
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: alGQSPT8LH304Eg1fptWf0P8b05WHXRr9izeqUrXNbU=
Subject key identifier: F5:DB:18:80:51:2A:DD:95:49:BD:00:B4:48:66:8F:36:BE:34:4B:22
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019CACB53EE4969E0A9ED5A629AB572049D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 070E
Signing time: Mon 02 Mar 2026 04:01:24 +0000
Manifest this update: Mon 02 Mar 2026 04:01:24 +0000
Manifest next update: Tue 03 Mar 2026 04:01:24 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: 2MRkQzJFnmJD3RLdY7BAIX3tutWGw9mmJrVplxcABwg=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:3e:e4:96:9e:0a:9e:d5:a6:29:ab:57:20:49:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Mar 2 04:01:24 2026 GMT
Not After : Mar 3 04:01:24 2026 GMT
Subject: CN=f5db1880512add9549bd00b448668f36be344b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4c:5f:77:08:20:65:93:69:db:b1:47:1c:4a:
e1:bc:74:f9:49:04:e3:3b:54:4a:16:b4:0f:c1:6e:
be:e0:cf:de:60:1b:0c:5b:ac:4f:1d:c2:2a:4f:de:
12:8e:16:0e:ca:2b:d9:8f:5b:ec:49:9e:88:6d:ee:
cd:c8:49:49:7f:f1:fd:fc:8b:0e:d9:50:ff:3c:1f:
6d:64:fe:a2:0a:31:61:d1:f5:e9:ff:a6:51:b9:84:
db:0e:f9:04:a8:f6:9f:3f:17:07:2b:d7:4a:fe:1e:
e7:e9:2a:fc:46:d1:8f:18:d4:e9:c3:87:ef:96:79:
8e:2a:0f:2d:84:26:fb:68:8b:f5:97:53:bc:4a:ce:
91:3a:23:34:ac:6f:d1:12:e8:86:b2:d2:cb:6f:c8:
8e:a8:b6:b1:e0:41:08:25:34:08:3a:65:81:a2:4c:
85:df:5f:fc:a2:a8:67:dc:65:bb:52:d0:9a:dd:07:
ff:a4:d8:de:3f:ad:26:cb:e4:f6:c6:a0:0c:a6:5b:
d6:96:62:9f:01:21:d3:dc:02:08:28:30:e1:8d:3c:
e0:f9:2d:3c:bb:ce:c2:ef:3f:01:71:23:e7:55:b4:
d7:19:2b:9e:3b:df:e8:af:ef:15:77:02:c5:05:aa:
66:37:c8:d3:87:75:35:f1:86:c5:ff:c0:28:87:7b:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DB:18:80:51:2A:DD:95:49:BD:00:B4:48:66:8F:36:BE:34:4B:22
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:52:40:96:3c:d0:2a:ae:84:ea:f5:97:9f:92:37:11:ee:
8c:89:18:2d:7c:d2:69:c7:ab:26:e1:f2:1a:86:92:7d:ca:05:
65:00:ec:6f:7f:1b:2e:b5:ea:d5:6f:98:54:41:43:94:ad:b5:
2c:86:c8:21:90:67:24:ca:e5:f7:ff:aa:3b:75:cd:af:ff:38:
19:70:65:b4:5a:f9:cd:fa:d6:c1:9a:9b:59:eb:e2:30:56:9c:
74:f4:11:16:dd:a6:3c:c1:5c:0d:85:a6:84:40:5c:bd:11:b5:
26:68:2d:7c:21:52:2b:a0:27:4f:1e:94:9c:1a:c7:62:a3:01:
d4:61:5c:ff:1f:23:8b:47:02:0c:39:f7:0b:43:b6:6d:38:a0:
bb:c3:95:12:fb:7d:b1:ce:ba:8d:af:2b:76:b6:be:90:95:4f:
fb:25:b6:7c:d9:86:80:f9:9a:0e:44:18:f6:0c:e9:ce:00:11:
ef:9c:cb:90:43:f8:e6:57:1d:e8:3c:c2:75:fa:07:1b:08:53:
6c:19:47:f2:24:91:5a:b1:3f:35:96:87:67:02:48:33:e3:40:
a8:4e:bd:bb:3c:e4:3d:df:c8:cd:e7:5f:37:fc:cf:f9:c7:84:
32:00:b6:e1:b3:65:96:ee:c4:51:1a:33:19:e6:fc:7a:9e:96:
19:88:53:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystT7klp4KntWmKatXIEnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Njg1MTEwNGE5MjE4ZWZmMTczZjQzNGY1NWJkZDI0MjBh
YWFlMmUwHhcNMjYwMzAyMDQwMTI0WhcNMjYwMzAzMDQwMTI0WjAzMTEwLwYDVQQD
EyhmNWRiMTg4MDUxMmFkZDk1NDliZDAwYjQ0ODY2OGYzNmJlMzQ0YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ExfdwggZZNp27FHHErhvHT5SQTj
O1RKFrQPwW6+4M/eYBsMW6xPHcIqT94SjhYOyivZj1vsSZ6Ibe7NyElJf/H9/IsO
2VD/PB9tZP6iCjFh0fXp/6ZRuYTbDvkEqPafPxcHK9dK/h7n6Sr8RtGPGNTpw4fv
lnmOKg8thCb7aIv1l1O8Ss6ROiM0rG/REuiGstLLb8iOqLax4EEIJTQIOmWBokyF
31/8oqhn3GW7UtCa3Qf/pNjeP60my+T2xqAMplvWlmKfASHT3AIIKDDhjTzg+S08
u87C7z8BcSPnVbTXGSueO9/or+8VdwLFBapmN8jTh3U18YbF/8Aoh3vfpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXbGIBRKt2VSb0AtEhmjza+NEsiMB8GA1UdIwQY
MBaAFAdoURBKkhjv8XP0NPVb3SQgqq4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEt
MDkyZTdhMTZiNzRlLzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lMDFhMjktYzU5Ny00OTc0LTg2ZTEtMDkyZTdhMTZiNzRl
LzEvQjJoUkVFcVNHT194Y19RMDlWdmRKQ0Nxcmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkBSQJY8
0CquhOr1l5+SNxHujIkYLXzSacerJuHyGoaSfcoFZQDsb38bLrXq1W+YVEFDlK21
LIbIIZBnJMrl9/+qO3XNr/84GXBltFr5zfrWwZqbWeviMFacdPQRFt2mPMFcDYWm
hEBcvRG1JmgtfCFSK6AnTx6UnBrHYqMB1GFc/x8ji0cCDDn3C0O2bTigu8OVEvt9
sc66ja8rdra+kJVP+yW2fNmGgPmaDkQY9gzpzgAR75zLkEP45lcd6DzCdfoHGwhT
bBlH8iSRWrE/NZaHZwJIM+NAqE69uzzkPd/IzedfN/zP+ceEMgC24bNllu7EURoz
Geb8ep6WGYhTyQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:29 2026 by rpki-client