Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.mft (raw, json)
Hash identifier: 3c7vVd90a9/FyYK8R/vo7LzK5fACsZKjQJp5ieOmPrU=
Subject key identifier: FD:66:39:03:EB:A9:FC:AF:84:C4:50:12:69:98:18:B3:2B:76:78:3A
Authority key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Certificate issuer: /CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Certificate serial: 019D25F179EACC3FF972B8D51D0A9B599E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
Manifest number: 10EE
Signing time: Wed 25 Mar 2026 17:01:15 +0000
Manifest this update: Wed 25 Mar 2026 17:01:15 +0000
Manifest next update: Thu 26 Mar 2026 17:01:15 +0000
Files and hashes: 1: B9oznlzTwb4CzmgCoEIYVqoLVHs.crl (hash: 1KjKaCq+l8AmunxwJUK/9w7VxA+/YM0TFxvvQRMMWJk=)
2: Fh8dU1sk5ALM7kpiO6BAeJeWRH0.roa (hash: jOyoK8xyNESHxZoIIJYDR0iqgib05HyciYjF8KZpxgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:79:ea:cc:3f:f9:72:b8:d5:1d:0a:9b:59:9e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Validity
Not Before: Mar 25 17:01:15 2026 GMT
Not After : Mar 26 17:01:15 2026 GMT
Subject: CN=fd663903eba9fcaf84c45012699818b32b76783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:e4:c0:53:ac:57:d9:76:66:04:bf:4b:f5:
b8:8b:15:f8:fc:1b:85:4e:37:c6:e2:a3:ba:b7:30:
f8:92:ba:05:04:32:3e:33:66:65:15:42:77:55:43:
8f:98:1f:84:95:09:a9:69:59:27:69:4e:e2:f9:b7:
c2:41:e2:9f:5b:bc:18:ed:e0:ea:40:36:5c:1c:d0:
89:8d:c6:2c:ae:b3:d3:c4:3c:f3:75:49:e5:3d:df:
81:24:62:72:75:73:a6:91:aa:1a:ef:63:0e:36:00:
35:68:be:ef:2a:33:4c:62:f0:41:da:2e:6e:0a:68:
bd:d0:cd:9c:98:86:7a:ac:4e:f9:e3:ec:99:31:9c:
5d:46:3e:62:c6:23:66:e0:58:a6:0c:a0:17:d9:bb:
2b:5a:1e:2b:d1:12:d9:58:1e:0f:a3:f3:03:d9:80:
ad:9c:d7:02:35:75:bb:03:2f:7d:72:b6:51:65:a4:
be:12:73:b1:8d:a4:e6:83:8a:8d:86:b7:54:b6:6b:
e8:89:75:0e:3c:46:ad:59:d3:54:3b:e6:fe:2c:eb:
f6:72:30:af:92:0c:eb:25:96:80:3c:55:fd:e6:81:
aa:bb:87:90:80:ea:83:c7:7d:12:83:c2:d1:77:b9:
c9:a3:b2:52:36:7c:3e:04:25:d5:fb:e8:f8:b7:5d:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:39:03:EB:A9:FC:AF:84:C4:50:12:69:98:18:B3:2B:76:78:3A
X509v3 Authority Key Identifier:
keyid:07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cd:8b:12:e5:5a:71:bd:00:cb:da:10:80:6b:83:0a:b2:64:
5e:ab:03:b4:56:b8:8e:c3:4c:96:f2:0d:17:a0:4a:bf:18:62:
6c:23:f4:34:8b:28:b9:96:56:c8:c7:9e:d7:ce:fa:8c:b7:5e:
2b:19:b6:88:6a:df:f7:d4:07:88:ac:ff:23:35:0a:69:44:29:
47:47:3e:64:6a:d5:ec:1c:cc:da:a8:58:8a:e5:6a:f2:f1:d3:
b4:b8:4c:b8:16:31:35:f5:6b:20:00:c1:16:4d:1a:0d:b3:17:
38:b7:9f:4f:1b:cb:85:32:f3:8f:96:25:9f:37:d8:43:a3:01:
54:e0:1f:03:1c:32:2a:de:5e:4d:2c:d3:2a:e6:13:ab:50:7a:
f1:4a:61:9f:4c:2e:4d:aa:d7:6f:d9:7d:44:fb:e0:64:18:62:
10:c8:f9:ca:b4:6d:d9:7f:c9:4c:9f:16:bd:44:af:38:f0:17:
16:31:76:ec:ca:bf:31:6c:b9:40:6f:0b:ac:7c:86:94:4d:b0:
c7:8b:63:a0:0d:71:1f:cd:bc:ae:a7:c3:9a:10:88:b3:e9:bd:
5a:d8:19:75:87:13:48:79:a4:80:b2:5c:f9:ad:8c:60:06:78:
3f:04:3d:49:e9:52:5c:93:02:b7:0b:8d:40:73:dc:e4:d8:ff:
2e:b6:05:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8XnqzD/5crjVHQqbWZ45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZGEzMzllNWNkM2MxYmUwMmNlNjgwMmEwNDIxODU2YWEw
YjU0N2IwHhcNMjYwMzI1MTcwMTE1WhcNMjYwMzI2MTcwMTE1WjAzMTEwLwYDVQQD
EyhmZDY2MzkwM2ViYTlmY2FmODRjNDUwMTI2OTk4MThiMzJiNzY3ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApILkwFOsV9l2ZgS/S/W4ixX4/BuF
TjfG4qO6tzD4kroFBDI+M2ZlFUJ3VUOPmB+ElQmpaVknaU7i+bfCQeKfW7wY7eDq
QDZcHNCJjcYsrrPTxDzzdUnlPd+BJGJydXOmkaoa72MONgA1aL7vKjNMYvBB2i5u
Cmi90M2cmIZ6rE754+yZMZxdRj5ixiNm4FimDKAX2bsrWh4r0RLZWB4Po/MD2YCt
nNcCNXW7Ay99crZRZaS+EnOxjaTmg4qNhrdUtmvoiXUOPEatWdNUO+b+LOv2cjCv
kgzrJZaAPFX95oGqu4eQgOqDx30Sg8LRd7nJo7JSNnw+BCXV++j4t12lKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1mOQPrqfyvhMRQEmmYGLMrdng6MB8GA1UdIwQY
MBaAFAfaM55c08G+As5oAqBCGFaqC1R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMt
ODE2NzRkOTUzZDU2LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jNjJlMGMtNDQ1NC00M2M4LTk3YmMtODE2NzRkOTUzZDU2
LzEvQjlvem5selR3YjRDem1nQ29FSVlWcW9MVkhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALc2LEuVa
cb0Ay9oQgGuDCrJkXqsDtFa4jsNMlvINF6BKvxhibCP0NIsouZZWyMee1876jLde
Kxm2iGrf99QHiKz/IzUKaUQpR0c+ZGrV7BzM2qhYiuVq8vHTtLhMuBYxNfVrIADB
Fk0aDbMXOLefTxvLhTLzj5YlnzfYQ6MBVOAfAxwyKt5eTSzTKuYTq1B68Uphn0wu
TarXb9l9RPvgZBhiEMj5yrRt2X/JTJ8WvUSvOPAXFjF27Mq/MWy5QG8LrHyGlE2w
x4tjoA1xH828rqfDmhCIs+m9WtgZdYcTSHmkgLJc+a2MYAZ4PwQ9SelSXJMCtwuN
QHPc5Nj/LrYF/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:25 2026 by rpki-client