Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier: 6MDxl7sj4MlhN9qeCWLB2wePDgJCedUdsB1ZWzukNFc=
Subject key identifier: AE:0C:7B:BE:67:1B:F6:B5:85:F0:6B:5D:F7:15:54:F9:40:33:D2:7F
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 019CAAFD8B4D6A69CC3D63C339F8BDCD8CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number: 0D9F
Signing time: Sun 01 Mar 2026 20:01:08 +0000
Manifest this update: Sun 01 Mar 2026 20:01:08 +0000
Manifest next update: Mon 02 Mar 2026 20:01:08 +0000
Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: zGm23Q5nRShmkCoaf7u9WsrbipWWY744/dXGW6OrCzw=)
2: g8AniT98jgfKG_IB19d9xu2syLw.roa (hash: 7R3vOrjrBzZjR9ZmhYF8VUus96RI5RYOknR8+bpyK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8b:4d:6a:69:cc:3d:63:c3:39:f8:bd:cd:8c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Mar 1 20:01:08 2026 GMT
Not After : Mar 2 20:01:08 2026 GMT
Subject: CN=ae0c7bbe671bf6b585f06b5df71554f94033d27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2b:50:a9:fd:89:7c:09:d6:d9:d6:93:12:e7:
c0:a4:77:ae:43:1e:31:18:a2:d0:08:69:6b:66:ed:
e9:a8:c6:35:af:10:d4:79:73:f4:73:01:a8:74:14:
fb:fa:c1:68:49:d6:06:57:ba:dd:94:b1:01:1e:7f:
b3:06:65:c8:c2:23:c3:6b:97:dd:98:b3:2c:ef:79:
47:cc:0b:15:12:a5:d6:04:3d:be:ad:58:ac:40:e7:
2b:09:d9:ed:79:76:14:d4:ef:36:8c:8b:23:51:17:
f7:2f:a1:2f:db:5d:fb:c1:c4:53:fb:fb:78:f4:84:
b9:06:2a:61:5f:d3:61:5f:70:6f:15:6c:66:91:58:
5b:20:84:70:71:65:74:f9:c8:4d:87:eb:6b:15:bd:
08:ba:94:b5:c4:d6:aa:cf:11:c2:55:d3:0a:65:b8:
ea:ec:06:c0:c6:e9:f8:81:3f:83:59:fb:d7:4a:8a:
06:66:3a:76:46:ab:a8:7d:83:c0:b6:ae:b5:fb:b6:
22:11:56:2d:e1:b1:88:75:a9:61:e7:43:53:4f:6c:
32:46:61:1a:2a:10:9c:40:0c:87:87:52:32:b8:cc:
e5:8f:83:cf:40:37:ab:7d:7b:f3:e6:65:12:ac:78:
33:0f:74:cb:72:c3:fa:f7:c9:07:ed:61:d5:76:67:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:7B:BE:67:1B:F6:B5:85:F0:6B:5D:F7:15:54:F9:40:33:D2:7F
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6b:ed:26:37:56:f1:f9:e6:d1:5c:fa:d7:ba:c0:8d:6f:47:
3f:ac:08:b5:f5:e4:cf:d2:fd:92:d5:c9:07:9a:23:42:27:bd:
77:ee:f2:c4:d0:b5:0e:5f:ca:bc:e6:ec:e6:c0:83:fb:a4:e1:
33:70:69:a5:f0:be:25:61:9f:02:45:03:e9:95:f5:21:8d:d1:
40:d7:e2:4e:e7:81:69:f5:69:60:bd:fb:a5:96:f4:af:a4:0e:
74:01:16:dd:2c:96:fa:eb:f4:63:60:98:03:c4:a8:4a:bb:2d:
29:6e:15:e0:4d:58:aa:98:fd:4a:8a:0c:7a:87:43:30:9f:d3:
4b:68:a1:f1:e8:f6:30:d9:88:2c:ac:a1:d4:a2:53:d1:15:fe:
29:58:16:ee:54:bf:3a:09:a9:1f:d5:90:ae:ff:6f:12:f4:43:
3d:e4:52:9f:14:e7:29:19:01:3d:2e:4a:7d:65:5a:29:51:d9:
e3:9a:d7:79:09:23:02:bf:51:70:8a:0e:d9:d1:27:76:2b:6a:
bf:dc:37:f2:16:c3:88:4b:9a:6d:d7:03:47:5d:f2:a3:48:c3:
98:ed:5f:c5:9c:d1:62:c7:e1:97:e4:52:f8:b6:ce:91:33:fa:
8e:9e:ad:18:57:2e:a4:62:f7:1e:40:2d:1f:65:27:46:d5:22:
cb:cb:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:07 2026 by rpki-client