Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: iGmAcbHif8KYQL4PhI+CgQMbol1PChLgV9t+a5LMalY=
Subject key identifier: 9C:8F:6D:E0:E4:A2:FF:FA:9B:F4:11:63:6D:AD:85:43:56:3F:95:AF
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 019CACB4A51095E1DB967BD50951CD640361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 09A2
Signing time: Mon 02 Mar 2026 04:00:45 +0000
Manifest this update: Mon 02 Mar 2026 04:00:45 +0000
Manifest next update: Tue 03 Mar 2026 04:00:45 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: 0PZL4X2O4uhfTssjRgrCOYUWteyrHqiPpPS2FX4nU8w=)
2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a5:10:95:e1:db:96:7b:d5:09:51:cd:64:03:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Mar 2 04:00:45 2026 GMT
Not After : Mar 3 04:00:45 2026 GMT
Subject: CN=9c8f6de0e4a2fffa9bf411636dad8543563f95af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:26:3d:4b:ed:50:9f:12:8d:66:f7:9d:ed:2c:
e2:2c:4b:a9:ed:a9:5b:c6:c7:56:e7:b0:5f:dc:82:
b8:a3:5f:83:82:8e:42:a5:09:a3:44:69:08:2f:74:
0c:98:34:31:d7:1b:c9:8a:91:fa:8d:2e:3f:35:31:
03:00:b8:83:2c:1d:f7:ad:a0:a6:29:e8:bc:42:0b:
d4:3e:a3:18:24:12:ea:b5:14:a4:5c:b7:0b:8a:f5:
4b:5f:d9:bf:2b:01:7a:46:e8:da:76:24:79:7a:80:
6f:b1:73:14:6c:d0:08:c8:89:8b:37:fe:3d:53:8b:
62:e1:d5:8e:75:e9:92:26:e2:49:34:7b:37:f7:ee:
9c:f5:ad:36:26:30:4c:5e:83:8b:f3:d0:c8:19:00:
12:e2:72:a3:04:91:88:16:52:fe:c4:50:12:52:73:
cc:5f:1a:31:60:30:21:00:53:1f:74:3e:b8:0a:51:
f8:82:6a:99:fc:04:c0:5c:e0:e0:08:0c:08:bc:f8:
de:97:b2:49:e5:97:1a:4b:46:6c:75:db:d9:64:65:
00:f6:89:c4:a2:b1:f7:3e:df:21:42:25:e3:b0:c6:
e0:64:81:b7:20:06:66:0d:25:d4:28:c9:83:bd:f7:
9c:30:1e:bf:9f:fa:e7:03:1d:f4:ba:56:b2:24:2e:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:6D:E0:E4:A2:FF:FA:9B:F4:11:63:6D:AD:85:43:56:3F:95:AF
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:77:3c:50:7a:1e:8c:58:3c:bc:0e:a8:90:b5:ad:68:02:05:
1e:d0:28:c9:bc:6f:ae:83:c8:e6:91:4f:c0:45:e8:f3:24:fb:
23:30:c3:29:16:db:a9:1d:1a:9c:c3:bf:3e:95:5e:0d:84:9d:
89:85:b4:73:4d:04:99:be:9d:5c:4a:f7:3d:1c:93:1f:e5:6e:
6c:87:be:f0:c8:80:0d:70:74:df:fc:d5:7d:bf:4d:0a:cf:05:
b2:3b:ad:29:fa:a1:ca:f9:b6:24:30:43:a8:c0:00:21:a3:db:
4c:42:2d:00:55:c3:87:12:9e:83:94:53:41:74:58:f5:4a:50:
5c:89:e0:cd:ae:e2:7a:29:b3:0b:05:34:15:ac:87:e2:b9:2e:
2f:c1:97:30:43:b3:51:26:cf:28:91:6b:b1:ac:86:5b:54:ef:
fb:ef:8f:8a:0e:fa:d3:27:69:c9:50:4b:4d:04:3c:8d:3a:af:
f8:dd:de:9d:b7:42:f0:ed:58:3d:c8:16:e9:6c:7d:67:86:7c:
a3:7c:55:b4:65:ee:5b:7f:fe:77:b2:31:88:e4:cc:42:35:82:
ae:62:ae:ae:97:ed:25:17:7d:ec:3a:e1:6e:c6:96:ae:96:51:
1c:0e:3d:52:41:ef:28:d7:0f:a0:a5:26:06:b7:20:60:6c:bf:
41:f4:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:46 2026 by rpki-client