Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier: 0n1JaUJTVcFNsNO8cKHAaaVQ3sHGkmDpz9FQGsdoIm8=
Subject key identifier: 52:AA:38:04:A7:1F:76:4D:D7:CC:5C:3B:51:BF:58:1A:0A:1A:54:44
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial: 019F9135514310CF4D9A9FE32CB0B5736757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number: 10E8
Signing time: Thu 23 Jul 2026 23:00:18 +0000
Manifest this update: Thu 23 Jul 2026 23:00:18 +0000
Manifest next update: Fri 24 Jul 2026 23:00:18 +0000
Files and hashes: 1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: 8eAoxBh00iP7/d1UJFIQGSM186CjrTrflJMMR8xO2dQ=)
2: oPFpE2eYg7379Yb_z8iPaPDUTho.roa (hash: 0ECJa2zyh+fpYI5FZMz9J/l+RoqDVpUle+qzTOb1Aqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:51:43:10:cf:4d:9a:9f:e3:2c:b0:b5:73:67:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Validity
Not Before: Jul 23 23:00:18 2026 GMT
Not After : Jul 24 23:00:18 2026 GMT
Subject: CN=52aa3804a71f764dd7cc5c3b51bf581a0a1a5444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:be:d8:eb:7b:58:ea:df:d9:fc:fb:59:d6:
7d:66:3a:e3:d2:7a:4a:72:c0:cf:2a:e5:73:16:f5:
e3:5a:ad:33:00:15:36:10:9a:e0:5c:9b:9e:f6:96:
ae:47:5c:98:89:80:57:2c:39:2d:a7:26:85:37:92:
2c:71:3d:9b:14:0c:76:d1:f3:d8:5b:9f:0e:2c:38:
54:71:3d:75:07:bd:c3:9a:81:3e:73:9d:76:51:79:
35:79:16:80:72:71:6f:0a:11:b3:fc:7c:b0:03:42:
8b:6c:8b:c1:38:95:12:03:8e:74:c8:18:cb:1a:6d:
94:b1:62:8d:06:0f:ed:1c:24:1e:a8:19:8a:ed:30:
4e:ff:66:d2:cb:af:66:ac:04:a8:c3:74:f4:53:e9:
c7:e2:67:a5:b6:e8:a1:93:f0:5e:7a:e8:96:75:6c:
a5:d6:45:45:0e:35:47:08:4e:fe:d4:ed:fb:30:65:
6b:e2:c1:e9:39:72:0e:0a:79:71:91:6c:6d:77:f3:
bf:1f:a7:a2:59:de:78:54:25:8a:0f:ae:a3:e3:f4:
c6:1f:8e:13:40:0c:c2:94:3e:41:f9:d6:58:87:ae:
db:c0:df:a7:25:d0:7c:71:d1:72:0f:ab:d5:47:ea:
89:8d:f3:ab:1a:7e:90:fd:d0:3e:19:35:c7:44:b5:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:38:04:A7:1F:76:4D:D7:CC:5C:3B:51:BF:58:1A:0A:1A:54:44
X509v3 Authority Key Identifier:
keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:24:8f:9d:4b:24:71:92:e6:56:75:40:66:3d:b0:b0:f7:38:
36:c2:fd:c1:3c:f1:ad:c7:0e:f0:38:c7:17:16:b4:a4:82:12:
f1:ff:c7:a4:8c:79:63:26:6d:ca:7f:f5:5e:56:0e:77:0a:57:
ec:3f:e0:89:91:ab:ae:84:3d:2a:ff:f5:4f:ef:17:82:2d:37:
7e:5f:8d:19:0e:12:ab:d9:cd:0c:03:cb:60:20:10:91:76:c5:
5a:e0:e8:5c:0d:2f:fe:f8:c7:80:78:64:3a:bd:a9:b1:cb:60:
a7:d1:01:60:b9:50:9c:99:80:7c:68:8c:f9:b6:3f:ed:81:51:
3b:b8:1d:cb:87:c6:f5:bd:0c:d9:88:dd:5f:f6:fb:4f:54:ab:
37:e9:43:7f:91:b9:52:ee:50:ee:91:8d:ff:5e:cc:cf:10:54:
cc:16:c4:1a:83:fe:33:fc:29:68:83:a0:a5:e5:2b:94:8e:30:
f3:1a:79:e1:d0:68:06:18:ff:a2:f4:d9:84:66:c6:82:62:5d:
ee:43:d7:37:4a:52:fa:7a:ff:ca:b3:ce:d1:89:80:fa:7a:63:
59:a0:4e:da:1e:23:f4:5b:ed:b4:d4:d5:28:20:b5:25:39:9e:
d6:f0:8a:32:64:9e:5e:c1:7e:29:10:11:f8:1f:58:f4:b1:cf:
4e:ba:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:07 2026 by rpki-client