Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
File: bnnOupU7B9qiKvPIqrKxzU4iSNA.mft (raw, json)
Hash identifier: 9Yhl6uYCM88pRNA5rE/nakRWwdCXCtQfF636asGTdXg=
Subject key identifier: 07:B7:23:8F:58:F5:16:3A:45:87:B1:02:86:22:40:3B:F6:52:04:F7
Authority key identifier: 6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
Certificate issuer: /CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Certificate serial: 019D28F336489E0574EF03778426DF62F0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
Manifest number: 0909
Signing time: Thu 26 Mar 2026 07:02:00 +0000
Manifest this update: Thu 26 Mar 2026 07:02:00 +0000
Manifest next update: Fri 27 Mar 2026 07:02:00 +0000
Files and hashes: 1: bnnOupU7B9qiKvPIqrKxzU4iSNA.crl (hash: 76fM76rJz6QRvQWTIjmrqbfS6iuwiy4d0EE89SP+/Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:36:48:9e:05:74:ef:03:77:84:26:df:62:f0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e79ceba953b07daa22af3c8aab2b1cd4e2248d0
Validity
Not Before: Mar 26 07:02:00 2026 GMT
Not After : Mar 27 07:02:00 2026 GMT
Subject: CN=07b7238f58f5163a4587b1028622403bf65204f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:e7:91:bd:8e:69:63:da:c1:43:87:46:6c:
a5:83:7e:e6:8e:99:75:c8:a3:45:00:55:bf:91:37:
11:f5:ce:5a:0a:c3:27:97:0e:97:5e:3e:7e:ed:f3:
fc:03:6f:f5:c7:1b:3e:f2:79:a2:36:ea:3a:e4:ae:
62:b8:17:6c:8b:07:77:ea:35:fe:13:ac:ac:3b:e6:
5c:99:02:33:8f:3e:0a:27:24:bb:64:53:03:7a:90:
b1:e2:b7:67:14:78:8d:4c:c4:49:9b:18:50:05:95:
92:4c:7f:c0:21:23:c2:e7:05:5f:74:15:03:cb:ab:
17:0b:70:87:4a:96:f0:d2:a2:bf:b6:fc:31:11:75:
8d:99:5f:1f:ef:8e:03:34:54:38:60:20:ef:d5:f3:
1c:c9:1d:ec:f8:99:bc:71:6a:eb:cc:66:f5:ce:1d:
41:35:18:8c:4c:3c:45:ef:56:9a:0a:05:aa:26:e9:
21:09:f7:97:c8:f9:52:b0:f9:a8:34:eb:f4:b6:da:
e9:24:8e:42:e6:cd:78:8f:36:b0:98:3b:d3:4d:7f:
75:82:23:c9:78:9b:50:8d:cf:a2:fd:94:19:66:35:
67:70:83:8c:29:4f:a6:e3:cc:a0:28:1c:ab:67:7e:
a1:41:bc:20:73:70:f3:da:c7:2d:7e:7b:46:54:af:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:23:8F:58:F5:16:3A:45:87:B1:02:86:22:40:3B:F6:52:04:F7
X509v3 Authority Key Identifier:
keyid:6E:79:CE:BA:95:3B:07:DA:A2:2A:F3:C8:AA:B2:B1:CD:4E:22:48:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnnOupU7B9qiKvPIqrKxzU4iSNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2cc9f6-05f3-40d9-b6ae-07ffb66c54df/1/bnnOupU7B9qiKvPIqrKxzU4iSNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:89:b3:ac:31:95:ec:86:b3:f6:28:8c:f9:99:17:d9:9d:76:
96:bb:fc:1a:40:2f:d3:01:73:ee:3b:04:6d:03:fc:3f:ab:25:
b0:59:3f:5c:a2:0a:e2:b3:8d:40:c0:b8:61:05:d4:d3:b0:6b:
0e:84:ce:78:ea:bb:1f:7a:ba:25:54:ea:7e:97:2e:6c:3f:a3:
73:5e:99:85:ed:6f:d0:5f:45:7a:9d:e2:30:23:e8:9d:5e:e0:
3f:1b:be:ab:9b:60:e7:fe:64:c2:c4:ee:e3:6f:fe:b5:1c:bd:
f8:d0:a3:58:54:45:57:1f:9f:d6:4d:33:a4:f8:2e:7c:39:02:
93:ad:bc:24:9e:a2:60:a9:75:52:73:6c:c4:29:b5:af:9f:c2:
e1:54:e6:c8:9b:fd:f5:0f:2d:f3:e6:9c:fb:a7:aa:e8:10:28:
46:3b:a5:3c:f2:e7:57:2f:dd:50:da:85:08:37:d5:8b:ec:be:
0b:fa:55:32:2a:e7:a7:a8:7a:83:85:b7:cf:4f:e1:3b:2e:8c:
e4:a8:95:76:9a:e2:b4:46:7a:4a:26:68:c5:94:e6:4f:b1:67:
06:07:24:3d:97:02:78:6d:46:0f:bc:d3:33:d2:04:57:32:00:
39:46:53:92:a7:e8:74:6f:4c:72:71:7f:9f:d1:18:ae:e9:00:
35:0b:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:26 2026 by rpki-client