Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: 0dikQN8vSmio3e0uWkweklQZnlDrFWZQX3xgYKfBSSQ=
Subject key identifier: D3:7A:D6:4E:5F:69:DD:B9:12:21:B9:0F:53:52:6C:58:36:9B:D0:96
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 01A0C9A223205173456002728D69E0A77A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 15:00:41 +0000
Manifest this update: Tue 22 Sep 2026 15:00:41 +0000
Manifest next update: Wed 23 Sep 2026 15:00:41 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: HqJhv1cdnbjbZBzi2iwVLtnNFMRmqYyvgTXY1LKKnXQ=)
2: sIMIn1dJinS_QNCqRZ3sAyP03Ys.roa (hash: wj+8SIZf3ByO3mjHkql3d5okITDClOtvY8eSZHJh2bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:23:20:51:73:45:60:02:72:8d:69:e0:a7:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Sep 22 15:00:41 2026 GMT
Not After : Sep 23 15:00:41 2026 GMT
Subject: CN=d37ad64e5f69ddb91221b90f53526c58369bd096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:c5:de:37:50:de:b9:11:2d:02:d6:64:02:
da:2a:96:2d:92:9a:64:49:46:8f:8e:9f:c3:f1:b7:
54:ca:2d:4b:d0:ee:21:ac:37:09:9a:56:91:f4:bb:
8e:53:32:5a:fa:62:9d:b8:1a:e9:e9:98:c3:4b:56:
cb:6f:0e:c4:e7:2e:f3:c9:b1:39:94:4e:e2:a9:11:
d9:5a:63:02:9e:55:a2:24:51:8d:03:98:34:a0:4c:
46:d4:ea:98:01:59:a6:32:9c:aa:ea:cd:ce:fc:dd:
90:23:26:88:77:7e:0f:c3:05:1f:e4:5d:d9:36:dc:
14:7a:38:83:ef:e4:0c:30:ee:36:b4:91:62:e1:cf:
81:cc:6e:11:02:94:9f:00:2d:87:90:d0:08:aa:2d:
70:c1:33:4d:25:13:7c:d7:2a:c7:a0:03:64:c8:15:
f7:ad:8c:6b:28:06:e9:4a:1c:56:2a:cc:2a:da:b6:
a9:64:10:40:57:e8:bf:3e:e4:40:47:0b:77:28:55:
c1:78:55:7c:e1:75:a8:69:86:bc:b1:01:69:70:29:
02:1a:7c:9f:67:20:08:4a:c5:16:e3:3f:f4:01:e0:
f0:8d:0e:75:bd:fb:1d:ee:2c:8b:22:be:a8:ec:b9:
44:25:9a:7a:51:0d:95:a2:c4:fb:c3:60:64:8d:f7:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:D6:4E:5F:69:DD:B9:12:21:B9:0F:53:52:6C:58:36:9B:D0:96
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5f:a3:05:30:f7:3d:dc:a1:03:6c:42:8c:60:2f:c5:9a:ee:
c7:02:a3:1f:be:92:f7:3a:e9:0f:75:aa:6a:48:bb:41:7a:03:
8f:29:68:b2:c2:61:49:9a:79:35:3b:e4:25:2f:59:09:3d:a7:
9e:02:3b:fc:ef:30:30:b3:15:07:79:0a:69:c3:7b:8c:11:5a:
ac:53:0f:3f:8a:1b:d4:b7:49:ba:cb:e5:24:b0:95:99:d0:62:
e4:b7:52:c0:3c:7b:8c:4a:c2:82:90:e6:c6:a3:75:7e:b0:f6:
6b:02:47:40:21:3c:ca:e3:8c:28:7b:15:00:46:8a:0c:08:2c:
ba:cf:bd:d6:5c:0a:99:80:53:05:32:6e:8e:70:69:24:2e:06:
f3:2d:ac:0a:6b:f0:e9:0e:80:73:09:04:af:f6:24:4c:ef:d8:
34:f7:70:cf:30:2d:91:e4:61:69:55:e4:f2:27:19:28:4b:9e:
bc:36:09:42:12:86:06:64:d4:50:05:d5:c6:67:ac:ea:05:57:
ad:1a:87:c8:75:4a:d0:e5:59:9c:10:e3:9c:db:d4:1e:f0:6a:
d0:07:cb:ad:99:eb:6e:b5:56:40:d2:0e:4b:0a:c6:c4:77:05:
02:e2:65:6f:25:08:21:55:94:6f:74:9a:68:87:db:04:22:8c:
6b:13:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:04 2026 by rpki-client