Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier: exlDrCwkT6Bker42Pa4jbAIfisWBgTMUM1hnmlEjxmo=
Subject key identifier: 32:EB:5D:C9:D1:24:CE:B5:91:F3:72:48:ED:F2:79:86:1C:D9:5D:2F
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial: 019F8F10062FA587E4CEFDA8550F5DB5E8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 13:00:19 +0000
Manifest this update: Thu 23 Jul 2026 13:00:19 +0000
Manifest next update: Fri 24 Jul 2026 13:00:19 +0000
Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: bg5mvjzaXj5a6L7PmdiLjK9Bhba8JNVX2WYRv4QMnds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:06:2f:a5:87:e4:ce:fd:a8:55:0f:5d:b5:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Validity
Not Before: Jul 23 13:00:19 2026 GMT
Not After : Jul 24 13:00:19 2026 GMT
Subject: CN=32eb5dc9d124ceb591f37248edf279861cd95d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:d8:44:ff:1d:59:fa:00:3f:7f:b9:7b:98:
1c:6f:07:ee:b0:fe:b1:cf:ff:50:43:f1:99:2b:b8:
73:be:d1:71:71:c2:7e:40:75:66:c8:71:24:f0:cf:
a3:57:d9:06:e2:3d:96:cb:1b:42:b6:f2:34:9e:ed:
4a:55:23:c9:98:31:49:1a:19:6d:b6:5b:0e:df:1c:
fa:ad:c1:5f:e4:05:01:6e:51:21:bd:81:f4:f1:60:
32:0d:f9:eb:41:f3:c3:c6:24:99:36:8a:ee:1c:d7:
2a:d4:d3:4f:36:33:35:f8:ad:01:bc:95:77:84:26:
0e:a8:b3:d1:95:16:35:20:a5:6f:2f:04:23:1d:8c:
a6:29:40:cb:d3:1b:52:85:49:20:12:84:82:13:89:
92:e9:0a:b0:93:f0:18:cb:5d:91:38:45:2d:44:93:
90:3c:73:fe:02:7b:ae:a2:fb:9e:70:27:2c:33:23:
e8:54:f7:56:7c:bc:b6:e3:c6:2e:dd:dc:35:3e:02:
99:e7:32:c3:93:15:00:56:0f:3e:fb:43:34:b3:87:
87:17:9a:ce:b9:02:06:81:24:f3:1a:14:26:ee:88:
07:01:9a:cb:0a:07:70:5e:fe:76:fa:85:78:09:83:
ac:02:8c:eb:37:27:86:d3:2b:1f:71:19:9b:88:53:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:5D:C9:D1:24:CE:B5:91:F3:72:48:ED:F2:79:86:1C:D9:5D:2F
X509v3 Authority Key Identifier:
keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:96:40:14:e6:18:3f:d6:7c:60:28:5f:3c:65:50:32:d4:12:
9c:d6:e8:26:67:25:0e:dc:45:24:1d:bf:1e:04:cf:a4:08:19:
a9:15:24:ad:43:44:3f:7c:6d:50:db:b9:e1:02:44:57:41:34:
7e:1e:8f:d4:de:34:55:88:f8:82:df:a2:94:58:7d:ea:9d:77:
7a:85:69:34:80:47:f8:71:87:b4:64:7e:40:4e:12:1e:58:ec:
46:bc:51:8d:4d:d0:e5:14:d4:4e:fd:b2:70:72:19:37:f0:da:
6a:6b:63:b7:c5:e4:1c:c4:89:11:55:0f:34:71:d0:08:9b:24:
04:b7:38:c1:6c:93:2a:92:e9:3a:88:30:23:d8:d9:9c:a2:bc:
2b:0a:b0:17:05:57:be:78:ba:2b:ae:f0:eb:c4:8e:9e:16:58:
6d:70:16:8b:93:ca:e9:63:26:0c:0a:02:c7:a0:fc:66:41:76:
02:11:7e:74:fc:e5:7c:d3:cb:5e:39:df:c1:f7:29:e9:ac:a3:
92:c0:78:86:ba:a6:53:19:fb:e0:bd:83:ab:74:f8:f9:f5:68:
19:64:2e:5a:92:3f:4d:26:60:87:35:ae:97:4f:37:33:7a:60:
e8:d3:6b:ea:10:a4:7a:c6:7b:84:3e:d5:fc:29:11:3b:08:82:
20:7f:21:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEAYvpYfkzv2oVQ9dtejDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk
Y2YwMjgwHhcNMjYwNzIzMTMwMDE5WhcNMjYwNzI0MTMwMDE5WjAzMTEwLwYDVQQD
EygzMmViNWRjOWQxMjRjZWI1OTFmMzcyNDhlZGYyNzk4NjFjZDk1ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfDYRP8dWfoAP3+5e5gcbwfusP6x
z/9QQ/GZK7hzvtFxccJ+QHVmyHEk8M+jV9kG4j2WyxtCtvI0nu1KVSPJmDFJGhlt
tlsO3xz6rcFf5AUBblEhvYH08WAyDfnrQfPDxiSZNoruHNcq1NNPNjM1+K0BvJV3
hCYOqLPRlRY1IKVvLwQjHYymKUDL0xtShUkgEoSCE4mS6Qqwk/AYy12ROEUtRJOQ
PHP+AnuuovuecCcsMyPoVPdWfLy248Yu3dw1PgKZ5zLDkxUAVg8++0M0s4eHF5rO
uQIGgSTzGhQm7ogHAZrLCgdwXv52+oV4CYOsAozrNyeG0ysfcRmbiFOOXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLrXcnRJM61kfNySO3yeYYc2V0vMB8GA1UdIwQY
MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt
MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1
LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZZAFOYY
P9Z8YChfPGVQMtQSnNboJmclDtxFJB2/HgTPpAgZqRUkrUNEP3xtUNu54QJEV0E0
fh6P1N40VYj4gt+ilFh96p13eoVpNIBH+HGHtGR+QE4SHljsRrxRjU3Q5RTUTv2y
cHIZN/Daamtjt8XkHMSJEVUPNHHQCJskBLc4wWyTKpLpOogwI9jZnKK8KwqwFwVX
vni6K67w68SOnhZYbXAWi5PK6WMmDAoCx6D8ZkF2AhF+dPzlfNPLXjnfwfcp6ayj
ksB4hrqmUxn74L2Dq3T4+fVoGWQuWpI/TSZghzWul083M3pg6NNr6hCkesZ7hD7V
/CkROwiCIH8hZQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:09 2026 by rpki-client