Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: eixqQUy9dZgGZiwwgzSCUj4ZhkCgFiWc4xBbk6KNeX4=
Subject key identifier: 94:F1:0C:37:6F:B2:C3:0F:C9:15:CA:73:9C:D0:21:78:38:8F:20:33
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019D2695EF4C81D7CE15CFAB24D9D007168E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: MVwTEesqBeF2d5+ILNkshpU2+ZaBp+P2vZwRF8PHe3A=)
2: xHdQm9eajl_-s6UmnTM6iscJFVc.roa (hash: kI5yXHQqZsO9mW/MmVAsJAYZ2S2lqy/VUF6lDZvuKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ef:4c:81:d7:ce:15:cf:ab:24:d9:d0:07:16:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=94f10c376fb2c30fc915ca739cd02178388f2033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b2:2b:59:6a:f1:13:a6:a5:ac:64:5e:64:00:
b7:cc:67:64:26:47:53:ed:bf:29:aa:e0:e5:6f:59:
a2:d8:0d:1d:81:7a:84:1f:f8:e6:20:e0:07:86:6d:
51:52:36:5d:61:8e:d5:cf:2c:b6:32:09:ee:45:16:
9a:99:d4:c0:16:1a:2b:38:55:b1:f6:27:96:d8:80:
dc:a7:d5:c8:5e:60:bf:44:88:a8:04:08:cb:4a:f2:
cb:cb:46:7f:a4:8d:57:33:10:05:62:eb:11:21:f4:
ca:6e:62:66:e1:37:4d:a3:ab:da:69:89:f3:22:13:
e2:41:19:1e:8b:7b:cf:6d:d1:05:bf:bc:36:1d:f4:
0e:dd:bc:d7:4d:7d:22:b0:a1:09:f5:5e:be:36:3a:
99:99:d6:8f:f0:91:75:5a:59:72:f1:14:0e:d9:a6:
85:5a:d2:84:4e:3b:c8:32:f9:71:1e:64:b3:94:06:
d7:05:ac:10:ae:be:b8:5e:ef:8f:ce:4f:d9:c7:1d:
d1:52:71:37:52:58:8e:1a:ac:1a:1e:92:95:27:7c:
8b:ba:1c:32:8a:85:20:38:52:a2:32:15:84:9a:20:
98:c6:1a:f4:08:15:c6:8a:f6:3d:e8:51:98:10:9a:
3f:88:d3:54:fe:57:8c:c7:38:c1:86:9f:6d:ad:bf:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F1:0C:37:6F:B2:C3:0F:C9:15:CA:73:9C:D0:21:78:38:8F:20:33
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:62:2e:66:6a:42:c1:27:fa:89:e2:17:79:92:f6:36:68:20:
a7:ca:fb:c4:b9:3a:59:1c:b8:4a:0c:7e:d9:ea:19:37:84:1d:
da:ef:9d:97:af:62:8b:8a:65:aa:e0:fe:be:f6:e6:a8:d1:ab:
6e:c8:52:78:33:be:ec:9d:34:f3:32:8d:25:aa:4f:29:8e:89:
3b:24:64:7f:95:c2:23:10:e2:5f:ee:49:d7:a8:72:11:dd:49:
83:a2:96:ff:91:b1:92:57:bb:5d:28:cc:20:22:70:26:8a:2f:
94:23:7d:ae:a0:90:18:11:e1:ae:6d:31:99:0a:30:a7:96:aa:
56:28:3a:10:6d:fc:e0:d6:8f:75:d0:9f:d8:82:4e:8c:b9:30:
76:9d:c5:09:02:89:b9:ea:4b:cf:4e:8e:b5:f4:16:09:14:8a:
c7:a1:8e:42:a4:14:04:7a:33:48:7e:c5:69:92:f8:8a:f2:02:
87:ca:b2:72:7f:4c:69:da:09:bb:82:09:98:0b:b4:ea:41:3e:
51:8f:b3:66:5e:e3:ac:5f:3e:33:8a:16:13:82:b8:da:e8:93:
c8:6d:84:e3:51:42:f8:7e:c6:3f:e5:a8:cd:19:1e:cb:67:8a:
91:21:95:19:a6:d5:52:45:af:5b:a7:53:84:38:fd:22:9f:8f:
cb:30:43:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mle9MgdfOFc+rJNnQBxaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDA4ZGY4YmM3YTM4M2U5NzZkYmIwM2QyYTBlYjlmZTBk
Nzg2ZTcwHhcNMjYwMzI1MjAwMDUzWhcNMjYwMzI2MjAwMDUzWjAzMTEwLwYDVQQD
Eyg5NGYxMGMzNzZmYjJjMzBmYzkxNWNhNzM5Y2QwMjE3ODM4OGYyMDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7IrWWrxE6alrGReZAC3zGdkJkdT
7b8pquDlb1mi2A0dgXqEH/jmIOAHhm1RUjZdYY7Vzyy2MgnuRRaamdTAFhorOFWx
9ieW2IDcp9XIXmC/RIioBAjLSvLLy0Z/pI1XMxAFYusRIfTKbmJm4TdNo6vaaYnz
IhPiQRkei3vPbdEFv7w2HfQO3bzXTX0isKEJ9V6+NjqZmdaP8JF1Wlly8RQO2aaF
WtKETjvIMvlxHmSzlAbXBawQrr64Xu+Pzk/Zxx3RUnE3UliOGqwaHpKVJ3yLuhwy
ioUgOFKiMhWEmiCYxhr0CBXGivY96FGYEJo/iNNU/leMxzjBhp9trb8XDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTxDDdvssMPyRXKc5zQIXg4jyAzMB8GA1UdIwQY
MBaAFAfQjfi8ejg+l227A9Kg65/g14bnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYt
NTE0ODVmZTIyMmRiLzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYtNTE0ODVmZTIyMmRi
LzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo2IuZmpC
wSf6ieIXeZL2Nmggp8r7xLk6WRy4Sgx+2eoZN4Qd2u+dl69ii4plquD+vvbmqNGr
bshSeDO+7J008zKNJapPKY6JOyRkf5XCIxDiX+5J16hyEd1Jg6KW/5Gxkle7XSjM
ICJwJoovlCN9rqCQGBHhrm0xmQowp5aqVig6EG384NaPddCf2IJOjLkwdp3FCQKJ
uepLz06OtfQWCRSKx6GOQqQUBHozSH7FaZL4ivICh8qycn9MadoJu4IJmAu06kE+
UY+zZl7jrF8+M4oWE4K42uiTyG2E41FC+H7GP+WozRkey2eKkSGVGabVUkWvW6dT
hDj9Ip+PyzBDBg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:36 2026 by rpki-client