
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: gs5JSH5ORIV3PBiFzLK0R/sBuqhyzl42jTrXiYNhuTs=
Subject key identifier: 47:B8:8A:D9:03:43:19:4B:73:4C:3A:BC:6A:06:1F:C3:16:6D:44:D5
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 019CAC476279426A344B782BF822C342D5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: 04ED
Signing time: Mon 02 Mar 2026 02:01:25 +0000
Manifest this update: Mon 02 Mar 2026 02:01:25 +0000
Manifest next update: Tue 03 Mar 2026 02:01:25 +0000
Files and hashes: 1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: NClWManlK/Rq5EIHtr+piPh3Dc+uydbAjlqMwK1IWr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:62:79:42:6a:34:4b:78:2b:f8:22:c3:42:d5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: Mar 2 02:01:25 2026 GMT
Not After : Mar 3 02:01:25 2026 GMT
Subject: CN=47b88ad90343194b734c3abc6a061fc3166d44d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:26:d9:48:09:46:ce:23:ea:35:0b:b6:fb:
36:52:58:d2:62:88:ab:8d:7f:5e:52:e1:57:be:ac:
1d:3f:2a:17:32:47:ef:b2:1c:f8:3c:23:ee:78:29:
b6:f8:dd:a0:a7:4c:de:2a:c7:03:33:f0:05:57:e2:
b1:1b:b2:65:1d:0d:ad:c2:ad:82:79:65:b1:1d:7d:
e0:6e:5e:c0:0c:3a:73:7f:79:b9:31:75:ed:0a:c9:
1e:73:00:a1:8a:74:42:43:c1:76:f8:1e:03:50:5d:
13:57:1d:61:2b:02:83:76:cc:5a:ba:4e:b5:03:b2:
8a:75:07:de:20:3e:ea:57:26:f0:1b:0f:67:0c:3f:
ca:e0:63:33:22:f9:1b:37:c0:fe:56:e5:a4:ad:5f:
a4:7e:63:69:ee:e2:1d:9c:dc:ac:5a:7a:6c:65:16:
32:8a:d0:94:49:c7:00:e0:e2:8c:8f:d4:25:ba:ad:
0d:2f:2c:65:da:a4:dc:f4:92:73:e8:32:ad:4f:50:
cd:74:bc:b0:81:af:95:fe:4e:37:e3:da:51:a6:b7:
86:88:c1:04:73:a3:95:72:0c:23:ee:63:d0:39:f6:
f7:32:98:ce:93:92:ca:4b:0a:4d:7c:38:96:d5:bf:
0d:42:81:42:ca:6a:9d:2e:40:ba:07:df:69:89:3f:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:8A:D9:03:43:19:4B:73:4C:3A:BC:6A:06:1F:C3:16:6D:44:D5
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:de:32:d8:fa:0f:46:00:38:c7:3c:d3:67:a9:b2:f7:6e:51:
99:55:ae:7c:c3:13:50:9b:47:bb:a5:cd:9a:e6:51:85:f7:25:
f4:17:1f:b8:c2:6a:07:18:d7:30:20:f7:42:ea:ed:a8:13:d7:
75:15:8d:d4:35:a7:d2:30:35:d0:1b:fd:41:5c:4e:59:17:8b:
e5:ee:f5:5e:9b:2d:ba:e9:57:e3:8e:37:90:bc:a7:35:78:9a:
74:b9:ca:de:43:33:42:ef:f7:e3:a8:32:87:46:43:4e:1f:6e:
8e:7d:c2:28:e2:5b:d8:22:ae:c7:85:a7:27:19:3b:c6:2e:a3:
43:07:76:a6:b4:fd:c2:16:5c:1b:2c:e0:5f:27:06:f1:44:d0:
12:d6:4e:66:3d:ce:2f:a9:fa:3e:f6:ba:3d:1c:b2:76:9b:25:
37:69:6e:a4:36:39:5a:ba:d4:52:2c:cc:73:d3:f7:9d:f9:4b:
b5:98:f0:72:fd:d8:7d:b5:73:0a:9e:ed:23:ee:6e:af:4c:08:
ec:24:51:72:21:b2:64:2d:2c:0c:fb:31:82:08:c5:bb:dc:fa:
15:ba:06:65:a4:dd:2b:b6:80:50:77:aa:e0:6c:33:98:1a:7c:
2b:99:88:79:65:5a:cc:1c:fb:a4:c1:55:ce:ed:32:04:42:7d:
17:f7:e2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:12 2026 by rpki-client