Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: ALWzSiIuBEzpQTC59y6JNSLPxF6xEnPl+o0SHXSPB8o=
Subject key identifier: 3F:19:92:32:41:C1:6B:33:35:8F:C9:42:87:8B:95:A9:7A:31:2D:73
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 019F95B796042768D672916E89504C038578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 1231
Signing time: Fri 24 Jul 2026 20:01:04 +0000
Manifest this update: Fri 24 Jul 2026 20:01:04 +0000
Manifest next update: Sat 25 Jul 2026 20:01:04 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: aeNTb4feMRc8VApa2k8jBh/uu5K3g9fRpm4RbhRX3J4=)
2: Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa (hash: jOyoK8xyNESHxZoIIJYDR0iqgib05HyciYjF8KZpxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:96:04:27:68:d6:72:91:6e:89:50:4c:03:85:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Jul 24 20:01:04 2026 GMT
Not After : Jul 25 20:01:04 2026 GMT
Subject: CN=3f19923241c16b33358fc942878b95a97a312d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:5b:b3:64:89:63:ed:a2:3a:5f:2a:45:ca:
f7:09:a8:17:23:ee:f5:1f:42:16:e4:4e:56:95:79:
bf:36:9f:d7:23:13:c2:94:9c:27:d0:77:fa:42:69:
db:15:fa:db:45:46:16:3c:a6:51:2d:91:44:7a:60:
6d:33:f9:ae:5b:dc:e1:64:85:3b:46:f4:73:2e:b9:
fc:36:3d:bf:e4:d6:d5:64:d2:50:0c:1b:74:2a:05:
d3:7a:61:1d:34:3a:84:63:71:ab:77:1b:00:81:f8:
98:ba:61:c5:59:79:00:1a:36:d9:2c:46:94:e2:30:
18:9f:dd:6c:93:40:71:40:33:70:aa:e4:1b:2d:54:
65:35:4c:b2:02:64:b5:c5:79:e1:6b:e1:7b:92:24:
98:f4:0c:8a:d1:ae:bf:70:ec:16:c5:c0:6a:a3:54:
96:26:6a:04:84:99:97:2a:90:47:ff:df:8f:ea:0e:
45:0f:58:04:7c:d8:2f:b7:f8:57:89:b4:72:7d:06:
7e:95:99:39:8c:cc:54:ea:cb:5d:9d:db:a7:2e:27:
b1:d2:fb:a8:4b:29:5e:a7:b4:af:37:8c:91:d3:20:
76:48:bb:a9:c5:88:ce:5d:cc:e1:55:95:44:ca:25:
35:d2:26:01:b7:7b:fe:6a:b9:1f:ed:46:8c:99:54:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:92:32:41:C1:6B:33:35:8F:C9:42:87:8B:95:A9:7A:31:2D:73
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:84:c8:e7:b0:be:19:17:74:11:2c:45:55:2c:11:6f:a3:f9:
cd:dc:08:f8:3a:ec:ef:46:77:ad:14:83:49:b4:a7:65:c2:c2:
c5:03:15:90:58:76:a0:9a:5e:5f:04:e1:33:b1:67:d5:c8:69:
8e:68:46:31:52:f2:ce:82:e9:3d:d1:91:d0:b5:5b:ea:fa:37:
64:98:13:b5:29:f8:f2:bc:f7:ce:7b:26:0c:75:f8:4b:75:82:
6b:70:77:37:49:71:74:c6:44:4b:a3:d3:54:77:70:fa:b5:a3:
74:b8:27:c4:dc:1d:87:07:82:4f:b8:3a:48:07:1a:ed:fe:c0:
c9:d3:20:4a:f7:1b:1d:22:60:4e:2b:3c:d9:a6:ab:73:ba:a6:
d0:16:0e:27:cd:53:bb:51:16:64:7d:56:66:e0:20:17:de:27:
07:66:c5:99:02:e2:46:fa:a6:1e:3e:a0:12:84:25:00:1d:ab:
41:ea:f2:40:dc:fc:06:42:d7:e4:2f:18:84:1d:fe:56:19:84:
aa:7f:1c:a1:86:f1:92:d2:2b:38:b3:f0:95:33:cb:0b:ba:b3:
ed:54:49:c9:de:4d:2d:6a:83:30:21:78:70:87:cf:5a:35:45:
e8:24:a2:1e:b8:7a:f1:84:be:d0:20:98:c1:6c:34:fd:ae:d3:
96:fd:99:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:26 2026 by rpki-client