Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier: 5jXy6ik6xE6/SBzSX+b9M3972mSHvQc3eSVeTqKyDOM=
Subject key identifier: DE:0A:3E:C8:64:21:F6:B4:AA:51:EC:70:6E:F9:5A:5D:8D:91:FD:0E
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial: 019F19434FDAE63362F5C80D0CC7474876F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 16:01:09 +0000
Manifest this update: Tue 30 Jun 2026 16:01:09 +0000
Manifest next update: Wed 01 Jul 2026 16:01:09 +0000
Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: D8I0fupSnFyGWafUXVHKAMz9w+BG4R3xqChZnN53c/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:4f:da:e6:33:62:f5:c8:0d:0c:c7:47:48:76:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Validity
Not Before: Jun 30 16:01:09 2026 GMT
Not After : Jul 1 16:01:09 2026 GMT
Subject: CN=de0a3ec86421f6b4aa51ec706ef95a5d8d91fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:94:f7:22:a4:a7:51:94:aa:68:1a:d0:55:51:
98:3a:0a:b5:e9:f8:ba:54:2e:f0:c8:05:a4:a8:df:
8c:5e:45:19:dd:1a:49:6a:8b:af:9d:f4:c0:e9:e0:
19:e7:d1:f7:5f:94:f8:9b:fe:a2:f7:a7:29:23:9a:
3e:82:5d:cf:70:b3:af:bb:c8:c6:f7:91:05:bd:62:
48:1f:9a:a8:23:ae:43:4a:7c:c8:fb:83:50:62:5b:
c4:88:16:87:2e:a8:5c:10:26:04:1f:e8:ca:b4:73:
05:cd:1c:0b:3e:b8:b1:7e:43:c8:c9:e3:7f:98:f8:
18:e1:3c:40:8c:2f:f0:f1:4a:d2:41:46:0c:fe:1e:
3a:2b:69:28:d9:ef:e9:ca:cd:aa:48:e0:eb:94:f4:
6f:c9:17:4e:d0:2c:30:37:b2:56:4d:59:f9:c9:f6:
91:b0:df:7d:40:66:78:25:96:9a:e7:61:83:40:11:
36:76:a7:7a:d8:57:4d:b6:0b:0e:6f:7d:c8:f9:d0:
34:6f:f7:d8:df:9b:b9:d7:86:11:80:3c:70:84:df:
e4:74:a7:3a:b5:16:d7:9c:56:86:f9:06:01:82:b4:
ef:56:3d:79:be:7e:d9:42:18:a5:02:29:17:de:af:
17:3d:a6:a3:15:55:76:fc:b7:42:39:b4:7b:58:e5:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:3E:C8:64:21:F6:B4:AA:51:EC:70:6E:F9:5A:5D:8D:91:FD:0E
X509v3 Authority Key Identifier:
keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:db:0c:fa:54:ad:fe:ac:72:e4:88:5b:f9:16:63:ff:4f:ce:
92:18:eb:d5:6f:4f:e3:e1:59:ef:17:c5:a5:e4:09:f1:d6:14:
6d:e5:3a:ba:7b:04:7f:9a:ba:07:fc:3d:a4:95:54:65:39:6a:
eb:86:77:42:63:be:eb:d4:0a:47:9c:87:09:06:f3:cd:cb:e3:
62:fd:0d:14:20:dc:db:aa:33:98:86:a1:25:08:8f:5f:ce:f5:
22:86:ac:99:0f:a0:e2:7d:91:70:2c:d5:7d:b8:25:e7:f1:94:
60:13:6c:17:5d:8c:ce:ea:82:bd:cb:60:4c:d8:d0:ad:04:9d:
a4:02:b8:5f:40:41:b0:ac:2a:4b:a2:4a:f2:2f:f9:8b:d9:48:
65:eb:eb:16:4b:7f:2c:5f:0f:68:b1:d2:49:b3:0a:82:7b:b3:
f1:62:0d:48:c1:87:80:9c:5f:6f:60:e9:1e:50:68:49:bc:67:
db:50:88:01:46:0d:98:8f:e5:a7:43:f3:10:ad:22:70:39:da:
f6:c0:4a:30:bf:09:0f:ef:15:c4:fd:a8:28:71:c8:b0:70:18:
5e:fc:e2:23:0f:8a:02:7f:78:6b:c4:76:db:f0:2c:7c:41:bf:
33:32:13:79:b6:d7:3a:9f:79:da:a9:d4:b6:7f:b2:60:e4:1c:
7b:d6:6a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ0/a5jNi9cgNDMdHSHb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk
Y2YwMjgwHhcNMjYwNjMwMTYwMTA5WhcNMjYwNzAxMTYwMTA5WjAzMTEwLwYDVQQD
EyhkZTBhM2VjODY0MjFmNmI0YWE1MWVjNzA2ZWY5NWE1ZDhkOTFmZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/pT3IqSnUZSqaBrQVVGYOgq16fi6
VC7wyAWkqN+MXkUZ3RpJaouvnfTA6eAZ59H3X5T4m/6i96cpI5o+gl3PcLOvu8jG
95EFvWJIH5qoI65DSnzI+4NQYlvEiBaHLqhcECYEH+jKtHMFzRwLPrixfkPIyeN/
mPgY4TxAjC/w8UrSQUYM/h46K2ko2e/pys2qSODrlPRvyRdO0CwwN7JWTVn5yfaR
sN99QGZ4JZaa52GDQBE2dqd62FdNtgsOb33I+dA0b/fY35u514YRgDxwhN/kdKc6
tRbXnFaG+QYBgrTvVj15vn7ZQhilAikX3q8XPaajFVV2/LdCObR7WOXS+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4KPshkIfa0qlHscG75Wl2Nkf0OMB8GA1UdIwQY
MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt
MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1
LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdsM+lSt
/qxy5Ihb+RZj/0/Okhjr1W9P4+FZ7xfFpeQJ8dYUbeU6unsEf5q6B/w9pJVUZTlq
64Z3QmO+69QKR5yHCQbzzcvjYv0NFCDc26ozmIahJQiPX871IoasmQ+g4n2RcCzV
fbgl5/GUYBNsF12MzuqCvctgTNjQrQSdpAK4X0BBsKwqS6JK8i/5i9lIZevrFkt/
LF8PaLHSSbMKgnuz8WINSMGHgJxfb2DpHlBoSbxn21CIAUYNmI/lp0PzEK0icDna
9sBKML8JD+8VxP2oKHHIsHAYXvziIw+KAn94a8R22/AsfEG/MzITebbXOp952qnU
tn+yYOQce9Zqbg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:11 2026 by rpki-client