Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
File: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft (raw, json)
Hash identifier: c5oKGdRidoHKHTCKsz03MIp4pvxxu0cmwRRi4zm625w=
Subject key identifier: 6F:78:E5:DA:A6:88:1D:DF:9D:AD:C9:1C:6C:A0:D8:A0:6E:30:47:62
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Certificate issuer: /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial: 019D2571A935CAD46E538C649058214FC3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
Manifest number: AF
Signing time: Wed 25 Mar 2026 14:41:39 +0000
Manifest this update: Wed 25 Mar 2026 14:41:39 +0000
Manifest next update: Thu 26 Mar 2026 14:41:39 +0000
Files and hashes: 1: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl (hash: AC9x3ptO00r1tTJv1QqWAAUJABAUPswfSOLujjF6oR4=)
2: M3cij6CcBvj7hcRt6vLnIO0jqfM.roa (hash: Nx+0gfLrWoVhxt8BGvvUFMWp0qwsFwKGJrVnSSE/5Yo=)
3: ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa (hash: IfrPVXvXZXPI5Bs8Ll1fYOxjNpHmlPmR4BZz8+zT3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:71:a9:35:ca:d4:6e:53:8c:64:90:58:21:4f:c3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
Validity
Not Before: Mar 25 14:41:39 2026 GMT
Not After : Mar 26 14:41:39 2026 GMT
Subject: CN=6f78e5daa6881ddf9dadc91c6ca0d8a06e304762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:a1:16:be:49:8b:8a:93:d1:85:f5:fd:36:
de:82:28:12:ea:4b:01:f0:5c:35:0b:9c:33:ce:93:
c7:08:83:d0:43:16:e4:6a:19:85:96:d0:a1:89:31:
10:1d:0f:d2:37:f7:08:2a:4e:6a:b8:95:0e:c2:f6:
53:50:fe:ac:86:8f:4d:55:80:28:82:65:96:b5:a0:
e0:f7:bb:51:b3:ec:d4:8f:d1:04:69:6b:52:ae:d2:
8c:74:48:1d:d6:70:92:24:f7:9c:78:fd:dc:c0:c1:
ae:e5:5b:21:44:a0:68:89:4e:4b:54:5a:f6:14:24:
67:95:34:35:33:48:2e:7a:6a:6b:cf:e6:d0:9c:34:
94:1b:83:ce:e7:92:ac:5f:67:d1:b5:4f:be:4a:65:
41:ce:e0:b9:2c:be:b9:da:d0:34:a4:61:f7:36:f6:
14:cd:95:38:d2:33:98:a8:bc:fa:f2:c5:39:9a:a6:
0a:67:16:f1:6e:13:c7:9c:07:5a:e0:2f:a0:a0:31:
01:f8:8a:c6:5f:3e:c3:7d:d8:37:74:be:01:5b:04:
70:ec:3c:e0:8f:bb:82:9e:87:c8:4f:9f:6d:94:9d:
b3:3f:6f:a6:c4:77:8d:fd:a7:98:6a:d9:d4:78:5e:
08:c8:70:23:1b:87:4a:0e:a3:f6:60:4e:03:d6:3b:
05:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:78:E5:DA:A6:88:1D:DF:9D:AD:C9:1C:6C:A0:D8:A0:6E:30:47:62
X509v3 Authority Key Identifier:
keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:95:f2:84:3d:01:41:39:4c:64:a0:39:c1:9c:62:d1:8a:
de:f7:fd:2e:18:26:d2:a6:78:5d:39:b2:f8:ef:1d:27:98:c0:
82:3b:91:40:4e:5a:f8:a4:1e:19:17:3d:6a:1b:e8:ad:d7:2f:
34:72:e7:e1:7f:61:18:33:46:6b:37:e8:bd:1f:68:48:c5:d1:
d0:c7:14:26:ec:3c:99:16:da:b3:c7:f2:48:39:3c:e9:9c:f0:
fa:5c:60:d0:97:88:ec:db:63:5e:a7:d5:c1:57:70:5b:d7:0b:
a8:42:69:3a:2a:5c:15:6c:00:3f:97:80:fb:45:e0:fc:6b:86:
ee:69:99:73:64:ad:b5:ea:d1:39:7f:43:f1:c1:37:46:06:ac:
a2:a9:b3:d0:eb:82:c0:fd:fd:96:5e:90:ab:9f:6d:78:3e:08:
b5:f0:26:f9:a3:6d:fd:ac:b5:d1:f3:0d:b6:c3:e4:78:1b:97:
5e:a6:cb:69:03:01:9d:11:64:c2:85:c1:ad:e5:eb:92:15:ac:
7c:51:79:57:10:10:8a:b7:a3:5f:68:f8:90:aa:98:58:f9:fc:
e0:7e:92:06:5f:04:ac:11:95:b3:c3:20:01:07:3b:ec:17:11:
aa:61:ea:cd:9a:43:5a:c1:53:b2:9d:e1:3f:fe:9d:5c:94:f9:
93:58:39:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lcak1ytRuU4xkkFghT8PKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjY0MTMwNzY0NDgwZWYyZGQ4MTc4MTE2YjVkZDBjNTlk
MmU5OTQwHhcNMjYwMzI1MTQ0MTM5WhcNMjYwMzI2MTQ0MTM5WjAzMTEwLwYDVQQD
Eyg2Zjc4ZTVkYWE2ODgxZGRmOWRhZGM5MWM2Y2EwZDhhMDZlMzA0NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSWhFr5Ji4qT0YX1/TbegigS6ksB
8Fw1C5wzzpPHCIPQQxbkahmFltChiTEQHQ/SN/cIKk5quJUOwvZTUP6sho9NVYAo
gmWWtaDg97tRs+zUj9EEaWtSrtKMdEgd1nCSJPeceP3cwMGu5VshRKBoiU5LVFr2
FCRnlTQ1M0guemprz+bQnDSUG4PO55KsX2fRtU++SmVBzuC5LL652tA0pGH3NvYU
zZU40jOYqLz68sU5mqYKZxbxbhPHnAda4C+goDEB+IrGXz7Dfdg3dL4BWwRw7Dzg
j7uCnofIT59tlJ2zP2+mxHeN/aeYatnUeF4IyHAjG4dKDqP2YE4D1jsFDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG945dqmiB3fna3JHGyg2KBuMEdiMB8GA1UdIwQY
MBaAFAdmQTB2RIDvLdgXgRa13QxZ0umUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUt
MTFlMTJmOTViNTI5LzEvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUtMTFlMTJmOTViNTI5
LzEvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ+V8oQ9
AUE5TGSgOcGcYtGK3vf9Lhgm0qZ4XTmy+O8dJ5jAgjuRQE5a+KQeGRc9ahvordcv
NHLn4X9hGDNGazfovR9oSMXR0McUJuw8mRbas8fySDk86Zzw+lxg0JeI7NtjXqfV
wVdwW9cLqEJpOipcFWwAP5eA+0Xg/GuG7mmZc2StterROX9D8cE3Rgasoqmz0OuC
wP39ll6Qq59teD4ItfAm+aNt/ay10fMNtsPkeBuXXqbLaQMBnRFkwoXBreXrkhWs
fFF5VxAQirejX2j4kKqYWPn84H6SBl8ErBGVs8MgAQc77BcRqmHqzZpDWsFTsp3h
P/6dXJT5k1g5aA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:48:39 2026 by rpki-client