Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: jrfAfZ/vIh2Wn5AosXIzAnNJqzgZbzdyg8aTc01nkIw=
Subject key identifier: 48:2A:26:EA:9A:52:20:F3:2E:B1:B0:4D:12:A5:4E:09:71:66:0D:18
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019FA1BBEDA35B6D5FB1B26D47655F2717B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 0896
Signing time: Mon 27 Jul 2026 04:01:15 +0000
Manifest this update: Mon 27 Jul 2026 04:01:15 +0000
Manifest next update: Tue 28 Jul 2026 04:01:15 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: CD5VG4P9Fr91edKBXOloHLaTPoNaWIZunE5QLFMjFa0=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:ed:a3:5b:6d:5f:b1:b2:6d:47:65:5f:27:17:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Jul 27 04:01:15 2026 GMT
Not After : Jul 28 04:01:15 2026 GMT
Subject: CN=482a26ea9a5220f32eb1b04d12a54e0971660d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:2e:58:70:56:a0:b8:a8:84:0b:7f:df:4b:
d4:32:76:27:76:07:f6:f7:50:fc:3f:dd:93:12:23:
30:f3:98:d6:67:c8:80:78:39:27:0b:ad:d2:db:d0:
0a:96:d2:56:93:1a:d3:2f:94:ef:ff:2e:df:a9:17:
f5:e5:a2:d2:6e:b1:cb:4e:57:51:3f:1b:a3:e3:af:
2e:bd:e4:68:a5:06:fb:b5:ed:48:6c:f6:6b:92:f9:
b9:3c:f2:42:21:cd:c7:7e:95:d7:b7:2c:5a:05:c1:
42:47:97:c4:c6:70:17:34:3a:d8:2e:0a:a6:28:c0:
11:38:1a:96:b1:13:37:9a:3c:6e:51:19:3a:8e:7a:
e1:93:6d:b1:5a:93:ce:d2:8c:ea:92:27:6d:b1:ed:
a6:1b:82:07:e1:50:d5:9c:21:77:8a:ef:31:91:26:
c0:6d:38:1f:6c:62:56:b0:97:b6:24:af:21:1e:47:
0c:ba:e7:b0:7a:9a:6d:33:87:c2:f2:99:5f:5b:dc:
2f:95:b7:23:97:ab:58:b5:40:0f:f6:1d:95:44:6a:
9d:ee:51:b1:f8:47:ac:b3:22:b7:b0:66:73:c8:bc:
c9:44:47:a6:7c:fa:cb:cf:98:c8:ea:b2:a9:21:5e:
3b:0e:89:6d:1b:d8:b9:54:fa:df:be:5f:e2:b5:84:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:26:EA:9A:52:20:F3:2E:B1:B0:4D:12:A5:4E:09:71:66:0D:18
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cb:b1:fd:92:c2:85:33:ed:36:e1:f9:e9:c5:21:a0:66:e2:
bd:c2:c9:81:50:e3:fd:6b:a4:08:14:2a:7c:05:24:cc:c4:c7:
0a:d7:04:71:18:3d:c5:82:83:f9:eb:a4:94:a2:68:ec:31:02:
7a:5c:86:de:10:79:73:9f:3a:53:bd:4d:0b:81:7b:3d:4e:d0:
89:bc:f6:9b:4f:37:01:24:10:13:a4:80:9e:58:a3:4f:48:4a:
4a:48:ca:ef:92:23:9a:a9:07:da:49:e9:71:78:9d:dd:a9:82:
e0:9d:7b:81:d8:85:71:9e:a3:76:ee:5f:36:a4:14:3e:eb:ec:
22:d0:b7:65:97:57:27:83:1b:5e:b1:1f:37:ad:16:5d:c3:ea:
83:ed:b8:62:4a:6a:fa:a5:ad:43:5f:71:03:24:e3:6d:93:73:
4e:71:39:03:27:24:ba:bf:8b:31:d6:c5:6e:34:f3:fc:26:8b:
62:0b:5b:bd:74:9c:7f:fe:aa:88:47:7b:e2:a9:09:8a:e3:ed:
b8:7f:b6:3a:e8:84:18:98:72:d7:52:d7:d6:77:8b:fd:fe:99:
7a:8d:d1:7d:c7:43:c0:ee:e3:f9:3b:c2:20:ce:1e:10:29:00:
f7:56:cf:6e:3a:3f:46:ec:a6:7c:2c:9b:ef:91:75:84:7f:d7:
12:16:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:49:40 2026 by rpki-client