Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: uAJ/YCdbDrRrNaz2Kf/pUGsKnB6XIDKJM+4GhoC2PY0=
Subject key identifier: 02:02:C0:5D:41:5C:64:B3:ED:07:16:C5:82:AD:2B:57:72:3A:11:3E
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019CAC7DE4FBAF182E05F15B9C39CE83EA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 08BA
Signing time: Mon 02 Mar 2026 03:00:57 +0000
Manifest this update: Mon 02 Mar 2026 03:00:57 +0000
Manifest next update: Tue 03 Mar 2026 03:00:57 +0000
Files and hashes: 1: KYwLTeDRPbWZ7QruokVrRABez8U.roa (hash: K9pjcDveVnPL9nHRQKLenhV/fjpAku11BgS2kkrYnJc=)
2: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: 0/aF2yOPheesrD/v1syOxxooVDvBNl16bOGW7SamoA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e4:fb:af:18:2e:05:f1:5b:9c:39:ce:83:ea:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Mar 2 03:00:57 2026 GMT
Not After : Mar 3 03:00:57 2026 GMT
Subject: CN=0202c05d415c64b3ed0716c582ad2b57723a113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:10:c1:cb:c0:bb:df:45:f9:00:5f:2a:b3:
4c:f1:79:11:c8:0f:de:d1:90:52:f8:cb:c1:a2:3e:
f9:71:66:10:47:7c:42:c1:a1:9c:71:20:fe:f7:5a:
90:f7:b7:52:c7:67:65:19:84:fc:1e:cc:10:98:3d:
5c:97:e1:ae:84:ef:5c:42:42:e9:9c:94:be:7b:16:
3a:5a:5b:57:5b:69:b6:b3:8e:7c:0c:03:21:67:2a:
c2:e4:b2:d1:8c:73:48:fb:f5:ab:2c:ef:f2:c8:ef:
e4:f5:c9:4b:26:25:a0:5a:60:5b:99:f3:e1:24:ea:
6a:d6:03:1a:ca:64:7b:a4:2c:01:95:63:c9:18:ec:
b3:41:2e:ad:8a:04:c2:8c:06:b6:40:6c:ca:fe:92:
0a:09:e7:64:d2:2f:31:15:fc:db:97:f2:5a:86:ea:
40:65:1f:97:12:39:05:8e:8d:e9:b0:ff:de:01:24:
cb:c1:20:43:f5:6c:62:d1:fd:95:de:2a:62:ae:6d:
0f:94:75:0e:7c:dd:32:a5:33:63:36:f6:e4:62:5f:
c2:12:e3:ba:b0:4c:77:b3:7a:a6:b7:b8:4f:0e:66:
c9:c5:ca:14:da:54:8e:71:f0:18:56:25:3a:2a:fa:
a1:fa:d4:95:40:1a:e4:b9:72:60:cb:47:f1:8a:86:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:C0:5D:41:5C:64:B3:ED:07:16:C5:82:AD:2B:57:72:3A:11:3E
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:51:15:69:63:64:e9:db:af:d9:41:01:dd:97:0a:76:e9:9b:
bd:41:ba:bc:21:c7:14:eb:95:26:9e:d6:b7:83:43:f1:f0:6f:
ae:e2:57:fd:fa:ed:27:81:2f:2b:41:41:5b:e6:21:de:65:e6:
e1:6a:a7:55:56:a2:77:4a:01:11:f0:74:a6:b0:a7:ee:15:7b:
85:59:03:77:7f:65:d5:07:d8:86:11:ab:dc:0f:a1:ea:08:f0:
f0:eb:28:7f:98:dd:11:01:0d:6d:54:b0:46:b7:fc:5b:80:24:
d6:92:10:b1:53:e0:30:c2:0b:ff:ce:89:76:51:d1:c1:37:2a:
ec:4d:41:0c:4a:d5:6c:75:33:47:da:d8:3c:84:76:9b:80:de:
34:95:fb:58:fc:83:e9:43:c4:56:c7:ac:fa:d0:67:cc:8d:ff:
95:43:87:d8:1c:a8:c5:00:13:a2:a7:f7:43:c2:bb:1f:1d:fb:
f5:db:8f:e4:79:52:2d:d4:09:be:5d:4e:31:4d:e2:da:a8:68:
17:0c:c8:42:fd:3d:d6:7f:a9:d4:24:88:f6:d8:b8:53:16:45:
7d:48:a5:88:fb:19:48:3a:50:53:a1:b2:0b:16:ea:1e:16:d7:
c6:89:71:00:21:4b:93:1e:50:5c:d1:81:6e:25:a0:ff:eb:73:
ab:d7:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:17 2026 by rpki-client