Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
File: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft (raw, json)
Hash identifier: xx0t5/rQfqgJWMvSJUaQ6tVBJsg+d5Tc5cPSN/abRys=
Subject key identifier: B4:5A:B8:FA:D5:0F:06:B4:76:C6:98:49:F1:F8:BA:3C:E9:1F:80:E1
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Certificate issuer: /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial: 019E1C7DDCD4EC8B8126DBF4E5E18DB7956C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
Manifest number: 012F
Signing time: Tue 12 May 2026 14:01:10 +0000
Manifest this update: Tue 12 May 2026 14:01:10 +0000
Manifest next update: Wed 13 May 2026 14:01:10 +0000
Files and hashes: 1: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl (hash: FbH9oF9jQVE2RenodvDgwmaGjVW3ay0GD1PtLZRhoPI=)
2: M3cij6CcBvj7hcRt6vLnIO0jqfM.roa (hash: Nx+0gfLrWoVhxt8BGvvUFMWp0qwsFwKGJrVnSSE/5Yo=)
3: ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa (hash: IfrPVXvXZXPI5Bs8Ll1fYOxjNpHmlPmR4BZz8+zT3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:dc:d4:ec:8b:81:26:db:f4:e5:e1:8d:b7:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
Validity
Not Before: May 12 14:01:10 2026 GMT
Not After : May 13 14:01:10 2026 GMT
Subject: CN=b45ab8fad50f06b476c69849f1f8ba3ce91f80e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:a0:bf:33:de:ba:ca:98:70:69:ee:a0:77:
fb:2e:38:d6:c5:6a:86:4e:6e:a0:49:82:d7:54:4f:
c3:90:0f:8a:58:2a:5a:28:58:11:c4:55:04:14:4e:
b2:e4:5a:5b:ae:d0:93:c6:a6:ad:71:b9:3e:ae:9c:
9b:24:73:39:3b:dd:22:13:25:b6:63:5e:2c:a1:47:
fe:52:fb:8d:c1:e0:ea:9b:8d:b9:a1:76:91:da:fe:
b1:52:91:db:b4:3c:71:e5:25:0d:30:93:36:e9:11:
00:37:fe:c9:7a:4c:4a:fa:f2:c8:59:3d:ce:41:81:
df:7f:09:90:a9:21:af:ae:4a:a0:8d:34:cf:3b:7f:
dc:32:e3:d9:79:0c:c4:0a:ae:7c:d6:eb:95:82:05:
83:b1:fd:71:49:15:3b:3e:ce:c8:14:7b:72:68:4c:
ed:d4:d1:ac:23:a9:ff:41:d9:4b:7b:bd:08:6d:ac:
7c:cb:fa:97:38:cc:c7:c7:ee:50:f5:d4:c1:8f:35:
94:b5:94:e1:92:70:9a:86:43:f6:01:bb:c4:63:44:
20:07:33:ed:0b:c1:4e:98:1f:ab:cf:25:44:13:6f:
5f:17:60:5b:c2:d3:bd:9a:cd:56:f8:91:5f:55:df:
c4:6b:d8:fc:8d:6a:05:9c:e8:d9:ce:0b:94:0e:db:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:B8:FA:D5:0F:06:B4:76:C6:98:49:F1:F8:BA:3C:E9:1F:80:E1
X509v3 Authority Key Identifier:
keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:7f:eb:a1:26:ba:32:17:4e:15:30:c4:ea:c9:4d:50:d7:
b1:cb:43:76:49:dc:c9:12:97:a8:69:e3:a2:b7:d8:c5:a4:80:
85:f8:a8:f5:ca:1f:b9:44:c6:38:e3:f6:c4:32:6a:72:cf:c8:
d7:69:a5:1a:6e:23:59:be:ce:d9:92:83:bc:64:40:90:90:ba:
37:0a:70:cc:a9:55:be:cd:cb:24:dc:e1:d7:29:fb:de:30:8e:
e0:ee:3c:11:3e:26:9a:96:dc:e4:ac:19:b4:0a:82:77:37:46:
67:8a:8d:6d:51:df:8b:55:e7:fa:3f:ff:bc:6e:c2:23:11:a8:
cb:84:37:a5:e1:35:bb:18:3b:5d:44:d3:49:a1:e7:89:45:09:
1b:fa:0d:88:39:01:78:25:b3:15:65:c8:43:c3:4d:9d:b3:13:
5f:48:2e:f7:7f:e8:aa:1e:4c:40:ec:8c:48:00:10:d9:d8:31:
3f:bc:20:76:02:fb:ad:ee:ff:78:49:a8:92:5a:77:74:4f:bd:
98:8d:c0:bb:53:ac:e7:e9:56:9b:78:72:11:a5:5c:e7:21:0c:
c6:51:a0:49:b4:b7:e1:aa:f2:fb:82:30:cf:18:38:23:0b:a4:
4a:06:c4:a2:00:82:a2:0f:eb:51:21:f2:c8:68:ed:3a:70:b2:
18:5a:cc:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfdzU7IuBJtv05eGNt5VsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjY0MTMwNzY0NDgwZWYyZGQ4MTc4MTE2YjVkZDBjNTlk
MmU5OTQwHhcNMjYwNTEyMTQwMTEwWhcNMjYwNTEzMTQwMTEwWjAzMTEwLwYDVQQD
EyhiNDVhYjhmYWQ1MGYwNmI0NzZjNjk4NDlmMWY4YmEzY2U5MWY4MGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRKgvzPeusqYcGnuoHf7LjjWxWqG
Tm6gSYLXVE/DkA+KWCpaKFgRxFUEFE6y5FpbrtCTxqatcbk+rpybJHM5O90iEyW2
Y14soUf+UvuNweDqm425oXaR2v6xUpHbtDxx5SUNMJM26REAN/7JekxK+vLIWT3O
QYHffwmQqSGvrkqgjTTPO3/cMuPZeQzECq581uuVggWDsf1xSRU7Ps7IFHtyaEzt
1NGsI6n/QdlLe70Ibax8y/qXOMzHx+5Q9dTBjzWUtZThknCahkP2AbvEY0QgBzPt
C8FOmB+rzyVEE29fF2BbwtO9ms1W+JFfVd/Ea9j8jWoFnOjZzguUDtureQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRauPrVDwa0dsaYSfH4ujzpH4DhMB8GA1UdIwQY
MBaAFAdmQTB2RIDvLdgXgRa13QxZ0umUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUt
MTFlMTJmOTViNTI5LzEvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUtMTFlMTJmOTViNTI5
LzEvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEN/66Em
ujIXThUwxOrJTVDXsctDdkncyRKXqGnjorfYxaSAhfio9cofuUTGOOP2xDJqcs/I
12mlGm4jWb7O2ZKDvGRAkJC6NwpwzKlVvs3LJNzh1yn73jCO4O48ET4mmpbc5KwZ
tAqCdzdGZ4qNbVHfi1Xn+j//vG7CIxGoy4Q3peE1uxg7XUTTSaHniUUJG/oNiDkB
eCWzFWXIQ8NNnbMTX0gu93/oqh5MQOyMSAAQ2dgxP7wgdgL7re7/eEmoklp3dE+9
mI3Au1Os5+lWm3hyEaVc5yEMxlGgSbS34ary+4Iwzxg4IwukSgbEogCCog/rUSHy
yGjtOnCyGFrMFA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:05 2026 by rpki-client