Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: ZPveWQnbhP+VtYLHFLcShLOlDbNznwp/cFID7aUyVYM=
Subject key identifier: 88:7C:98:B0:F9:C0:14:D9:F2:F9:C3:EB:E0:1D:6F:7A:49:D6:A2:0E
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 019D2A3BE45142FEE893AC755497ACC424F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 09E3
Signing time: Thu 26 Mar 2026 13:01:01 +0000
Manifest this update: Thu 26 Mar 2026 13:01:01 +0000
Manifest next update: Fri 27 Mar 2026 13:01:01 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: XuN/JL4XT2Bzi+E8g5PWvb/zHtc87y0Pd4T5ZgL+d4Q=)
2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:e4:51:42:fe:e8:93:ac:75:54:97:ac:c4:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Mar 26 13:01:01 2026 GMT
Not After : Mar 27 13:01:01 2026 GMT
Subject: CN=887c98b0f9c014d9f2f9c3ebe01d6f7a49d6a20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:82:b0:7e:77:cf:9e:de:13:af:da:05:48:22:
bf:27:cf:7c:c4:e4:ab:e1:67:a5:19:3e:18:a5:74:
a4:5a:9e:f6:b4:f2:a9:6b:11:fa:c6:d6:0f:8f:3a:
39:07:fc:3b:ef:ed:be:11:f0:a7:17:25:d6:b0:38:
5c:0f:60:f1:f5:ba:ff:01:79:81:45:d0:9e:7b:f7:
c1:45:0d:2d:f3:63:97:1b:01:28:71:37:4d:c5:27:
0c:9a:44:d0:2a:a8:0b:f1:7a:dc:72:5b:bc:33:c1:
ce:2f:24:87:dc:2b:4c:34:64:ee:1b:a5:bd:b1:76:
1a:d5:f1:78:92:d6:70:2f:5a:5e:76:a1:0c:a9:e3:
9f:16:f5:46:d6:14:d2:6d:6e:76:76:a5:59:0e:6a:
72:3f:58:f4:4f:8a:e4:8e:05:63:ea:40:9f:34:3f:
dd:9e:7d:ee:07:1e:ea:4a:d3:e7:88:bf:f7:95:be:
63:c0:b2:d0:47:19:14:0a:4d:a0:aa:2d:6a:10:1f:
82:17:d4:b6:b3:2e:0a:a5:6c:12:c5:b7:33:49:d6:
d3:95:0c:85:d3:2f:19:80:4d:ca:7a:6a:f3:fa:23:
3c:c5:c8:4e:e4:55:b7:bc:70:a3:e4:c4:ad:8e:96:
07:eb:d7:43:31:f6:16:b8:47:43:3b:3c:fc:8c:c2:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7C:98:B0:F9:C0:14:D9:F2:F9:C3:EB:E0:1D:6F:7A:49:D6:A2:0E
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0e:df:66:db:dd:40:dc:0e:8f:31:f2:f6:39:d8:6a:9e:0f:
a5:07:f2:f1:10:10:45:96:d4:e3:79:61:41:13:1a:28:fc:f1:
b1:e2:03:55:c1:c9:05:2f:46:f4:1c:15:06:88:36:b0:f9:48:
4b:78:9e:02:f8:af:68:19:aa:47:e0:f5:1f:f0:03:52:c4:62:
f5:cf:c8:4f:f9:8e:dd:f7:24:69:7d:e9:c6:be:65:d6:f1:35:
cd:be:fd:50:9b:d3:a2:89:d2:87:ce:01:d7:f4:8e:b1:5d:fa:
06:e5:ce:f9:02:8a:06:e1:10:0c:fa:a1:2c:b2:7d:68:5f:24:
14:c0:b4:0b:0c:73:bc:cd:3e:c7:06:26:9f:33:40:16:23:c4:
eb:af:c4:c2:f7:ab:bf:9a:6d:8e:bc:bb:f7:71:16:11:78:13:
a7:e2:2a:94:1d:d5:33:05:16:02:70:d8:da:d4:cc:c6:ac:60:
a1:c6:46:94:e8:1e:63:68:02:d6:95:98:98:44:77:69:ac:b2:
26:d0:d9:51:d1:a5:81:c6:bf:78:05:09:7f:5e:f3:00:26:64:
cb:42:74:e8:3b:a5:d6:1f:80:88:70:db:d7:d2:2e:30:d4:67:
15:2a:fe:de:79:0a:d8:32:34:3b:e7:2d:76:1b:a9:34:9e:69:
0d:ab:8b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:40 2026 by rpki-client