Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: BBMSy7jzmroVJsG9sEYOQ5PUbswdRiPo645YZJYx0uI=
Subject key identifier: F6:D2:C9:5B:8E:8D:66:56:A1:12:D3:31:F1:32:A5:05:F4:5E:B8:DA
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019D99D0E463F7251DD57DA15260F54661C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 1011
Signing time: Fri 17 Apr 2026 05:01:37 +0000
Manifest this update: Fri 17 Apr 2026 05:01:37 +0000
Manifest next update: Sat 18 Apr 2026 05:01:37 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: U88knJep5khpddfIEx0CBOBRKDQ8w8j19d6Anosx4fk=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e4:63:f7:25:1d:d5:7d:a1:52:60:f5:46:61:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Apr 17 05:01:37 2026 GMT
Not After : Apr 18 05:01:37 2026 GMT
Subject: CN=f6d2c95b8e8d6656a112d331f132a505f45eb8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:b6:be:ec:7e:36:f5:0e:18:8b:46:af:e0:
1a:87:3b:bb:80:47:29:ac:98:84:80:f2:65:4e:ff:
73:4d:38:04:63:1d:04:99:7c:ab:eb:7c:0c:35:ab:
bf:07:9e:24:5a:88:bd:50:fc:46:0d:da:28:fe:b7:
32:23:fc:eb:5b:0a:a3:0f:30:93:f3:fa:2c:4a:59:
24:fe:c5:45:b0:ee:96:43:9e:cf:31:49:79:09:96:
81:09:37:fe:a6:a8:13:76:99:13:52:25:cb:83:6f:
76:98:0f:75:d1:d0:be:28:fe:63:84:52:b6:9b:74:
07:b1:70:fd:a0:88:7b:ae:d9:bc:57:0e:07:fa:38:
88:b4:fc:7a:88:09:96:d0:8e:d8:30:ac:7b:31:77:
10:28:07:d7:74:2d:77:d7:4c:fa:d1:92:e7:77:68:
50:c6:8e:e6:f1:dc:b3:14:1a:12:52:03:70:b4:63:
8d:67:5e:8b:ca:2e:ad:3e:4c:70:97:5e:f1:3c:18:
dd:e0:7f:6e:f2:82:96:e9:2a:54:6d:fe:49:8d:de:
00:7d:c0:e7:6e:07:b8:00:81:9f:ed:cb:f5:5c:46:
cd:89:ce:a8:76:76:af:9d:42:13:30:bc:74:7d:62:
93:f1:68:c2:3b:18:d9:81:54:19:cd:75:6b:57:c0:
8e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D2:C9:5B:8E:8D:66:56:A1:12:D3:31:F1:32:A5:05:F4:5E:B8:DA
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:48:b5:2e:9a:7c:4e:37:de:f9:75:20:3f:7d:2e:bf:9d:2d:
1c:7b:b8:f4:2c:be:59:56:54:df:83:7b:05:11:64:1b:29:14:
35:9b:d0:13:18:21:bb:7d:ff:cf:87:1e:65:db:7f:89:c3:c6:
9e:33:a8:cf:c1:c0:cd:65:81:d7:b5:4f:44:33:60:ba:2e:35:
68:d2:c5:c5:ca:b5:f9:46:51:f3:92:06:77:4a:ef:75:c8:75:
8f:06:cb:3b:1e:2b:b1:19:38:08:fe:40:a5:6c:b7:6e:27:14:
1e:41:88:15:e0:1f:e6:a6:35:3a:e7:7d:6f:82:4c:17:4b:63:
da:d2:5c:17:a2:20:b3:ce:56:e0:71:36:23:65:ba:15:d2:bf:
0a:62:b5:f2:3c:81:31:78:30:26:3d:68:48:37:61:cb:25:5c:
af:46:a7:1c:ec:47:7a:23:22:2e:d7:77:c7:be:28:f4:c4:e9:
b4:c5:93:8a:54:6d:37:94:cd:df:17:5c:46:96:3c:46:1d:62:
54:ad:fc:a2:85:cb:11:f8:48:14:88:89:01:70:8d:7d:6c:71:
87:51:8b:3c:0c:1f:cc:7f:0d:22:4d:39:53:b5:b2:6d:bf:f6:
66:63:0a:6a:28:75:03:86:96:5e:c2:af:b6:8d:d6:57:b7:67:
7a:77:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:36 2026 by rpki-client