Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier: 53lZIVx+zpHlJWIY1eoJgTMFbIp7f2EbyR1/tbKe32A=
Subject key identifier: 14:C7:97:D2:F1:FE:FE:A4:77:4A:E2:C1:97:DE:79:A9:87:70:7F:8B
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 019D2695CC149EAA18E7DEEB8A02D355C241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number: 0DDF
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: qpHNnIV5fYya6o0TD9j0v/qD1AlAv1ZPPd59V/Mr+aw=)
2: g8AniT98jgfKG_IB19d9xu2syLw.roa (hash: 7R3vOrjrBzZjR9ZmhYF8VUus96RI5RYOknR8+bpyK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:cc:14:9e:aa:18:e7:de:eb:8a:02:d3:55:c2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=14c797d2f1fefea4774ae2c197de79a987707f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:0e:3a:c4:aa:ba:ea:2f:e6:23:96:28:71:
04:e2:ef:17:7a:a8:4f:01:e8:0f:25:d9:17:bc:df:
55:ea:cb:28:c4:5f:2d:32:32:79:fa:f8:3f:13:3a:
19:06:09:59:7c:78:3f:11:19:fe:86:3a:1b:7d:74:
87:58:30:e4:c0:00:2d:5d:56:14:8d:ef:ca:04:ab:
75:56:70:b8:a0:25:64:6f:1f:65:15:e1:a2:fa:f7:
36:e3:2b:1e:dc:9a:44:84:57:54:9b:87:3e:62:54:
da:3d:58:26:6d:3e:1c:cb:a9:ee:a2:6f:d7:61:e2:
a9:e4:df:b5:1d:70:81:60:7f:07:6a:df:2e:2f:72:
74:ec:fb:88:a1:91:05:18:68:e9:fc:41:8b:bd:82:
43:8c:d6:dd:62:05:e1:59:d5:f2:a5:ae:95:e0:cb:
64:5e:b1:37:f3:a8:72:a1:5f:02:f0:44:53:07:2e:
cd:e0:9c:7b:97:23:20:dc:d3:20:86:dd:7c:74:c9:
b7:a8:3f:f7:e8:1e:9b:a5:8d:72:ee:31:76:a4:72:
ff:e9:81:9b:39:db:08:16:b7:6b:e0:56:aa:e2:2b:
f3:ad:77:99:38:5b:21:8a:24:1d:46:c3:35:87:da:
d7:75:61:1c:d0:a8:0c:c3:e1:b0:23:6b:d6:43:3d:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:97:D2:F1:FE:FE:A4:77:4A:E2:C1:97:DE:79:A9:87:70:7F:8B
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:55:b5:4c:f3:59:4e:f9:ac:dc:f5:ad:99:21:f9:a2:82:3c:
0f:9b:34:22:1d:21:a6:d0:ae:35:c9:2f:9d:21:92:ce:ac:38:
de:0c:11:4c:55:ee:41:c0:e5:43:61:bd:28:6e:f8:6b:ed:ca:
c4:c4:08:9c:56:70:18:5f:5f:71:9c:4b:ae:03:38:70:bb:6f:
11:64:c8:aa:56:69:22:c7:05:a4:e2:43:e4:4d:c9:f1:e4:2c:
ba:48:c5:66:f2:b0:e0:17:86:39:68:74:29:40:68:6c:7e:80:
a0:48:aa:a2:bf:d8:f2:be:1d:af:be:ae:c3:a3:56:d7:3b:38:
da:0b:0a:0a:cd:33:fd:1b:ce:7f:e5:2e:ee:1c:60:ab:90:eb:
11:f9:ee:6d:64:1a:32:14:e6:29:17:6f:fa:5a:f0:59:ce:6a:
dd:4c:2d:0a:da:61:0a:de:a1:53:ac:f7:ff:ea:09:3a:13:37:
17:8f:98:2b:f1:59:d0:23:d3:42:55:1b:da:3e:79:81:fb:d8:
59:5f:5c:c4:16:d0:39:cc:16:84:b2:d7:5a:92:2a:93:47:ae:
7b:6e:91:d3:55:fb:6d:43:bc:ba:c1:3a:f0:30:23:ea:96:63:
96:20:4b:01:fe:09:5f:b8:45:ba:d4:02:9f:71:51:3b:1a:f7:
6a:3e:40:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlcwUnqoY597rigLTVcJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YWVmMTkwZjQ0YmZjMWRiMGM1MGYxYTczZmRmMDE3MDgx
YWZlMTYwHhcNMjYwMzI1MjAwMDQ0WhcNMjYwMzI2MjAwMDQ0WjAzMTEwLwYDVQQD
EygxNGM3OTdkMmYxZmVmZWE0Nzc0YWUyYzE5N2RlNzlhOTg3NzA3ZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDYOOsSquuov5iOWKHEE4u8XeqhP
AegPJdkXvN9V6ssoxF8tMjJ5+vg/EzoZBglZfHg/ERn+hjobfXSHWDDkwAAtXVYU
je/KBKt1VnC4oCVkbx9lFeGi+vc24yse3JpEhFdUm4c+YlTaPVgmbT4cy6nuom/X
YeKp5N+1HXCBYH8Hat8uL3J07PuIoZEFGGjp/EGLvYJDjNbdYgXhWdXypa6V4Mtk
XrE386hyoV8C8ERTBy7N4Jx7lyMg3NMght18dMm3qD/36B6bpY1y7jF2pHL/6YGb
OdsIFrdr4Faq4ivzrXeZOFshiiQdRsM1h9rXdWEc0KgMw+GwI2vWQz2dFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTHl9Lx/v6kd0riwZfeeamHcH+LMB8GA1UdIwQY
MBaAFAeu8ZD0S/wdsMUPGnP98BcIGv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYt
ZWY0NDU4ZWEyMGNkLzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYtZWY0NDU4ZWEyMGNk
LzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFW1TPNZ
Tvms3PWtmSH5ooI8D5s0Ih0hptCuNckvnSGSzqw43gwRTFXuQcDlQ2G9KG74a+3K
xMQInFZwGF9fcZxLrgM4cLtvEWTIqlZpIscFpOJD5E3J8eQsukjFZvKw4BeGOWh0
KUBobH6AoEiqor/Y8r4dr76uw6NW1zs42gsKCs0z/RvOf+Uu7hxgq5DrEfnubWQa
MhTmKRdv+lrwWc5q3UwtCtphCt6hU6z3/+oJOhM3F4+YK/FZ0CPTQlUb2j55gfvY
WV9cxBbQOcwWhLLXWpIqk0eue26R01X7bUO8usE68DAj6pZjliBLAf4JX7hFutQC
n3FROxr3aj5Atg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:44 2026 by rpki-client