Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: MONIe7Lo5QlKTaXGpTeVSbbnvOjWx6yL/bDFEQHqd/s=
Subject key identifier: CF:6F:A5:0F:A1:BA:58:11:EE:1D:FD:B7:30:CA:A2:BD:F7:8F:73:E3
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019CAAC6B1EE9360A296BCDD7FCD2293A71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 070D
Signing time: Sun 01 Mar 2026 19:01:14 +0000
Manifest this update: Sun 01 Mar 2026 19:01:14 +0000
Manifest next update: Mon 02 Mar 2026 19:01:14 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: yjqHFgHSF1jOrYROdIpp+RkxIGJwQ2CJjGZSm+NG9BY=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b1:ee:93:60:a2:96:bc:dd:7f:cd:22:93:a7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Mar 1 19:01:14 2026 GMT
Not After : Mar 2 19:01:14 2026 GMT
Subject: CN=cf6fa50fa1ba5811ee1dfdb730caa2bdf78f73e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:79:97:da:2a:de:c4:09:ef:c0:e4:fa:67:
5b:c6:59:4a:2e:af:0e:30:c5:e7:bc:11:6d:10:78:
cb:fc:61:1e:a6:ef:a6:8a:59:0e:80:5b:03:69:c0:
89:98:93:60:c8:9e:a8:17:18:48:0f:30:b5:63:c6:
d2:7d:b1:e7:7d:cc:5b:18:33:43:ac:7f:93:75:0b:
52:72:2b:00:97:a8:9d:79:90:22:a0:f0:e2:38:a2:
20:e2:40:10:bb:93:70:4a:10:22:94:bb:35:85:9a:
1d:02:9b:37:82:8c:86:45:27:a6:1e:ba:c8:4a:1b:
08:7d:35:12:a2:b5:02:6c:ff:4c:f5:1e:77:8a:ca:
d6:e1:36:80:55:7d:fa:ec:23:48:d8:fd:bd:a4:30:
39:97:83:11:c4:85:84:8b:f9:93:92:7d:58:be:5f:
ae:1f:fb:69:a9:18:05:39:04:15:51:58:2e:bf:2c:
f8:94:79:12:f1:19:5e:80:74:c1:ed:01:8c:bf:97:
85:d4:45:44:38:5e:0c:c4:ae:9f:96:2d:43:e8:c1:
25:a1:c4:1c:99:3c:1a:2b:7f:7c:ae:17:a4:43:77:
03:b9:9a:4d:2f:46:5c:59:cf:c3:45:a1:58:8c:83:
77:39:75:3a:d2:2e:d8:15:99:c4:a5:d5:42:3c:6d:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6F:A5:0F:A1:BA:58:11:EE:1D:FD:B7:30:CA:A2:BD:F7:8F:73:E3
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b4:c0:29:0b:cd:77:48:4e:79:d8:c2:34:45:4d:b4:e9:aa:
62:77:60:b6:5a:ff:2a:31:c5:92:83:99:64:1d:c4:d7:4b:58:
10:62:f5:b9:aa:7f:12:a4:91:81:54:4e:1c:c8:6c:16:f7:0f:
df:d4:d8:ca:cb:7d:07:a3:5c:04:70:1a:b5:d1:4d:d4:fa:49:
86:5c:2d:5e:58:10:de:ed:53:2d:6f:52:2a:ee:b1:b8:eb:47:
92:86:73:aa:c8:bb:c1:b9:2c:e1:4d:2c:ad:9e:df:24:e7:89:
9e:d3:da:95:47:3d:05:b1:d3:2d:3a:97:45:36:83:f9:d2:0e:
2c:c3:17:3e:0a:75:7f:17:86:09:39:7e:98:9e:c1:cc:2d:27:
73:5b:a4:b9:7a:c9:bd:78:d3:78:9d:df:a4:72:63:dd:79:3e:
7b:a6:1d:c0:f5:07:01:10:3c:12:1d:22:3a:5b:ff:76:6d:12:
91:d8:0c:b4:8c:17:f7:7a:40:eb:ae:d6:eb:67:33:71:7c:48:
6a:2a:28:4c:b0:92:7d:c8:20:84:eb:7b:1f:52:88:89:4f:0c:
7b:67:ac:a7:e1:9d:9a:ad:6b:13:fd:f0:d4:8e:e6:81:af:a7:
f5:9c:09:5b:d2:7a:d0:02:78:ee:3e:06:c8:c6:7d:fe:f5:6d:
9b:ed:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:52 2026 by rpki-client