Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: dOeOLeg1p9IjSD7F0PryY7g7OdeVliQGLgRtSCQ9p0I=
Subject key identifier: C6:24:52:D3:7A:47:64:06:70:AC:37:11:BB:50:AA:3A:E9:06:25:61
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 019CAA58D93C833FB1539FB81C5D8DFBFBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:15 +0000
Manifest this update: Sun 01 Mar 2026 17:01:15 +0000
Manifest next update: Mon 02 Mar 2026 17:01:15 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: E/AYapJpBwcCRfb1HKxmHdxxxMkvs4PlRSmQxsIYvQ0=)
2: UiYKZv_nf6g6lMuEagnSGv0kAAw.roa (hash: PTK0hI3EFperuvKBPntydYLK0hdElxooN2h+y17nzk0=)
3: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (hash: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA=)
4: lMQfwH-V7Yhd6sNgC8BpN5Ho3vc.roa (hash: 80PQfjBzEobkUlg1u1KjDZCEtHTRyd3Qm3q0fmEsPoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:d9:3c:83:3f:b1:53:9f:b8:1c:5d:8d:fb:fb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Mar 1 17:01:15 2026 GMT
Not After : Mar 2 17:01:15 2026 GMT
Subject: CN=c62452d37a47640670ac3711bb50aa3ae9062561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:94:35:82:ad:b6:18:a3:ff:85:bc:51:3b:
23:95:86:91:9d:80:99:33:83:3c:10:71:e5:b5:33:
2c:d6:47:7a:58:56:82:73:78:eb:dc:b1:95:cf:f6:
ae:7a:f1:bd:d4:8f:24:b6:bc:80:f6:a3:72:e3:9b:
46:cf:33:82:b2:ce:2e:b7:14:4b:d0:10:7a:6c:85:
6d:1b:3b:d4:d0:e6:5a:5e:11:3d:27:dd:0a:fd:e1:
da:9d:22:33:58:07:f6:f0:f6:18:7e:49:23:d4:05:
ea:e0:96:00:f7:53:48:c1:8d:64:9f:c5:c2:92:4f:
39:21:7f:06:7d:ce:d2:e1:f7:94:5d:31:c3:95:72:
e1:00:37:d5:12:8b:fa:d0:00:2a:38:7d:fd:40:e5:
28:db:29:7c:55:bc:9c:9d:24:04:02:c5:0c:70:eb:
cb:73:a6:58:2f:e4:4b:57:ef:ca:62:a2:b1:9d:5a:
b9:c0:62:e8:35:79:4e:ad:df:97:0c:9e:0b:87:98:
63:86:39:bd:ad:ec:f4:37:7a:84:d1:8b:50:3d:3a:
0d:b7:3a:cc:82:92:c9:f2:b2:f9:08:38:f9:41:dd:
a0:97:50:1e:ff:ef:32:40:0c:b6:89:36:10:b9:70:
47:f5:b3:98:9e:a0:1a:c4:8a:6b:55:8e:3b:95:21:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:24:52:D3:7A:47:64:06:70:AC:37:11:BB:50:AA:3A:E9:06:25:61
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:19:b2:3b:95:db:f9:e4:4e:6a:22:2b:97:b1:d8:e4:90:6b:
09:09:8e:9a:cc:ae:2f:1c:7c:96:ce:11:af:ff:0d:19:34:48:
e5:91:d0:0b:c8:44:05:3e:9d:3a:95:60:23:fc:a9:b4:8e:3c:
50:69:01:d9:9a:78:c2:18:33:6a:d9:33:df:a0:ed:15:33:fd:
8a:c4:79:11:d0:e6:53:6a:2d:bd:88:64:ad:9e:1b:09:ac:03:
d0:79:56:d3:e2:29:4a:56:12:44:a0:33:d0:92:74:c0:fd:00:
6a:23:cd:75:17:d3:be:59:d2:00:9b:fc:d6:1c:c7:51:08:64:
cd:10:6f:e2:6c:06:3f:fe:4c:60:36:49:87:7f:38:56:20:50:
21:ff:f7:1d:a5:ac:b5:f4:74:78:08:7b:7d:05:7b:21:75:ed:
91:4c:97:5f:5e:32:ae:1d:ce:93:b2:ca:43:35:fb:fb:a8:06:
ae:8f:db:f6:16:4f:8d:2c:4c:06:b6:2c:06:1a:bd:00:06:69:
6c:50:a0:d4:02:75:80:f0:0f:6d:b7:cd:da:79:b6:b5:c8:c4:
be:f9:23:23:3b:92:e0:49:24:3a:0c:df:6b:df:b6:07:8c:15:
c0:c3:05:19:1f:27:8f:98:07:c3:57:bf:68:fa:d2:88:b0:f5:
2e:b7:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:44 2026 by rpki-client