Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: ZcA49nzWdOQn8Qw5FRV3J5EcZTQnUMxmg4hKuyfp1nk=
Subject key identifier: 43:DA:D2:A3:3E:9C:BB:03:89:6A:E0:6C:63:67:D8:E4:42:B4:98:B6
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 019CAB343B069056F7CEF4320ED0EB559811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: 32FLh-2sl2eJtIOGk05i3sfElJU.roa (hash: HsUbHhV9ZeMlUBS5nClbq2bfx/JXEoBIkb5zGIiCc2U=)
2: 6y02T8isddrk35I82aQnZfza2hw.roa (hash: 6Bwcv1vQHggut1Ym2FRTt/C0CVvJQpNdaHy95CBYlLc=)
3: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: 98PirgevPH3ZtC4EvAcNn1PsXfeleEXFGKcnfnIJuxs=)
4: q04DAUNQ8mmk4frR1pjxhZ9V5q0.roa (hash: KQaHhA+OhijKUCpTAoL29fJGLyKeGagBCHKk31Lp+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3b:06:90:56:f7:ce:f4:32:0e:d0:eb:55:98:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=43dad2a33e9cbb03896ae06c6367d8e442b498b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:09:c4:c3:ee:34:7f:70:c7:0e:86:12:67:
0b:50:3e:a6:61:21:b6:33:2e:d2:ee:ec:4e:89:3c:
a2:9d:ec:1d:f2:d9:4e:84:c8:c7:e6:7f:fd:bd:b8:
6b:90:0b:1c:ea:9b:b5:00:50:d8:3c:ad:48:e2:1e:
ef:4f:14:51:ad:d2:db:a9:d8:80:dd:b8:15:c5:43:
a5:e6:a9:f4:ec:79:11:20:99:2c:40:9f:ee:93:d9:
87:39:63:2b:7c:d1:c3:e9:9a:56:e9:a1:a7:8d:75:
27:aa:e3:fb:03:ed:b0:70:a6:99:c0:a5:fa:29:fd:
b9:27:b4:fc:62:83:d3:97:59:eb:f4:fa:92:fd:10:
a2:66:89:4f:1f:f6:7f:46:04:07:77:cb:09:b7:c2:
b3:a7:17:55:53:00:52:3a:e1:4e:eb:80:a5:df:20:
bd:83:d7:7b:86:58:ae:fa:d3:d4:40:01:24:0c:06:
3d:52:6d:43:c0:3e:f7:02:b8:71:27:bb:52:f4:0e:
66:87:0c:f5:ac:3a:66:99:91:55:ed:70:ac:9d:13:
ce:79:01:9f:87:ad:e9:43:8b:3f:80:e0:cf:11:3b:
c3:70:92:6f:0b:a6:67:37:dd:74:3d:5c:8d:81:cf:
93:b7:c0:60:77:55:ab:3b:f7:b8:c5:9f:ee:ea:fa:
05:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:D2:A3:3E:9C:BB:03:89:6A:E0:6C:63:67:D8:E4:42:B4:98:B6
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ee:12:93:d9:75:44:49:f5:64:ca:cb:5b:22:f2:6d:49:08:
10:52:89:08:05:e0:d4:61:66:a2:e6:3c:6f:d0:87:d0:00:2a:
9b:20:9d:34:4d:8e:61:30:a5:18:9e:9a:fd:88:05:2f:e8:04:
b2:52:af:75:4c:ff:31:37:b3:27:5d:09:3b:95:82:96:74:84:
13:d2:27:ef:70:6a:dc:9a:87:2d:3a:5b:b7:fa:49:30:0d:8a:
3c:ef:ac:46:3e:16:92:2a:0c:67:7b:d5:10:54:4a:1a:80:f7:
11:46:b0:bd:77:1e:9f:46:32:33:e6:da:53:80:f5:d6:a1:59:
21:dd:6e:a5:37:9a:46:67:df:1c:04:c8:79:6f:33:58:3b:90:
66:9c:3b:a2:86:7f:38:ae:7c:f1:ec:c6:29:76:5e:bc:c3:01:
e8:82:be:10:8d:f6:e4:e5:97:38:1f:31:62:ae:b7:d9:b2:f2:
b7:eb:9c:e4:a8:28:ba:37:3c:b1:d1:d1:3e:be:91:96:9a:6f:
6a:62:f8:03:18:a8:52:87:6e:01:b7:dc:9a:46:e8:5d:71:ef:
fb:75:d9:af:3f:a8:78:2c:54:5a:79:9e:2e:46:0d:ba:03:2a:
8c:73:96:1f:67:cc:f2:f3:81:10:22:b4:af:5a:27:be:78:4a:
af:24:89:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:18 2026 by rpki-client