Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: iMwcnWiI0ZAh1JVo6akEMGUJUQA+sNgOg4ftEl9Mj2A=
Subject key identifier: AE:23:9C:6F:52:9B:E2:F5:F5:E1:CC:9B:F1:5F:08:CF:4F:28:90:3C
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019D26CD5090F5303BE5B2FE89DB7CFF701B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0F0A
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: wzBjxVeqiKN2SQqT5DMMGAhLcqUf5W8MGW8WTMb5S1w=)
2: PCSAe779gtpQ1Sa05bIdrwV78eg.roa (hash: 1GxEJL4LImItt+ibKMd5aWwhrXtd/cVEdDLJESE/oBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:50:90:f5:30:3b:e5:b2:fe:89:db:7c:ff:70:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=ae239c6f529be2f5f5e1cc9bf15f08cf4f28903c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:5f:44:e6:9e:48:f1:91:d2:41:95:f4:8e:
a5:bc:d8:a2:69:c7:01:5d:e0:4d:14:f0:da:5a:fd:
90:2c:91:f8:a6:ae:e5:d4:ad:43:2c:4a:51:34:90:
ce:91:68:73:80:07:59:67:d5:b2:c5:95:cd:34:84:
89:cc:8c:6c:2e:a0:e7:2d:84:fe:26:28:a9:9b:f9:
41:c1:58:06:3b:4e:fe:f1:31:c7:b4:c6:05:98:98:
70:f4:72:3e:a7:05:ea:f9:0a:2e:d7:1b:a4:ff:a6:
0e:3b:94:77:08:32:9b:89:bf:cd:6a:7d:94:74:11:
7e:14:05:15:c1:4d:27:ef:5f:0c:d0:32:ce:84:a3:
1a:6e:8f:4e:8b:91:84:c6:8d:92:2b:87:d3:06:07:
c9:76:dd:2b:a9:b6:0d:4e:13:d3:4f:14:1b:84:dc:
52:47:dc:c3:cc:fe:a1:16:25:80:7f:5a:26:0a:42:
f2:21:e6:e2:d6:18:90:24:5c:50:b6:86:72:5c:61:
73:5b:12:4a:cb:61:6a:4a:df:51:1a:d5:31:67:30:
b2:4c:35:a8:9a:21:f7:3f:da:dc:6b:80:54:4a:15:
79:1f:9e:a9:9b:fc:07:6a:a3:e6:18:45:1c:88:ca:
ea:39:14:32:26:67:22:cb:81:39:35:2a:8c:9e:8f:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:9C:6F:52:9B:E2:F5:F5:E1:CC:9B:F1:5F:08:CF:4F:28:90:3C
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:72:e8:8a:45:e7:b0:fd:22:1a:df:02:7b:1e:fb:a3:27:
96:53:b4:8a:80:d3:8c:12:b4:61:e8:7a:13:7c:39:81:ab:30:
bd:bc:e3:43:99:4a:e9:86:b3:6b:4f:30:5a:22:76:ce:b4:09:
d8:6b:77:ab:1a:82:c2:d9:35:0d:f2:71:49:5c:ba:03:73:a9:
b5:03:ab:65:50:67:93:f8:5a:fb:ec:a6:de:72:3f:24:7c:13:
8f:61:e5:52:0a:30:af:e4:25:79:7e:9d:c6:5a:98:b6:59:f9:
3a:11:ed:b8:65:3b:6c:20:04:ad:be:6b:77:bc:85:33:7d:df:
33:d9:d0:b5:99:64:7e:6a:98:2b:28:4b:d2:2c:68:5e:1a:b7:
39:3c:15:3f:27:3d:4e:99:c2:be:c6:3d:b7:56:ee:24:88:74:
01:96:a7:42:dc:0d:43:9a:6e:d9:89:be:92:e1:4c:19:b5:58:
e2:a2:4b:7e:47:f1:b4:eb:32:ee:04:ca:0b:03:d4:ba:de:f1:
6e:c9:d3:49:6a:11:70:0a:3c:13:3f:85:06:ef:26:b2:87:74:
b5:f2:45:d1:37:48:7a:8b:9a:52:16:b2:21:73:dd:25:58:57:
18:d1:f7:ef:c2:e5:43:fa:13:e9:e6:86:7e:66:25:91:2b:82:
94:93:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:52 2026 by rpki-client