Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: enuHXpCyO1rzMKDTA32XTipLNhXum/Uk3tQbAVeUjvA=
Subject key identifier: 57:E0:CA:40:95:2A:E4:61:B8:B6:10:BE:B0:B2:00:8F:6C:04:37:CB
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 01A0F78D7D5EFD020E491198F510455EAC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 0947
Signing time: Thu 01 Oct 2026 13:00:39 +0000
Manifest this update: Thu 01 Oct 2026 13:00:39 +0000
Manifest next update: Fri 02 Oct 2026 13:00:39 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: LylK9bnUPxAsrZQOlJ4GQNOLSejDMeEFj1UCO+FipSY=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8d:7d:5e:fd:02:0e:49:11:98:f5:10:45:5e:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Oct 1 13:00:39 2026 GMT
Not After : Oct 2 13:00:39 2026 GMT
Subject: CN=57e0ca40952ae461b8b610beb0b2008f6c0437cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:eb:20:7e:4c:14:9f:5f:30:3b:87:84:75:
02:62:29:63:14:b1:06:f3:ba:cd:e1:00:9d:35:9a:
6f:ab:75:61:59:98:c3:e5:22:95:dc:a3:9f:03:4b:
ef:53:58:c1:e5:42:2d:41:0d:fe:4b:a3:b8:79:fe:
52:7f:c1:97:f8:04:69:bb:60:1f:fb:35:d4:9b:52:
b2:65:98:6a:d6:b6:42:ed:0a:73:44:50:ec:29:56:
80:5e:34:57:94:0a:67:20:86:ea:ce:db:a9:42:18:
15:91:d6:fc:83:7d:60:a2:98:85:d6:1f:a7:98:80:
26:32:95:ca:2c:ad:b0:08:2e:95:95:41:7e:72:9b:
00:a0:f9:fd:dd:72:6f:7b:37:e0:f9:c2:d2:64:76:
87:fa:a3:d1:71:d8:cd:6d:4b:06:6e:e9:bd:0b:07:
fa:f4:ef:57:f2:49:77:1c:1e:a5:71:f5:dd:5b:e1:
39:61:ef:4c:20:ea:3b:c1:4d:b6:63:c3:91:5f:4e:
dc:2b:b6:a1:5f:0d:c5:5d:1e:15:dc:f8:af:de:b4:
32:5d:07:c6:95:96:0f:42:8b:eb:06:da:ad:fb:33:
08:c9:8c:ad:34:c9:cb:b8:ad:42:cd:c9:71:57:87:
e1:b1:90:3b:7e:e2:7e:a8:c9:ac:f6:dd:c6:44:a4:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E0:CA:40:95:2A:E4:61:B8:B6:10:BE:B0:B2:00:8F:6C:04:37:CB
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bf:7a:40:ad:be:e0:18:94:46:40:04:aa:7d:e3:ee:f5:c4:
3e:2d:6b:c6:84:c9:cf:e4:90:be:5b:a2:dd:61:a7:ab:19:6e:
8a:fe:0d:10:d5:78:1b:88:ea:45:bc:ae:af:28:8d:b7:50:3c:
1a:5b:cf:d1:6d:25:ed:a3:27:e6:25:4d:c7:08:92:13:ab:b0:
9f:69:de:08:fc:74:fd:03:ee:39:a7:51:3e:e1:fc:2b:06:75:
8b:d8:e8:e8:68:7a:ec:ab:db:57:63:ed:c4:16:3c:25:1f:30:
4f:49:16:9a:38:6f:94:8e:87:51:47:9b:08:ea:aa:3a:86:b7:
0a:a7:cb:e6:cb:b5:49:eb:74:e5:82:ee:66:6f:58:41:ff:75:
88:4f:14:dc:c0:37:af:3d:78:3c:1b:c9:75:a7:74:0c:33:ec:
3e:b5:b9:4b:dd:09:dc:2d:81:84:5e:ab:6b:94:5b:d8:04:e1:
1d:67:9f:c7:e9:62:c6:ed:c1:37:18:f2:e3:a6:0a:b6:9d:9c:
18:fb:19:a9:7a:23:b4:5f:dd:d0:40:7e:02:8e:f1:ab:e1:c2:
5b:07:a6:40:7b:54:a3:f4:52:0a:f8:d8:a7:b7:aa:e6:38:d4:
a2:08:ff:02:c8:fb:b1:15:ef:61:bf:1b:5d:81:90:ba:f9:69:
59:43:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:40:39 2026 by rpki-client