Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: QIpUVaZuR4c6wF4MVoWmmKNM2F+SPTfImLiKJkvIK7U=
Subject key identifier: BE:75:0F:84:14:7B:37:47:00:4E:C9:5D:7B:81:64:3D:1A:01:01:B1
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 019D9A3EDEE76B19E21C6428E78C5ABB08EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0A1D
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: QMZk8vGV1+zgcav/pVXdqp6mgKTlDk3NgqEvWICyDik=)
2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:de:e7:6b:19:e2:1c:64:28:e7:8c:5a:bb:08:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=be750f84147b3747004ec95d7b81643d1a0101b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:44:1f:18:80:f4:92:6c:56:65:28:2f:85:
c1:88:99:4d:22:3e:40:7b:e4:e0:0f:f5:43:22:0c:
03:7b:a0:ae:8e:60:b9:3a:8d:f7:bd:4f:ee:4e:38:
3e:77:30:4e:77:e7:59:5f:22:e9:1d:3d:e8:2c:24:
ef:12:1e:b5:f2:34:87:ec:21:c9:96:9d:2f:32:f3:
e3:6a:ed:12:30:8e:e2:ad:c7:37:1c:b6:91:8d:12:
5a:e2:89:c3:29:1d:2c:c1:bb:17:90:f5:81:5d:35:
17:59:36:4a:97:ff:0a:ba:eb:40:a5:3f:82:e6:b7:
f7:5f:f3:57:07:c6:ce:55:0c:be:e8:27:d9:0a:72:
ae:ac:0a:87:e9:22:08:3e:86:71:59:12:38:db:80:
7f:de:79:83:58:e9:2b:58:43:51:c5:cb:1b:a5:12:
96:6e:23:8a:aa:49:d5:8e:53:9f:eb:b9:34:6f:cd:
63:07:a4:bc:f5:c0:e4:53:a5:1c:de:b2:06:9f:b6:
5b:2d:bf:62:03:9a:6d:01:c7:e6:3b:9f:bd:aa:04:
6e:90:71:30:31:76:af:d8:be:e5:a2:7b:2a:49:a8:
db:c0:02:9d:e1:ec:14:b5:32:03:38:5a:b8:f7:34:
9a:c7:61:47:45:a3:90:19:1a:c1:fc:ba:a5:03:83:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:75:0F:84:14:7B:37:47:00:4E:C9:5D:7B:81:64:3D:1A:01:01:B1
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:13:c4:f9:9e:84:43:5e:1c:1c:d5:ab:6e:b5:21:2e:0a:63:
2f:ed:2d:68:9c:c5:08:5a:8a:36:e9:da:a6:9e:13:c6:3c:42:
06:04:01:a4:44:6e:17:ad:89:ae:1f:84:ca:b3:02:25:cd:db:
7e:53:0a:d1:67:2d:a4:35:0f:47:18:13:a3:10:c5:94:11:4e:
c4:8a:45:21:18:6f:c2:f0:60:70:72:03:6c:96:e0:a3:62:45:
90:3c:36:73:7c:0b:cf:65:3c:ca:39:1a:2c:a3:73:2b:ce:52:
80:59:d9:36:26:e2:e3:4b:c3:ac:9f:38:c3:cf:c8:fc:71:e3:
d0:7e:9b:51:c7:c8:3e:a0:50:51:b3:38:65:70:8c:05:2e:d9:
59:5c:05:d0:f3:f8:31:1a:64:25:f6:ea:7d:d2:aa:b3:a8:74:
05:5c:d2:c6:5b:e9:17:d4:05:58:4a:e9:ff:7d:05:61:c2:0e:
9c:50:e2:94:7c:11:18:4f:8e:1c:f0:17:f0:97:b8:36:ef:28:
c1:95:c7:6d:75:be:4e:cb:b0:62:05:50:6d:49:59:85:08:02:
d6:18:26:5c:e9:51:17:fc:b2:90:98:0d:df:e5:fc:0d:fa:49:
38:c7:7c:6e:e0:b9:82:6d:2d:f9:2d:57:2e:43:d6:4a:49:97:
03:c6:66:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:52 2026 by rpki-client