:53:d8:05:6d:e0:f8:9d:34:c8:7b:b6:c5:b2:9e:
25:b8:06:6a:40:40:6c:a5:0f:2c:ec:6d:28:c6:a6:
1a:92:35:e0:74:25:eb:01:51:5e:20:0e:ff:c9:5d:
40:90:a7:ac:a8:74:7f:6c:fb:da:60:f8:3b:a8:dd:
fe:e1:e9:31:11:08:0a:c1:0b:c9:25:e0:64:1b:e8:
e8:3f:80:03:c0:30:a4:29:1f:97:25:7b:d2:7c:44:
18:1c:91:76:0d:18:15:9f:32:00:01:8a:cb:53:df:
2e:51:18:76:b5:25:94:80:0d:8b:4b:83:39:f4:e5:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8D:54:8E:91:5D:03:74:7E:EE:A3:0D:C0:12:7C:7D:DC:A9:CB:83
X509v3 Authority Key Identifier:
keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:e7:7b:fe:95:96:59:04:cc:61:ad:53:fe:bc:90:bd:c9:
d1:f3:67:ef:ff:b1:42:bb:44:db:ce:d4:9a:ec:8b:1a:a0:c4:
76:92:5a:52:77:01:db:c9:98:49:40:5f:60:21:79:06:55:e4:
1e:da:4a:ce:45:b2:ab:8a:95:2b:3e:29:aa:54:07:9e:51:22:
d3:2e:0f:49:d4:29:6b:41:8a:27:ec:eb:3c:62:64:1f:22:7f:
59:14:43:db:61:22:7a:07:98:a6:5e:c7:fa:eb:eb:61:6a:fe:
1a:7a:89:cb:a8:a2:d7:a9:cf:d9:6f:37:57:e5:cc:17:29:6f:
22:16:e9:22:8b:c5:b7:88:3e:10:44:29:bd:89:05:32:4c:ed:
fa:c2:cc:83:e4:8f:95:c6:ab:3c:a2:2b:13:c3:ce:26:9b:67:
70:2b:d5:28:f6:df:18:c2:04:0a:c5:63:d6:3c:98:92:b7:4a:
49:0c:e9:e0:c0:50:9a:96:4e:4b:04:13:80:f8:63:1f:77:d7:
63:db:0a:d6:79:87:16:24:84:6b:1b:95:59:df:8e:72:cb:d2:
74:47:31:4c:18:5d:1a:b1:0f:84:60:ad:20:dd:69:7f:87:d9:
c3:00:a0:f5:8a:a9:50:12:d5:86:d1:fd:9d:3a:4b:5b:15:d0:
12:cf:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:15:39 2026 by rpki-client