Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
File: B2yh-gAAa6SP7plAIRY6koqhgE4.mft (raw, json)
Hash identifier: zvZjJM9iGY6aUNerKY2nNMjHve3TjdXFA8+doKoAw1M=
Subject key identifier: 9D:B7:5C:AF:A6:17:7F:E8:FC:7E:20:8D:DB:F3:DA:0A:37:AB:86:33
Authority key identifier: 07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E
Certificate issuer: /CN=076ca1fa00006ba48fee994021163a928aa1804e
Certificate serial: 019D2704A5A33EAF22D6BED3910FE43706D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
Manifest number: 0147
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: B2yh-gAAa6SP7plAIRY6koqhgE4.crl (hash: LOh5Cwy8xttJ9fZRe0ycu2UIQ6h8e+H97NIUneV4ojE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a5:a3:3e:af:22:d6:be:d3:91:0f:e4:37:06:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076ca1fa00006ba48fee994021163a928aa1804e
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=9db75cafa6177fe8fc7e208ddbf3da0a37ab8633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:6c:b5:fd:f4:dc:bf:98:f5:92:f2:ec:56:
b2:9d:df:6f:70:d4:9e:7a:12:e6:f7:e8:4d:f2:11:
ba:06:1c:6e:89:3b:47:96:07:41:1f:36:23:8f:05:
a5:ae:e5:b9:50:d6:73:d1:f5:b0:e2:f9:57:7f:9f:
e6:7a:e0:fd:ae:1c:f4:d8:0d:94:65:2b:56:0b:2e:
01:79:17:a6:11:ca:76:12:d6:d6:c6:88:68:bc:e5:
ac:cd:d8:ee:9b:9e:64:3e:bd:16:74:04:86:f7:c4:
f4:8a:ea:ed:9c:eb:04:58:c1:1b:02:89:84:84:b1:
f3:e7:5b:5b:72:db:c1:e7:91:2d:69:b7:4e:e2:71:
11:71:ed:a5:c0:1d:0c:11:64:a1:ac:9d:46:34:88:
6a:a5:32:43:fe:d1:f9:4c:84:f9:96:fc:77:1d:04:
c7:c4:65:42:dd:16:cd:e6:23:db:63:8d:ac:e1:91:
6c:29:03:9f:56:81:13:fa:31:31:84:7a:17:de:be:
15:3e:32:2f:50:0f:a2:c4:4d:ac:28:4d:e7:ba:34:
17:73:51:21:94:e2:f0:a1:76:26:b0:ea:ce:3d:34:
a3:81:ea:32:2b:94:a5:2a:7d:60:ee:81:9f:d5:c4:
1b:56:96:27:a9:1f:b5:d0:dc:f9:99:4e:7d:6f:4f:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:5C:AF:A6:17:7F:E8:FC:7E:20:8D:DB:F3:DA:0A:37:AB:86:33
X509v3 Authority Key Identifier:
keyid:07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3c:05:41:8e:da:09:59:03:c9:df:a5:72:aa:6d:cf:03:62:
16:81:2f:f2:f6:7b:46:a4:53:67:99:45:ac:1f:10:10:2e:e7:
78:d7:41:4f:76:ed:c8:b4:d0:70:15:f9:c9:1b:19:c8:61:b9:
06:e5:7a:31:aa:16:6c:88:0f:4c:dc:bb:c2:e6:79:84:d8:45:
25:e3:5b:cc:ec:f1:24:32:85:ff:11:06:c8:92:ce:e9:91:d2:
cc:e9:31:a6:33:24:0b:cb:ac:91:35:e8:f9:50:ab:46:82:4c:
66:8e:eb:8e:5a:77:4e:d2:f3:2d:39:e9:22:10:aa:e8:2b:26:
f3:85:55:31:a6:83:cd:77:5f:20:33:96:41:2c:8f:bb:b2:5b:
6c:6e:85:e4:05:ef:f2:4a:8f:c7:98:79:09:79:7f:c5:da:06:
80:99:c7:93:86:86:b1:00:8f:53:22:aa:0c:34:5c:81:d5:97:
76:91:52:b2:e9:b6:df:96:7b:11:7c:c1:fc:64:82:c9:e7:95:
f0:74:35:0b:22:28:1c:35:30:a2:7b:82:e2:cf:60:cb:6e:44:
92:33:73:68:e8:5e:64:1e:f8:29:a8:05:08:b2:99:9b:54:cb:
28:76:08:7c:7d:07:5f:f9:44:bc:d3:82:87:b0:5a:34:d9:e2:
d0:b1:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:45 2026 by rpki-client