Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
File: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft (raw, json)
Hash identifier: 6OVQv2dSTxJuihSfsC+7B6E02HKFyg4AqbyycCHLDL4=
Subject key identifier: 00:9B:8E:75:DC:98:83:A3:0E:5A:DC:2F:F5:4B:7D:98:ED:E8:68:56
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Certificate issuer: /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial: 019DA4C1C674142E56C0DABE3E8B5C77BA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
Manifest number: F1
Signing time: Sun 19 Apr 2026 08:00:55 +0000
Manifest this update: Sun 19 Apr 2026 08:00:55 +0000
Manifest next update: Mon 20 Apr 2026 08:00:55 +0000
Files and hashes: 1: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl (hash: cXMwQskG5aZYbEEP97oESo2e5yDbXnH9MEohhGZLhTg=)
2: M3cij6CcBvj7hcRt6vLnIO0jqfM.roa (hash: Nx+0gfLrWoVhxt8BGvvUFMWp0qwsFwKGJrVnSSE/5Yo=)
3: ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa (hash: IfrPVXvXZXPI5Bs8Ll1fYOxjNpHmlPmR4BZz8+zT3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:c6:74:14:2e:56:c0:da:be:3e:8b:5c:77:ba:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
Validity
Not Before: Apr 19 08:00:55 2026 GMT
Not After : Apr 20 08:00:55 2026 GMT
Subject: CN=009b8e75dc9883a30e5adc2ff54b7d98ede86856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:ef:36:29:fd:ff:f4:d6:bc:6a:44:ae:c7:
16:4d:6b:95:c3:7c:aa:6f:08:0b:92:c4:34:8a:bc:
1a:48:66:68:ae:d8:c3:de:b9:70:c9:bb:2e:4d:c4:
62:2f:ef:f6:64:71:07:db:a6:46:6a:c9:b6:b2:22:
2c:5e:2b:8d:16:e6:ec:68:93:e3:76:57:da:40:d6:
49:27:ec:37:72:99:e7:60:e3:af:34:8a:91:ea:9a:
39:89:d4:ca:6d:92:73:15:f1:2a:ee:c9:06:b8:d3:
95:d0:27:17:a1:9f:0c:c9:b1:86:ac:e5:d5:62:31:
0e:c1:10:76:34:9f:ae:ee:a2:b2:fb:c8:cc:47:b7:
57:e5:cf:93:1c:db:60:3e:89:ab:2c:90:25:55:73:
0b:71:f6:7c:e5:15:4f:ce:45:7f:bb:f0:5f:0d:92:
b4:9d:70:8b:ea:8d:ab:99:f6:33:ed:21:bd:f0:a9:
63:5d:88:67:5b:1d:99:1d:46:22:b0:27:a4:0c:94:
bb:9b:b5:9a:06:52:c6:9d:1e:32:98:eb:49:21:a0:
c4:d3:b5:96:1f:20:54:f8:2c:5e:9c:f3:87:d1:de:
3d:1a:ca:f2:eb:0f:b6:fd:a9:21:0e:a6:b6:d9:99:
c4:21:49:56:d0:5e:89:fd:27:7b:3a:e7:e8:44:22:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9B:8E:75:DC:98:83:A3:0E:5A:DC:2F:F5:4B:7D:98:ED:E8:68:56
X509v3 Authority Key Identifier:
keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b9:f1:e1:e6:cb:2d:02:f6:e3:bb:d0:5d:72:bb:2a:ba:44:
dd:ae:4f:a6:e6:18:3f:f2:32:2e:6c:6e:36:79:b5:4c:d0:79:
05:af:0c:02:ae:c7:e7:c1:50:4e:34:ff:09:ed:dd:71:36:be:
5e:fa:12:fe:43:5c:b3:2f:ae:b0:2a:21:f9:50:4d:5e:65:36:
f4:c8:b3:79:73:e0:42:9e:52:15:fb:8b:a7:a7:02:79:b7:74:
93:63:92:e6:dd:25:48:4a:1f:31:fd:5f:55:28:01:ec:a7:0b:
56:e9:28:9e:9d:08:2f:ab:82:5e:a1:d1:b8:33:37:d7:c8:7f:
36:34:f8:7c:49:0f:b4:07:38:2a:4a:5d:b3:69:7b:3e:c1:60:
28:37:c8:d0:31:de:cc:92:1b:97:81:39:41:17:29:c5:2e:3f:
21:8f:9d:7b:ca:c7:f3:eb:af:0c:d0:12:a3:09:a4:92:2e:b4:
c7:07:92:2b:31:fc:45:dd:bb:d1:52:25:64:3d:73:f5:0a:f1:
4e:cb:64:3b:1c:83:c0:47:b7:9b:cb:50:e2:67:16:98:60:78:
70:fb:c3:a1:65:a9:12:f3:b4:19:67:52:4c:a0:db:29:38:fc:
80:c8:b8:c4:a1:71:68:35:91:68:fc:8e:0b:ea:f3:7d:3e:0f:
1b:6a:bd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:03:51 2026 by rpki-client