Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: cKu1MBjmtOU1b6QXpV1+pchjhKQvN6FUdAzS8u4rgoM=
Subject key identifier: 6C:7B:91:98:25:AB:11:97:30:F0:F3:39:38:10:01:1B:64:96:84:E2
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 019CAD22C37DBC5A3266F0656DD693D41075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 171E
Signing time: Mon 02 Mar 2026 06:01:02 +0000
Manifest this update: Mon 02 Mar 2026 06:01:02 +0000
Manifest next update: Tue 03 Mar 2026 06:01:02 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: 1DUc/ubeGhW9BeFM8VhwWHe2A645YNiZqg38EhWVpvQ=)
2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c3:7d:bc:5a:32:66:f0:65:6d:d6:93:d4:10:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Mar 2 06:01:02 2026 GMT
Not After : Mar 3 06:01:02 2026 GMT
Subject: CN=6c7b919825ab119730f0f3393810011b649684e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:4f:8a:2a:a9:f5:88:57:1f:62:ca:98:47:
17:b5:bd:d6:8f:4a:96:ac:21:50:64:6e:f9:1c:cf:
8c:bf:79:8b:31:17:42:31:80:67:29:9b:96:2a:3a:
96:c8:32:29:d3:27:a7:7b:e7:28:6f:fb:07:58:2e:
6f:49:47:5d:10:e3:f9:ee:64:07:8d:98:a2:33:c0:
5d:65:f4:50:f3:66:a6:b2:e7:ed:5e:ff:27:dc:e6:
a3:57:43:7b:15:d4:63:15:56:dc:f3:0c:30:32:83:
8f:19:70:5e:2c:53:98:ac:3a:9a:2c:ee:58:a3:61:
28:55:e2:5f:6e:7b:10:2b:c7:b4:6d:7e:86:3b:99:
b2:c7:a1:85:20:24:1f:5e:3e:d6:78:ba:89:0a:0b:
04:15:d1:0d:27:68:d0:8d:0a:99:ea:63:87:e1:f1:
e8:8f:19:73:b7:a1:b1:e6:cf:e2:6e:34:7f:32:e0:
7f:a9:11:8e:1c:a0:17:60:88:19:f8:0e:71:53:38:
3d:ff:69:53:40:d0:45:46:b3:6a:15:82:96:bd:59:
38:d2:48:1b:37:ea:e9:63:75:16:c8:da:ae:3d:64:
f1:be:86:e9:54:ff:60:fb:11:f5:88:72:14:c5:c3:
ba:5d:d8:b6:ea:0d:5a:f6:42:e8:e1:64:86:47:bc:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7B:91:98:25:AB:11:97:30:F0:F3:39:38:10:01:1B:64:96:84:E2
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:19:7d:c9:0a:5b:0c:b0:aa:27:14:eb:f2:3d:22:40:3b:71:
3e:90:a5:e6:6f:67:e7:23:4a:78:11:06:94:f1:30:fb:3c:3f:
a8:eb:9b:3c:fc:88:13:f8:30:ea:1d:32:7d:4c:76:1c:f9:3b:
76:f9:1f:08:f0:a7:65:17:82:55:df:8c:96:c0:b6:3c:7f:40:
76:5d:a2:05:bc:e6:e9:d9:65:34:9b:59:85:ed:ce:77:0a:ad:
63:f9:51:ac:8b:4d:69:12:bc:f4:23:c4:33:7a:c0:75:a7:63:
2a:da:cf:00:bc:81:b6:55:93:d5:38:8b:0f:d9:76:16:59:21:
44:09:c1:dc:ea:0e:4e:bc:2c:6a:99:1d:4b:60:6e:0c:70:63:
e1:01:91:cb:48:c1:e1:2f:79:a8:7a:6e:c0:73:91:2e:22:a8:
6b:f8:51:e5:70:c9:5a:90:73:e8:8d:39:69:d3:4d:17:99:15:
f8:33:6e:44:97:37:1a:48:3e:97:24:b9:fa:2f:82:24:32:ed:
44:6c:01:32:a7:de:1f:d2:c7:2e:98:2a:66:8a:d1:64:52:b0:
d0:6d:42:52:c3:cf:27:9c:e0:85:cc:30:21:8f:19:e2:61:c8:
00:4f:62:bf:d4:88:46:21:97:e9:3a:c6:22:d9:87:ef:69:e3:
1c:ed:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:04 2026 by rpki-client