Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: hrXNKG6rzNoQZch5RW3Krbl6+Az1hmgH6CbISjfdnuo=
Subject key identifier: 40:4E:8B:21:37:3C:EC:C8:C7:F2:A2:51:44:0F:51:05:E6:93:9D:D2
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 01A0C3D6A6C2F66E54AA369D89AEB719C1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 12:00:19 +0000
Manifest this update: Mon 21 Sep 2026 12:00:19 +0000
Manifest next update: Tue 22 Sep 2026 12:00:19 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: Kd9Wz5Ku8YspB5Ql+w8vVzIfIXT0i0N1FaDn/lhflLY=)
2: sIMIn1dJinS_QNCqRZ3sAyP03Ys.roa (hash: wj+8SIZf3ByO3mjHkql3d5okITDClOtvY8eSZHJh2bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:a6:c2:f6:6e:54:aa:36:9d:89:ae:b7:19:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Sep 21 12:00:19 2026 GMT
Not After : Sep 22 12:00:19 2026 GMT
Subject: CN=404e8b21373cecc8c7f2a251440f5105e6939dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:1b:bc:06:9c:71:27:56:0d:dd:d8:1e:54:
02:1d:d2:39:01:bc:dd:11:db:74:e5:6d:76:15:26:
61:30:83:ff:34:91:c9:a9:68:0a:75:d9:3c:2b:e5:
01:82:e6:b7:3e:37:28:e5:e9:8a:8c:50:69:b7:de:
74:fc:f1:1f:0c:52:d2:10:d8:bd:d2:2d:8e:f1:e6:
a6:3e:5e:06:6e:3d:6b:1b:8a:20:9d:33:69:c0:31:
61:51:a2:92:d1:7c:c9:b6:9c:18:9b:de:10:a8:35:
b0:85:27:ac:46:0b:5e:6b:42:22:fc:22:54:b5:e4:
1e:1e:8b:15:74:9f:76:6e:13:92:c3:9e:36:65:ec:
77:5c:ce:6e:4b:ec:1e:22:c7:25:d5:5a:0e:ec:c1:
9a:b9:c5:b6:08:68:b6:95:80:e8:26:23:7b:b1:e3:
34:58:b7:a8:6e:d3:3b:35:56:09:5f:bc:ce:a8:e2:
18:9c:78:9a:ec:09:b2:39:0e:6c:c0:35:1e:90:ca:
70:c0:fb:1b:a1:df:8b:24:52:b5:24:94:89:b6:37:
96:06:f6:fa:d4:bc:21:e0:c4:05:19:21:1b:7c:af:
d6:99:9f:59:43:db:b4:47:9e:a5:ce:73:94:e8:b2:
3b:52:76:5a:bd:c3:43:79:ed:48:7d:ab:20:d3:94:
bb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4E:8B:21:37:3C:EC:C8:C7:F2:A2:51:44:0F:51:05:E6:93:9D:D2
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:69:d8:34:43:7b:a4:46:5a:d4:f6:e3:6a:8f:ce:0d:f9:22:
15:e5:e7:33:6e:f0:53:a9:86:cb:0e:7a:70:28:17:03:d7:37:
08:ee:21:1b:f9:83:95:4b:a0:f0:df:36:8b:af:06:40:00:fd:
c3:1f:aa:3a:7c:8c:59:25:9b:4f:c6:79:a0:09:9e:66:25:53:
5f:b2:6a:a7:65:9e:3f:c2:f7:cb:ef:d1:e8:e2:23:b2:0a:b4:
0f:46:86:db:73:d7:ad:84:8a:c4:a6:62:d6:25:e4:98:6e:6c:
b4:43:d1:6a:56:20:9b:bb:c9:2a:1e:12:4d:a8:81:c7:31:dd:
9c:b0:4e:01:b7:ad:40:b8:a5:28:c3:9f:ac:09:05:48:04:62:
d6:35:4d:4f:d2:5f:32:3f:4a:e4:ab:af:b2:62:66:58:56:e8:
fb:0f:cf:43:ce:a3:1a:13:13:1b:e5:c2:a9:87:11:9f:a3:6c:
ae:4c:6e:9b:bc:77:82:eb:33:e2:c2:b9:ef:78:3e:62:2e:b9:
20:4e:f7:7c:06:01:f5:24:e6:9d:c8:43:1f:c1:27:17:36:6f:
08:62:22:da:a9:2c:63:34:4d:4b:b7:2f:5a:3f:27:b0:67:76:
db:c6:ff:46:e8:f1:4b:25:c7:5b:5a:67:26:37:55:58:f7:e3:
be:4b:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:08:58 2026 by rpki-client