Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
File: B0BT0c-25_2HUE_jF1FYOQHnuME.mft (raw, json)
Hash identifier: gCwJHD3ubQAU9ii9nmVJQKnXozak8iqWQoNtPGk/Ojk=
Subject key identifier: DA:24:2A:09:82:CA:B5:2B:5E:85:28:0F:7D:E0:34:71:B3:8F:0A:4B
Authority key identifier: 07:40:53:D1:CF:B6:E7:FD:87:50:4F:E3:17:51:58:39:01:E7:B8:C1
Certificate issuer: /CN=074053d1cfb6e7fd87504fe31751583901e7b8c1
Certificate serial: 01A0D8A8E4ED69BA337FDFCDB3439594A00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0BT0c-25_2HUE_jF1FYOQHnuME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 13:02:22 +0000
Manifest this update: Fri 25 Sep 2026 13:02:22 +0000
Manifest next update: Sat 26 Sep 2026 13:02:22 +0000
Files and hashes: 1: B0BT0c-25_2HUE_jF1FYOQHnuME.crl (hash: 1A7/uZzdAO3JFlYX0MfBU06fvOJR/amxw4V5TOM4his=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0BT0c-25_2HUE_jF1FYOQHnuME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:e4:ed:69:ba:33:7f:df:cd:b3:43:95:94:a0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074053d1cfb6e7fd87504fe31751583901e7b8c1
Validity
Not Before: Sep 25 13:02:22 2026 GMT
Not After : Sep 26 13:02:22 2026 GMT
Subject: CN=da242a0982cab52b5e85280f7de03471b38f0a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:7d:f5:98:3f:60:b3:e4:52:b9:45:93:ff:
9b:c0:85:45:de:10:7d:c3:e0:29:ab:5d:91:09:d3:
f1:f5:0f:85:02:2f:5d:c1:3f:0f:46:f8:88:97:b9:
8d:82:9c:35:d3:ce:69:bc:43:07:dc:8a:6f:d1:23:
6f:a7:3f:ef:7c:d6:42:19:21:74:b7:9e:1a:1b:b9:
15:58:59:6f:d1:2d:2f:1c:22:96:9e:ea:da:08:dd:
1b:7c:a1:28:3f:67:14:2c:97:88:81:e0:84:b1:88:
ae:d3:52:75:6d:46:21:41:3f:f5:be:2c:8e:01:ec:
08:3e:0b:07:68:ae:e2:5c:cf:2a:6d:70:81:44:96:
bc:a2:e2:5a:fe:f7:54:ee:c6:a4:54:24:c5:ce:e8:
1b:c7:ef:55:7c:aa:1c:73:65:39:c5:f4:e5:c7:2c:
d0:fb:6f:10:d7:db:1a:4e:c2:8c:20:c2:8c:e4:6f:
20:b4:d3:a2:4c:7a:16:5f:ed:69:45:5f:12:7e:ca:
d4:03:94:77:a3:f9:5b:2e:4f:ed:85:4c:57:56:d2:
84:4a:8b:21:9f:a5:bb:59:4d:ed:ba:2d:5e:56:05:
90:d4:12:5d:24:14:00:18:1b:1d:bc:64:00:95:4b:
35:fd:43:b1:94:6e:ad:fd:88:47:99:f5:ca:5d:4d:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:24:2A:09:82:CA:B5:2B:5E:85:28:0F:7D:E0:34:71:B3:8F:0A:4B
X509v3 Authority Key Identifier:
keyid:07:40:53:D1:CF:B6:E7:FD:87:50:4F:E3:17:51:58:39:01:E7:B8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0BT0c-25_2HUE_jF1FYOQHnuME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bb:d1:2f:77:39:27:2e:19:17:8a:da:cc:88:27:c4:64:57:
95:49:2e:24:3a:6e:32:50:4c:f5:a1:23:17:24:d4:c3:38:d7:
f1:f5:5b:93:84:fc:5c:7e:aa:fc:df:e9:80:3f:b9:f3:9e:38:
0c:23:65:0b:b3:bd:61:8a:77:1d:01:35:27:bb:1e:c9:2d:97:
04:39:56:e2:bf:f9:5a:34:ed:e8:79:1a:0f:ff:b6:fa:59:06:
4c:0c:1c:65:6f:60:6d:58:b3:37:3d:56:02:d0:31:36:58:d1:
67:4e:0d:ba:b6:89:60:91:93:3c:25:10:cc:24:48:e6:09:c2:
35:6b:34:a0:9c:14:71:90:9a:76:71:08:81:a4:75:58:61:b8:
67:e5:0f:ed:cb:41:f0:55:65:e5:aa:5a:c7:f9:d2:96:64:ca:
60:d0:4a:a8:be:a7:50:c2:c9:76:4e:e2:28:1a:98:27:b3:a7:
c4:6e:51:95:d9:60:19:7c:af:ee:d4:ea:4e:81:d5:e0:41:91:
73:dd:66:07:02:f4:a6:9d:e1:e7:66:15:cf:f7:f7:dd:88:58:
94:0f:95:fe:1a:91:b0:b9:10:7a:3e:2c:49:f6:56:5d:9d:c3:
98:b4:a0:76:61:9c:31:8d:b5:3e:9c:01:53:5a:12:fb:ae:c1:
44:0e:b3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqOTtabozf9/Ns0OVlKAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDA1M2QxY2ZiNmU3ZmQ4NzUwNGZlMzE3NTE1ODM5MDFl
N2I4YzEwHhcNMjYwOTI1MTMwMjIyWhcNMjYwOTI2MTMwMjIyWjAzMTEwLwYDVQQD
EyhkYTI0MmEwOTgyY2FiNTJiNWU4NTI4MGY3ZGUwMzQ3MWIzOGYwYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv199Zg/YLPkUrlFk/+bwIVF3hB9
w+Apq12RCdPx9Q+FAi9dwT8PRviIl7mNgpw1085pvEMH3Ipv0SNvpz/vfNZCGSF0
t54aG7kVWFlv0S0vHCKWnuraCN0bfKEoP2cULJeIgeCEsYiu01J1bUYhQT/1viyO
AewIPgsHaK7iXM8qbXCBRJa8ouJa/vdU7sakVCTFzugbx+9VfKocc2U5xfTlxyzQ
+28Q19saTsKMIMKM5G8gtNOiTHoWX+1pRV8SfsrUA5R3o/lbLk/thUxXVtKESosh
n6W7WU3tui1eVgWQ1BJdJBQAGBsdvGQAlUs1/UOxlG6t/YhHmfXKXU1RtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNokKgmCyrUrXoUoD33gNHGzjwpLMB8GA1UdIwQY
MBaAFAdAU9HPtuf9h1BP4xdRWDkB57jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBCVDBjLTI1XzJIVUVfakYxRllPUUhudU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNThjZjMtNjkwOS00NThhLWE1MWEt
NTkxNGY5ZDMzNzhiLzEvQjBCVDBjLTI1XzJIVUVfakYxRllPUUhudU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNThjZjMtNjkwOS00NThhLWE1MWEtNTkxNGY5ZDMzNzhi
LzEvQjBCVDBjLTI1XzJIVUVfakYxRllPUUhudU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLvRL3c5
Jy4ZF4razIgnxGRXlUkuJDpuMlBM9aEjFyTUwzjX8fVbk4T8XH6q/N/pgD+58544
DCNlC7O9YYp3HQE1J7seyS2XBDlW4r/5WjTt6HkaD/+2+lkGTAwcZW9gbVizNz1W
AtAxNljRZ04NuraJYJGTPCUQzCRI5gnCNWs0oJwUcZCadnEIgaR1WGG4Z+UP7ctB
8FVl5apax/nSlmTKYNBKqL6nUMLJdk7iKBqYJ7OnxG5RldlgGXyv7tTqToHV4EGR
c91mBwL0pp3h52YVz/f33YhYlA+V/hqRsLkQej4sSfZWXZ3DmLSgdmGcMY21PpwB
U1oS+67BRA6zZQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:39:38 2026 by rpki-client