Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: ZTXwlUlHF3K5tqrcKnfYxiqL5Ou5sQ7GMj4JTfpqyy8=
Subject key identifier: D2:B1:28:B6:ED:FB:C2:55:9C:9B:5B:29:A2:49:05:63:1D:A1:05:B3
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019D265FDAA9DBAD034426387C89B31860E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 074D
Signing time: Wed 25 Mar 2026 19:01:49 +0000
Manifest this update: Wed 25 Mar 2026 19:01:49 +0000
Manifest next update: Thu 26 Mar 2026 19:01:49 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: T2ct37znnujJUk54JBRBlua3OPcMJxBB43IFEnCkC/M=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:da:a9:db:ad:03:44:26:38:7c:89:b3:18:60:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Mar 25 19:01:49 2026 GMT
Not After : Mar 26 19:01:49 2026 GMT
Subject: CN=d2b128b6edfbc2559c9b5b29a24905631da105b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:f2:71:6e:76:ce:ff:0f:e3:40:34:27:b7:
39:22:83:15:4e:ad:03:0c:2c:42:c3:a1:16:64:16:
24:29:ba:e1:cf:00:ad:64:36:a8:69:69:2c:77:dc:
be:44:29:0c:aa:4b:ce:43:ee:c1:93:ea:37:41:79:
b4:64:b7:3e:5c:4e:0a:7d:1a:e5:1c:ac:0b:15:2a:
40:bd:43:76:c5:1b:32:7a:8d:91:ae:37:c9:33:76:
43:e0:c8:d0:b1:8b:e7:77:6e:98:01:31:59:f6:bc:
02:6c:59:7f:21:35:f9:ce:d4:3d:e4:e7:6c:3c:a1:
66:9d:52:b2:c6:94:7b:c1:d4:5f:6e:be:86:ba:c0:
17:4e:fc:d0:86:e4:80:3c:28:1e:32:45:f3:69:86:
90:f3:d8:a6:1c:cd:72:8c:a2:19:19:5c:32:7d:74:
b7:8c:94:0b:ef:59:48:2e:00:7d:86:50:d7:98:e9:
38:69:00:11:6c:c3:06:83:df:30:df:9f:cd:5e:10:
fe:00:c1:c3:4f:45:d3:4f:03:5e:60:c0:c7:37:2f:
06:04:64:9e:e7:93:8d:37:f1:4c:c2:ea:72:68:40:
60:11:1c:59:4c:d4:a6:6b:19:b5:f9:ef:6c:b7:43:
18:0c:7f:fc:49:06:3f:1c:dd:45:67:64:15:f0:ff:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:28:B6:ED:FB:C2:55:9C:9B:5B:29:A2:49:05:63:1D:A1:05:B3
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:76:0c:06:96:17:9d:c4:05:08:64:1c:e6:19:66:b0:0f:6c:
42:78:2e:e7:ec:da:82:90:0d:1a:aa:6e:25:02:f3:6f:24:bc:
af:10:4d:39:15:4c:00:3e:ef:cf:a2:aa:2a:b2:28:6a:2b:b2:
06:0b:c6:96:a1:02:bf:e7:3f:cd:8a:f8:03:3c:74:d8:5a:40:
60:72:03:1f:fb:52:90:6b:c3:80:61:85:80:07:c7:97:db:04:
21:25:32:9f:15:57:36:0a:8d:58:f0:7b:d9:1f:98:c7:a5:d4:
a9:f8:89:1c:27:9a:96:1d:ee:1a:9e:f1:e8:1f:7a:00:2b:00:
13:2d:8e:3f:33:32:15:d4:b2:23:1c:f6:19:d7:02:13:57:73:
ed:31:75:c4:6d:8e:03:ff:6c:61:f6:12:a0:a5:c9:cd:38:53:
36:c7:54:c2:9d:4c:7d:0f:6d:e1:35:45:99:2d:23:4e:0e:f7:
ae:91:87:77:97:7f:aa:8d:05:b7:f7:c6:27:1b:8b:0e:dd:29:
02:ed:3f:4b:30:00:1c:51:ec:26:af:5e:a3:99:3d:27:03:a4:
53:92:6f:62:08:81:64:cd:cd:cc:9a:34:a9:f6:48:57:57:7d:
ce:ec:43:a3:4a:7e:da:ae:1e:d4:78:41:2c:8d:1e:1a:5d:10:
38:70:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:32 2026 by rpki-client