Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
File: B2yh-gAAa6SP7plAIRY6koqhgE4.mft (raw, json)
Hash identifier: 6lptfPwAVAG+aplzUZMSWxVC7L1qfjzFet511AWo/FE=
Subject key identifier: C3:AE:E1:1D:7C:DD:0A:D9:F8:42:21:EF:45:D4:57:28:5B:BE:14:68
Authority key identifier: 07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E
Certificate issuer: /CN=076ca1fa00006ba48fee994021163a928aa1804e
Certificate serial: 019E1E34D1C0E75C3E0F9DEB1B93D43A9676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
Manifest number: 01C7
Signing time: Tue 12 May 2026 22:00:38 +0000
Manifest this update: Tue 12 May 2026 22:00:38 +0000
Manifest next update: Wed 13 May 2026 22:00:38 +0000
Files and hashes: 1: B2yh-gAAa6SP7plAIRY6koqhgE4.crl (hash: uSIvjGZT39sG8JsUkmDd722bF20KOSJ3toqELlNeEsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:d1:c0:e7:5c:3e:0f:9d:eb:1b:93:d4:3a:96:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076ca1fa00006ba48fee994021163a928aa1804e
Validity
Not Before: May 12 22:00:38 2026 GMT
Not After : May 13 22:00:38 2026 GMT
Subject: CN=c3aee11d7cdd0ad9f84221ef45d457285bbe1468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:5d:53:2b:18:f1:dc:80:62:fe:1b:cf:58:
1e:a4:47:08:20:a1:3f:74:13:b9:2e:21:23:6a:fc:
ee:bc:3c:d7:1d:92:bc:6c:e3:56:de:2b:01:ea:29:
81:2f:bb:06:a2:04:e4:99:11:be:cb:58:22:b6:5f:
c5:fb:d5:6b:a3:8e:f6:ed:03:a4:c3:cd:dd:df:09:
2c:da:d3:8e:b3:9c:2a:d1:95:5b:16:17:43:03:ee:
67:0b:6f:11:6a:87:a5:eb:6a:6e:bc:9c:0d:b2:c6:
52:71:27:04:a6:37:54:8a:43:60:d1:3b:b1:88:17:
90:a0:a2:f2:3c:39:c9:b6:07:99:5d:4d:9b:02:94:
34:c4:c9:14:77:47:79:5c:1b:7a:c1:3f:0c:8a:04:
b2:43:02:90:c4:02:8e:84:eb:e2:ed:bc:8c:ab:42:
2f:5e:54:43:3c:ff:9c:81:c8:05:7a:fa:43:1d:ac:
6c:e0:41:b6:cb:23:0e:1f:83:2d:cf:50:2a:dd:b1:
9a:9a:ec:fc:e3:03:70:9e:6d:72:fd:f0:d9:84:67:
bb:45:84:99:a7:8c:f1:33:b7:4e:5f:e8:97:5a:9c:
79:c5:bf:a6:96:6b:e4:a3:47:63:19:98:a1:8f:6f:
7a:fc:38:93:06:01:2b:5b:31:0b:08:61:93:2c:aa:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:E1:1D:7C:DD:0A:D9:F8:42:21:EF:45:D4:57:28:5B:BE:14:68
X509v3 Authority Key Identifier:
keyid:07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c0:bf:f9:2a:06:dd:a9:53:54:e5:50:c1:bf:2d:00:eb:21:
a1:fd:64:fe:56:42:a0:79:ef:04:99:e1:14:45:4d:cc:40:22:
58:12:2e:b2:fd:1b:6a:1f:39:33:a8:5c:07:db:0f:a4:38:af:
92:94:dd:5b:aa:9b:9f:98:75:bd:cb:a5:a5:0f:aa:03:5a:cb:
03:5d:96:55:e8:b7:7f:46:1f:2d:95:1d:4f:9a:b0:34:94:62:
37:ae:fb:2b:bd:ce:b9:d6:41:48:21:1d:9c:4a:d2:22:6f:e2:
59:ce:e7:da:20:8d:62:77:aa:20:8c:f2:60:dd:bb:42:37:6a:
f5:40:13:37:8a:2c:85:d7:56:f2:6d:f8:ff:ce:bb:40:d8:df:
c9:6d:d4:f0:f4:00:d6:ac:65:82:d3:3a:37:d3:83:0e:25:c1:
d4:5d:3f:32:56:8f:de:8c:09:c3:a3:8d:92:3d:16:df:93:91:
fc:37:0c:a6:64:b7:a7:5e:5c:73:40:73:40:26:52:37:d6:07:
b0:a6:a0:61:b2:0a:58:cb:17:66:e9:91:09:3d:9d:28:1f:6f:
b2:36:55:3e:ad:ee:c8:72:53:3e:90:80:da:e8:6e:1d:a2:e1:
97:00:c3:b3:54:0c:b7:38:e8:32:5d:a2:b2:9e:56:ac:43:7f:
64:d2:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:22 2026 by rpki-client