Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: lS9478uJGRmIAz2U6mgTt/yVv6bVD6hDtPJzjiaLMc8=
Subject key identifier: 19:9C:1B:0C:DC:D3:52:DB:56:10:45:74:1C:34:13:92:D2:8A:95:A6
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019FA906D1F64B0A14DCB0BADADCBD06F3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 1122
Signing time: Tue 28 Jul 2026 14:00:24 +0000
Manifest this update: Tue 28 Jul 2026 14:00:24 +0000
Manifest next update: Wed 29 Jul 2026 14:00:24 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: pxYCue3mERYStdiGA2+HBgrX0EL8XDGRzM43RTM1110=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:d1:f6:4b:0a:14:dc:b0:ba:da:dc:bd:06:f3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Jul 28 14:00:24 2026 GMT
Not After : Jul 29 14:00:24 2026 GMT
Subject: CN=199c1b0cdcd352db561045741c341392d28a95a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:df:e5:c7:9e:d1:ad:d1:be:65:e9:fb:eb:
13:44:18:62:7d:43:c6:ae:9a:57:86:f6:3f:ac:ec:
1d:0d:a3:28:38:b3:fc:d9:36:09:b9:42:c2:5a:b3:
fc:b3:23:47:d9:57:47:13:44:5e:89:70:65:aa:73:
a9:74:22:e3:0c:5d:0e:04:9e:8a:9b:a9:ad:50:bc:
5b:4d:8e:ae:4a:b4:be:27:58:f2:df:9e:c9:42:e6:
3b:b9:37:f9:db:10:0c:69:a1:36:07:49:0f:9d:ec:
7c:ab:de:2a:d7:09:7a:ea:e6:e2:af:2d:1b:eb:7e:
46:ac:c0:a6:4d:3e:8a:e4:7b:9b:de:c1:16:67:1d:
1d:88:01:dd:cc:fb:e0:82:43:90:62:c6:c2:22:07:
2f:f6:2d:78:5b:bc:f0:f3:98:5f:26:a6:b2:6a:49:
8e:6e:15:14:a6:bb:1c:be:6e:be:2b:d7:62:44:03:
b7:ef:79:5c:a4:1a:d9:dd:f5:63:f3:c6:2c:67:85:
84:dc:14:ed:e0:ac:10:fd:af:ad:e0:3b:b5:2d:40:
d0:2c:75:bd:c8:cb:9d:e2:3a:ff:b3:a9:3e:12:0e:
bb:56:06:d9:9c:3b:5e:19:6f:df:61:c4:9e:36:5a:
f1:5d:da:9e:eb:24:55:29:2c:7b:6b:e0:d8:26:c1:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:1B:0C:DC:D3:52:DB:56:10:45:74:1C:34:13:92:D2:8A:95:A6
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d0:68:14:47:55:54:05:16:a6:74:e2:c1:fa:11:1d:46:99:
72:ff:ad:c7:8f:ad:b7:80:80:50:db:41:5c:dd:e1:e3:18:e7:
a5:50:9c:cb:7d:b6:74:46:3b:b6:85:5a:a9:8f:72:5d:81:9b:
da:81:19:cc:08:1a:c2:c2:d1:e0:a8:b6:74:5f:34:32:fa:c9:
9c:85:3a:c4:c3:91:ed:6b:1c:76:7c:2a:a7:ff:1b:fa:4c:d2:
ed:04:ff:15:a3:6c:13:ef:23:53:61:fd:fa:af:69:6d:d3:c5:
bb:a8:39:54:07:24:a5:bb:a1:4c:1c:c1:e5:4b:42:d2:9f:cc:
87:99:fa:1f:07:e9:81:65:af:81:42:f4:41:03:a2:12:0c:5d:
6f:32:47:c8:c4:90:af:af:55:3c:74:98:d1:a1:5c:7d:62:85:
7c:a3:14:c6:f2:90:d2:0d:22:b9:c7:32:60:19:bb:08:83:50:
2e:cd:dc:ed:6d:d6:a1:06:67:54:fd:80:12:6b:5a:f3:63:fa:
b3:d6:86:04:b3:f8:5c:a5:8b:cb:97:d9:1d:98:38:5b:de:45:
a6:1e:a8:cc:bf:9b:60:e6:d1:3a:27:b6:f8:61:61:7f:1c:c0:
cb:97:a7:19:a8:54:c3:71:7f:69:3b:27:a7:e0:18:d7:94:da:
09:dd:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:03 2026 by rpki-client