Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier: p8gXAS2M8NHYsTbdtJAOtkiB72wAmUziwk6AUl36U0E=
Subject key identifier: 48:B7:18:9E:55:87:73:B1:A3:29:08:04:EC:2E:7F:B8:D0:5E:6A:98
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial: 019D28F25A3656BBF6418F27C1247D0AAFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:01:04 +0000
Manifest this update: Thu 26 Mar 2026 07:01:04 +0000
Manifest next update: Fri 27 Mar 2026 07:01:04 +0000
Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: XRKbi8wYMEzqgp+3nfXXtErH2hcbz1vUFW0F+yhy3Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:5a:36:56:bb:f6:41:8f:27:c1:24:7d:0a:af:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Validity
Not Before: Mar 26 07:01:04 2026 GMT
Not After : Mar 27 07:01:04 2026 GMT
Subject: CN=48b7189e558773b1a3290804ec2e7fb8d05e6a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:09:51:f3:79:a1:22:48:5e:4f:57:a3:e2:
c0:09:b2:75:f1:d8:37:c4:08:19:da:11:95:60:1b:
a4:f1:78:24:23:92:c3:48:80:d2:fb:b0:81:a9:11:
f4:31:bc:83:0f:70:e6:0c:e8:49:1c:04:06:7a:68:
40:53:74:4b:d9:07:e5:ce:f2:7b:69:27:a9:9d:a5:
7e:c8:2d:4f:11:11:b5:50:10:c0:a9:bd:cc:32:2f:
9c:70:47:bf:cf:55:fe:a4:d7:36:cf:66:9a:8e:13:
e2:5b:85:9f:fb:77:fe:7b:4f:d6:0f:2d:61:23:c3:
75:3e:eb:84:fd:a1:8b:e9:61:08:d2:18:61:56:ab:
93:36:cf:99:0e:0c:10:a8:6d:24:90:fe:59:fd:6d:
b2:17:8b:4d:1d:d3:53:3a:1a:27:1e:c7:93:a6:a7:
c0:b8:22:9f:38:2f:e2:f6:8f:8b:68:16:4b:0f:e3:
93:27:fb:22:07:73:d4:2f:50:ee:25:1c:63:4f:2a:
bc:57:83:41:87:f3:f1:ba:4a:1f:07:f3:4b:97:5a:
e3:db:d6:b5:9f:d3:3a:a8:92:8d:f2:ee:fe:d0:17:
a9:ab:5c:7e:7b:e1:34:a3:4e:95:60:dc:2a:fc:3f:
a6:6a:cb:77:dd:72:10:a8:9d:3d:ae:ad:45:9c:9c:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:18:9E:55:87:73:B1:A3:29:08:04:EC:2E:7F:B8:D0:5E:6A:98
X509v3 Authority Key Identifier:
keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f8:c7:d2:65:95:14:67:11:ff:9c:89:bf:e9:54:74:b9:63:
86:e7:a1:49:50:1d:47:46:c7:55:f4:5f:e9:d7:91:a6:04:f1:
e5:01:67:0e:eb:1b:bd:bc:bf:d7:08:14:ab:a7:86:66:0f:29:
2b:e9:ef:5a:6a:27:c7:a9:34:ff:73:e4:b0:c2:4f:71:b8:7c:
4b:36:7c:a5:9d:bf:cc:61:3b:5d:14:e9:17:74:c8:5b:13:f7:
c2:c1:54:4b:5e:1a:93:ef:f8:b5:6a:54:43:de:58:1c:1c:e7:
ab:4e:d8:c8:e1:8d:c4:b6:9b:00:67:65:01:89:51:79:c2:42:
dc:fc:d4:cf:18:2b:9b:4f:bc:32:fe:bf:ed:4e:9f:29:ac:29:
03:8e:ee:69:ca:58:07:b4:9c:a8:cb:86:6a:40:1d:ce:4a:ac:
8f:47:7f:6c:d2:4e:23:f8:92:c7:17:eb:a0:76:13:ac:af:19:
49:75:99:17:03:aa:9e:72:1c:68:85:61:ed:9e:b7:03:6a:3f:
8b:e3:f2:4c:cd:5c:d3:15:8d:54:15:a4:13:db:45:e9:14:ef:
fb:59:ca:4b:bb:d5:40:ab:2f:44:c6:f9:d5:43:50:81:0f:3d:
97:19:1b:e3:cd:5d:e5:0e:19:6e:e6:02:ca:61:b3:1d:ba:80:
34:05:e4:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8lo2Vrv2QY8nwSR9Cq/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk
Y2YwMjgwHhcNMjYwMzI2MDcwMTA0WhcNMjYwMzI3MDcwMTA0WjAzMTEwLwYDVQQD
Eyg0OGI3MTg5ZTU1ODc3M2IxYTMyOTA4MDRlYzJlN2ZiOGQwNWU2YTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnwJUfN5oSJIXk9Xo+LACbJ18dg3
xAgZ2hGVYBuk8XgkI5LDSIDS+7CBqRH0MbyDD3DmDOhJHAQGemhAU3RL2QflzvJ7
aSepnaV+yC1PERG1UBDAqb3MMi+ccEe/z1X+pNc2z2aajhPiW4Wf+3f+e0/WDy1h
I8N1PuuE/aGL6WEI0hhhVquTNs+ZDgwQqG0kkP5Z/W2yF4tNHdNTOhonHseTpqfA
uCKfOC/i9o+LaBZLD+OTJ/siB3PUL1DuJRxjTyq8V4NBh/PxukofB/NLl1rj29a1
n9M6qJKN8u7+0Bepq1x+e+E0o06VYNwq/D+mast33XIQqJ09rq1FnJzlOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi3GJ5Vh3OxoykIBOwuf7jQXmqYMB8GA1UdIwQY
MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt
MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1
LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/jH0mWV
FGcR/5yJv+lUdLljhuehSVAdR0bHVfRf6deRpgTx5QFnDusbvby/1wgUq6eGZg8p
K+nvWmonx6k0/3PksMJPcbh8SzZ8pZ2/zGE7XRTpF3TIWxP3wsFUS14ak+/4tWpU
Q95YHBznq07YyOGNxLabAGdlAYlRecJC3PzUzxgrm0+8Mv6/7U6fKawpA47uacpY
B7ScqMuGakAdzkqsj0d/bNJOI/iSxxfroHYTrK8ZSXWZFwOqnnIcaIVh7Z63A2o/
i+PyTM1c0xWNVBWkE9tF6RTv+1nKS7vVQKsvRMb51UNQgQ89lxkb481d5Q4ZbuYC
ymGzHbqANAXkVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:39 2026 by rpki-client