Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: ypY04Rirk828U1USyVLcIxC47+4XWhGXIrN9idwPLq8=
Subject key identifier: 7C:84:02:10:C4:5A:DA:30:6E:65:38:8E:3D:4D:8B:EC:23:04:85:F6
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019D984F7E1EDAF750FDE5C2564A019596FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 0788
Signing time: Thu 16 Apr 2026 22:00:39 +0000
Manifest this update: Thu 16 Apr 2026 22:00:39 +0000
Manifest next update: Fri 17 Apr 2026 22:00:39 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: piTtUOuU9wRUMNnmuElek/0UvkzQ/0+hpA/emBc8HKU=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:7e:1e:da:f7:50:fd:e5:c2:56:4a:01:95:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Apr 16 22:00:39 2026 GMT
Not After : Apr 17 22:00:39 2026 GMT
Subject: CN=7c840210c45ada306e65388e3d4d8bec230485f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:df:35:c1:4d:0f:2d:1d:dc:a9:ec:be:89:
5e:e0:93:cb:03:b0:43:94:fd:2d:92:62:00:0e:81:
e2:db:c1:30:aa:84:b9:c7:38:e7:1b:bb:05:e0:31:
9a:82:67:83:8c:7d:2d:07:a1:f4:17:96:0f:ca:67:
7d:5b:93:5c:a4:4a:b1:46:0f:66:87:bf:3b:d0:ca:
b0:3c:30:68:e9:34:8e:dc:6d:cf:15:08:47:50:40:
a9:36:fd:37:3b:0e:1c:a6:e7:91:30:e4:57:c2:aa:
73:8c:57:54:ef:ed:ec:c5:9d:1a:36:5e:f5:b7:8b:
c5:ba:1d:1c:a5:0c:74:bc:cc:2d:14:59:ac:16:bf:
df:d7:7a:80:d1:d7:b8:06:41:63:f1:c1:d9:39:d7:
1d:cf:b2:15:7e:b6:9d:4a:3e:d4:24:08:f1:37:4d:
36:20:95:38:98:ce:ba:b6:e4:11:67:9d:78:d4:cb:
74:74:3a:9c:f1:22:e6:20:91:fd:a6:15:8a:9e:ef:
8e:d4:7c:1c:a0:a0:f5:06:d7:1f:da:72:fc:22:27:
ac:4f:f8:8a:95:bd:1d:f4:27:98:9a:2f:da:06:29:
26:4c:7f:ed:a1:38:95:db:4c:41:cf:1b:11:65:47:
f6:5e:16:7f:6c:4a:ec:79:23:f9:2a:ac:ea:bb:c4:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:84:02:10:C4:5A:DA:30:6E:65:38:8E:3D:4D:8B:EC:23:04:85:F6
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0e:54:9b:58:30:72:9b:56:ff:f7:8f:d3:a5:15:b6:4d:df:
00:d2:24:03:a1:49:6d:99:47:47:b2:35:a8:e5:4b:d1:9a:e3:
13:6d:71:b8:d8:83:03:78:cb:2b:7a:41:43:4b:db:af:60:7c:
d2:81:fe:e8:a1:88:a8:e1:43:d2:c0:b8:e5:7a:8c:e6:26:8c:
ea:b8:8a:d5:81:ee:39:cb:f8:3d:2a:7e:89:a8:e3:95:d4:fd:
b6:7c:a2:51:35:54:d6:01:ee:76:30:af:73:91:3b:70:c6:8d:
aa:f6:3a:cb:80:d9:d7:d6:8c:8e:02:b9:32:cb:d3:bf:70:3e:
a7:b6:ab:0b:4a:21:d2:a5:03:2a:8e:0a:82:13:49:a4:84:c4:
da:17:68:78:5e:02:bb:38:4a:83:5e:dc:b2:eb:e1:4d:b3:a8:
81:2d:60:d2:06:7b:05:a7:c7:7c:0f:af:35:99:c1:7f:49:bc:
13:89:c0:c0:ed:4a:90:5c:ad:99:9a:d2:37:de:da:97:d8:e3:
f1:62:6e:2a:66:f2:c3:6b:f7:98:89:1b:5b:12:7b:a7:44:d1:
d1:74:3f:28:7d:12:f8:6a:4d:e2:13:3a:86:8b:13:1e:6f:4f:
60:fb:04:bf:fa:b8:c5:8f:00:a1:20:4c:f5:9e:a0:46:b7:6d:
08:49:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:58:12 2026 by rpki-client