Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier: iWv3qIEweLhk/hfWlPD4Y9c7pmexysDU7McWM+HhqYM=
Subject key identifier: 6D:C9:55:34:46:02:BD:FD:4E:B7:07:89:E8:A1:16:D5:4F:95:6D:A4
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial: 01A1494EC19EED0086B3932EACF13F76DCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number: 1AA8
Signing time: Sat 17 Oct 2026 10:01:00 +0000
Manifest this update: Sat 17 Oct 2026 10:01:00 +0000
Manifest next update: Sun 18 Oct 2026 10:01:00 +0000
Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: 8FDutAGZOTuBi+TthcPlVCeY/46a2+wDu1hLiJtyq6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4e:c1:9e:ed:00:86:b3:93:2e:ac:f1:3f:76:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Validity
Not Before: Oct 17 10:01:00 2026 GMT
Not After : Oct 18 10:01:00 2026 GMT
Subject: CN=6dc955344602bdfd4eb70789e8a116d54f956da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f1:6a:80:f3:af:1d:7d:aa:b8:68:0a:ce:00:
3a:b7:62:bb:eb:d2:7c:4d:4a:69:88:23:49:53:12:
48:4b:d2:33:20:23:63:d4:1e:e5:01:61:df:00:74:
a2:3e:b3:46:ad:1b:23:75:6a:fe:09:04:8c:d0:e8:
6a:f2:37:af:67:5a:90:8e:fe:36:27:ad:17:72:c5:
94:25:89:e5:f3:43:63:28:ea:2b:4f:7f:f3:73:f3:
31:f7:87:4c:b4:73:55:fa:5f:df:91:dc:23:34:9e:
d8:fe:aa:e7:36:6b:07:d8:9f:8e:78:2f:36:dd:be:
86:de:b5:85:da:9d:d3:e5:63:f3:b3:05:79:65:15:
f2:f7:d4:96:d6:a1:76:02:54:5b:02:4b:9d:fb:c6:
ed:b1:91:0a:bc:1e:4f:46:66:5f:95:d1:97:a2:e4:
29:be:7e:a1:0c:ff:8b:35:46:5c:e1:77:ab:1c:02:
5e:55:b5:9c:5b:f3:dc:5f:b1:54:91:d1:89:88:a2:
63:0e:1c:a6:e9:02:d9:9d:38:4f:8b:7c:09:78:11:
36:e5:6d:71:ff:f9:ff:41:ef:a9:1d:27:6c:30:02:
11:72:8e:bd:06:c7:cd:b9:b5:a1:26:33:ab:05:6e:
c0:66:ed:d8:5d:98:09:92:af:50:99:fb:18:40:41:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C9:55:34:46:02:BD:FD:4E:B7:07:89:E8:A1:16:D5:4F:95:6D:A4
X509v3 Authority Key Identifier:
keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9f:46:72:fc:fc:e6:41:46:f2:a1:75:12:6d:6a:1b:bd:9b:
97:bc:cc:39:05:90:69:c7:d3:c2:3f:b9:d4:ea:cf:99:a8:87:
ba:9e:d9:0d:2d:aa:15:78:06:0d:e2:19:4e:55:d0:e1:93:05:
dd:84:8e:cf:ea:95:b3:e4:c0:d8:5f:ef:b9:bd:a8:b9:f4:f0:
4d:b9:27:fa:05:5d:64:e4:c1:4a:cd:75:e8:f5:94:ef:55:06:
4a:c3:b6:b4:a9:2f:b0:bb:64:51:3a:62:ee:f7:0a:15:83:c3:
86:55:4b:05:b9:17:ac:ab:a3:ed:d5:47:38:1b:10:48:5e:79:
cf:f0:89:1f:7a:fa:20:43:f3:49:14:1b:58:c6:17:74:ee:93:
85:07:9c:32:72:81:09:c7:3e:1f:12:fb:83:8f:39:cc:a8:5e:
1a:7c:51:95:f7:43:eb:9c:81:fa:72:9c:32:51:a4:4d:62:cd:
bd:8e:1c:60:e4:8d:5e:27:15:4a:04:70:2d:79:4f:ce:96:93:
b3:f8:09:8c:c1:c2:6e:7f:19:06:8a:c8:1d:af:51:cb:ac:f7:
f7:7f:45:fb:a8:d2:3c:fc:db:3d:12:50:6a:2d:e3:dc:a8:c1:
7c:e9:8f:5d:b4:dc:59:33:ea:7d:6a:d2:50:e3:d7:7f:93:e4:
a0:26:0a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:21 2026 by rpki-client