Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: KZLjGyUE3EcnMPRzvbBXPs50oFV3UJp+ROSmt9E7d4Y=
Subject key identifier: 51:C4:B5:04:51:A5:3C:D9:ED:60:F1:7C:EA:21:BF:3E:BA:06:1C:5C
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019CA9461FB6F77A626B299A6828CE5D6A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0EC9
Signing time: Sun 01 Mar 2026 12:01:10 +0000
Manifest this update: Sun 01 Mar 2026 12:01:10 +0000
Manifest next update: Mon 02 Mar 2026 12:01:10 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: 05Ax0WhK/vMaGZByFn/SEbOkxEfM41Q4Y+1JHVZkAoo=)
2: PCSAe779gtpQ1Sa05bIdrwV78eg.roa (hash: 1GxEJL4LImItt+ibKMd5aWwhrXtd/cVEdDLJESE/oBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:1f:b6:f7:7a:62:6b:29:9a:68:28:ce:5d:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Mar 1 12:01:10 2026 GMT
Not After : Mar 2 12:01:10 2026 GMT
Subject: CN=51c4b50451a53cd9ed60f17cea21bf3eba061c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:7d:56:94:4e:cb:c8:d2:3b:82:3c:1f:81:
83:97:33:70:65:73:40:fc:18:9c:9f:a5:17:97:a1:
ab:0b:42:d9:aa:b0:d0:fc:65:cb:54:a8:3e:a7:b6:
df:1d:6b:9f:09:14:f2:a2:3d:13:7f:3d:14:46:2a:
6d:65:cd:84:a5:f2:e1:5a:9b:46:53:50:0b:80:81:
7e:64:11:e3:d2:4d:a6:50:65:51:a1:50:be:e2:64:
ac:29:b3:8b:97:2b:53:56:ab:d0:87:b6:94:45:eb:
da:dd:07:02:c7:81:d0:c5:b9:52:75:33:1b:82:76:
47:e4:02:81:1b:be:9b:c9:73:06:cf:8d:8a:cd:a5:
e9:80:32:c2:37:a9:4d:29:ba:55:c2:42:0b:b8:a0:
94:9a:56:16:fc:b5:14:73:90:83:52:1e:03:85:a5:
a6:ac:88:1f:1e:ae:ad:6e:b7:05:91:b9:9e:2a:15:
a4:bb:91:ce:80:e1:27:89:99:64:47:05:0e:34:5f:
0d:06:d8:89:ef:82:1e:85:e7:87:38:44:27:94:bb:
05:32:50:5c:31:06:ec:d1:3e:b1:09:59:ca:40:39:
78:c4:a6:03:62:4a:e9:14:b4:24:a6:c1:0f:34:08:
ff:ed:0c:82:ad:aa:57:b9:ad:a1:e8:28:dc:11:29:
5a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C4:B5:04:51:A5:3C:D9:ED:60:F1:7C:EA:21:BF:3E:BA:06:1C:5C
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:99:06:d4:96:69:9f:43:f4:a7:03:6a:a5:b3:f0:ab:d7:97:
15:d9:73:bb:db:0e:fd:7c:18:1a:10:d1:c6:88:74:e0:19:1b:
38:cb:23:cb:30:fd:ad:43:f3:62:c2:17:3a:4a:3c:9d:6a:65:
0b:22:f1:a6:eb:99:6d:b6:86:fa:ac:6b:5c:5e:91:79:79:44:
11:6c:67:ee:f9:ce:7b:c9:50:dd:e3:01:f3:74:72:a0:e2:c7:
c7:eb:da:92:af:a9:f9:b0:99:40:81:c0:c7:31:d6:df:6b:a2:
eb:7c:d0:43:90:fc:7a:b9:a9:0a:c7:d2:98:c0:cc:44:5b:11:
7c:3e:3f:e2:13:a2:c9:1c:f7:59:6d:e8:69:4d:08:18:e0:53:
41:f6:03:c1:c1:ae:7c:0b:b6:92:7e:f6:fc:90:93:ab:f1:3f:
29:ad:77:5d:d3:43:d6:a1:e6:1a:11:e5:59:14:8c:9a:04:77:
18:bc:5e:18:25:28:c1:a5:94:c8:52:3d:62:b2:ea:15:fb:c7:
5f:ec:c6:11:1b:e0:54:25:83:22:87:46:32:c0:79:28:33:b5:
77:e9:34:07:4a:65:4c:30:7b:0f:42:cb:c2:77:4a:cd:ec:a4:
1d:94:94:71:5c:61:41:31:56:8d:f4:4b:14:5d:56:8a:ba:3b:
7c:a0:e1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:56 2026 by rpki-client