Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: hol+E2hUC6bopmYjonK0zDbLGWuOgz8FXk7D09a8OtM=
Subject key identifier: 63:92:E6:71:36:5C:1E:71:33:BF:7E:3A:F4:CB:27:02:8E:63:87:FC
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019F924858BBCC100FBD47E8A32100BB4243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 088E
Signing time: Fri 24 Jul 2026 04:00:42 +0000
Manifest this update: Fri 24 Jul 2026 04:00:42 +0000
Manifest next update: Sat 25 Jul 2026 04:00:42 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: FR2UF90S47C0oLSLw/xmkNCd4m5CJ5wBbkBH9obj4X0=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:58:bb:cc:10:0f:bd:47:e8:a3:21:00:bb:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Jul 24 04:00:42 2026 GMT
Not After : Jul 25 04:00:42 2026 GMT
Subject: CN=6392e671365c1e7133bf7e3af4cb27028e6387fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:27:54:15:2f:cd:f7:da:88:ef:76:d8:2a:
6f:db:49:a6:ca:7d:f7:7a:d1:9d:4f:91:46:89:4e:
cb:40:33:3d:bd:bb:1c:2c:d6:3d:c1:99:c4:0d:87:
67:b7:f1:4b:0b:75:d2:ef:34:32:2f:22:aa:1a:a8:
6f:14:4d:66:4f:87:9e:e3:9b:94:6c:b1:b8:62:92:
b3:ba:9e:24:45:16:fa:b7:c2:4f:5d:2d:80:26:36:
bd:c6:48:fe:24:f8:52:1f:7e:b6:a3:b3:b3:90:bd:
ca:d2:1f:59:2e:a7:64:90:7d:a5:88:4f:e6:98:f8:
c0:d1:f3:af:fa:aa:fb:d1:d7:bc:df:68:61:ae:17:
b6:9e:3f:30:7a:8c:f2:ba:11:ef:36:5e:c8:64:9e:
47:21:08:2a:23:2d:18:ff:73:66:3c:db:f6:0b:13:
a0:7e:97:4c:9f:93:87:ce:eb:cd:4e:41:81:8b:82:
2f:bc:fe:a4:5d:6a:2d:cc:0c:7b:f4:56:cb:37:72:
88:c4:ef:54:c2:48:e2:90:92:ff:c8:a6:0e:ae:0f:
e4:f2:05:cb:6a:b3:0f:86:f6:cb:f3:d5:9c:f8:f1:
ab:f8:28:a7:13:19:62:08:eb:c0:1e:b5:06:20:cc:
5b:31:b0:15:79:ce:b4:41:7c:97:31:d4:ad:3d:20:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:92:E6:71:36:5C:1E:71:33:BF:7E:3A:F4:CB:27:02:8E:63:87:FC
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:99:bb:be:2f:2e:cb:e2:8a:47:c5:06:f6:5f:01:dd:57:32:
9c:97:23:89:1f:67:5d:39:e0:a7:2c:f1:70:29:bf:7c:03:01:
0e:84:b9:24:2a:75:2d:71:a4:0d:ff:ee:32:a8:21:98:79:19:
b1:b7:13:76:9d:09:21:19:e1:61:25:c2:e7:bc:b0:b2:1b:db:
99:82:89:19:a5:20:bf:ec:a1:d8:2d:0d:a3:f2:f3:8a:80:e3:
64:84:8c:be:97:e5:49:2d:c4:7f:ab:f4:c0:e8:6d:0b:87:05:
b2:93:0d:2c:31:bc:b6:75:6c:28:4c:be:2e:ed:5a:12:ef:61:
11:33:3f:6f:77:00:c2:ae:92:9e:55:fb:d0:ec:65:a4:b5:98:
43:54:e1:42:41:3a:54:e9:52:53:c2:21:44:ed:0f:28:60:36:
8f:a1:79:7e:89:8f:57:ed:4c:c3:a2:f8:63:bc:5d:7c:25:b4:
0f:db:91:df:9c:a2:e1:da:c9:a8:f5:40:1d:e6:4c:52:98:d8:
cf:1f:ec:c5:68:a9:a5:2d:cc:b2:cd:66:09:85:77:c9:84:cc:
a7:e1:29:ab:67:b0:b7:e3:08:6c:28:27:29:2f:c2:08:8f:d7:
3e:f9:6b:f7:87:02:c2:92:9c:bf:a3:41:dd:9b:28:d3:17:3c:
48:83:04:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSFi7zBAPvUfooyEAu0JDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Njg1MTEwNGE5MjE4ZWZmMTczZjQzNGY1NWJkZDI0MjBh
YWFlMmUwHhcNMjYwNzI0MDQwMDQyWhcNMjYwNzI1MDQwMDQyWjAzMTEwLwYDVQQD
Eyg2MzkyZTY3MTM2NWMxZTcxMzNiZjdlM2FmNGNiMjcwMjhlNjM4N2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0nVBUvzffaiO922Cpv20mmyn33
etGdT5FGiU7LQDM9vbscLNY9wZnEDYdnt/FLC3XS7zQyLyKqGqhvFE1mT4ee45uU
bLG4YpKzup4kRRb6t8JPXS2AJja9xkj+JPhSH362o7OzkL3K0h9ZLqdkkH2liE/m
mPjA0fOv+qr70de832hhrhe2nj8weozyuhHvNl7IZJ5HIQgqIy0Y/3NmPNv2CxOg
fpdMn5OHzuvNTkGBi4IvvP6kXWotzAx79FbLN3KIxO9UwkjikJL/yKYOrg/k8gXL
arMPhvbL89Wc+PGr+CinExliCOvAHrUGIMxbMbAVec60QXyXMdStPSArEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOS5nE2XB5xM79+OvTLJwKOY4f8MB8GA1UdIwQY
MBaAFAdoURBKkhjv8XP0NPVb3SQgqq4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEt
MDkyZTdhMTZiNzRlLzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEtMDkyZTdhMTZiNzRl
LzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJm7vi8u
y+KKR8UG9l8B3VcynJcjiR9nXTngpyzxcCm/fAMBDoS5JCp1LXGkDf/uMqghmHkZ
sbcTdp0JIRnhYSXC57ywshvbmYKJGaUgv+yh2C0No/LzioDjZISMvpflSS3Ef6v0
wOhtC4cFspMNLDG8tnVsKEy+Lu1aEu9hETM/b3cAwq6SnlX70OxlpLWYQ1ThQkE6
VOlSU8IhRO0PKGA2j6F5fomPV+1Mw6L4Y7xdfCW0D9uR35yi4drJqPVAHeZMUpjY
zx/sxWippS3Mss1mCYV3yYTMp+Epq2ewt+MIbCgnKS/CCI/XPvlr94cCwpKcv6NB
3Zso0xc8SIMEvg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:31 2026 by rpki-client