Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: a9AgtKGPDq26Jg+VZ6uyjvjeGRvQQLaex9RvxQ9aqMA=
Subject key identifier: C4:7F:80:53:B9:50:9D:5C:1A:FF:37:83:63:DD:82:20:73:26:25:4E
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019E1BD91B976DDA54B22E3AD8E7789A3F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 11:01:13 +0000
Manifest this update: Tue 12 May 2026 11:01:13 +0000
Manifest next update: Wed 13 May 2026 11:01:13 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: cFpVfkRj9s/h0AG2DlAkxzcc2fPYlA5vRMC9D660nyo=)
2: xHdQm9eajl_-s6UmnTM6iscJFVc.roa (hash: kI5yXHQqZsO9mW/MmVAsJAYZ2S2lqy/VUF6lDZvuKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:1b:97:6d:da:54:b2:2e:3a:d8:e7:78:9a:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: May 12 11:01:13 2026 GMT
Not After : May 13 11:01:13 2026 GMT
Subject: CN=c47f8053b9509d5c1aff378363dd82207326254e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:53:9a:23:5a:d2:e5:f5:9e:b6:d9:c6:ee:
f4:74:dd:a3:90:d5:4f:b7:95:df:f1:82:c7:a7:6c:
50:fb:1e:5f:a6:5a:55:c3:a6:59:60:8b:7a:6c:7a:
a5:c6:e9:44:d8:27:cf:45:ac:e3:92:97:b9:7e:54:
e4:d8:7e:f1:f1:30:ba:5e:b1:28:b5:d9:73:4d:ca:
1f:ef:1c:2a:06:98:2d:95:24:99:db:96:76:2b:1a:
57:21:4a:28:d2:c2:51:18:f1:60:49:40:89:08:88:
50:4a:a1:09:2f:3f:3f:97:24:af:21:63:f1:06:1d:
62:87:02:b7:94:c5:a9:9a:52:0f:20:37:cb:be:e1:
43:98:73:cf:2b:e0:bd:97:0d:1d:81:09:a2:02:9c:
4f:b3:99:96:03:95:e4:29:7e:c8:a5:79:eb:03:31:
02:68:14:3d:31:3a:53:28:1a:ac:ed:3f:f8:87:46:
ca:48:25:99:97:b5:4f:39:7e:45:2f:3c:15:e7:1d:
f6:1c:72:be:3f:88:ff:78:09:34:46:6b:70:ea:a3:
2b:90:75:e0:79:1a:df:ce:54:a1:7e:a7:a4:91:9a:
3c:89:d0:a6:34:3c:82:5d:53:d4:2e:49:72:5a:96:
0f:52:58:a7:b7:15:29:15:48:50:b0:c2:e6:04:4f:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7F:80:53:B9:50:9D:5C:1A:FF:37:83:63:DD:82:20:73:26:25:4E
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9c:0f:20:bc:81:58:6b:be:cf:58:1d:cd:0d:63:d0:4b:c5:
0f:9b:12:65:89:93:b3:85:58:b2:9a:f1:57:a8:9d:15:55:60:
bf:2d:b3:96:eb:53:ec:f2:4c:e2:86:e9:d0:1a:5f:c5:63:4d:
e3:0e:cd:2c:41:26:15:4a:83:2c:cc:f1:97:21:3d:35:9f:ef:
a2:fa:e5:9c:0d:d8:55:8c:3c:7b:e8:c1:77:d6:9e:0b:ac:48:
61:d0:e3:c3:b9:4a:89:c2:a8:ea:cb:fe:b8:4b:40:73:8b:1c:
60:87:23:2d:89:08:80:f9:95:98:a9:f1:01:ed:fc:5a:ba:11:
61:b0:19:5a:9e:bb:35:23:e9:74:39:a5:39:8c:85:68:b3:cd:
c9:15:77:0f:2c:b6:74:96:56:a6:ad:d1:0d:9e:99:33:bd:32:
f4:ea:a9:ed:a9:83:37:52:8c:28:c6:b6:4f:27:2d:fb:e1:9f:
1c:9a:bd:be:43:f7:30:14:ec:cf:c4:14:44:8c:c6:3d:fd:16:
c8:fe:ac:c3:f9:d4:aa:b0:e4:a1:ec:7e:34:7c:75:22:e4:5e:
93:97:85:3b:1b:2e:9b:a6:76:39:93:76:08:f4:48:e1:57:39:
6e:6f:89:70:69:f6:4a:da:c6:61:d2:59:40:94:34:ea:c6:5e:
1f:42:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:31 2026 by rpki-client