Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: veJtP2zX9Kb++CEc+MVfvR1hCXKgexrKolOwFeLZ0RM=
Subject key identifier: 19:ED:4A:08:F5:47:C3:31:42:37:79:D2:FA:F3:42:BF:7A:D6:49:82
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019D39AEAF9A789262B7A80C54AB3D9A7D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 0757
Signing time: Sun 29 Mar 2026 13:00:42 +0000
Manifest this update: Sun 29 Mar 2026 13:00:42 +0000
Manifest next update: Mon 30 Mar 2026 13:00:42 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: U+6IK/i/d8xPBJaA6B7ADfNzllC9ieqfutCanTuEqmY=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:af:9a:78:92:62:b7:a8:0c:54:ab:3d:9a:7d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Mar 29 13:00:42 2026 GMT
Not After : Mar 30 13:00:42 2026 GMT
Subject: CN=19ed4a08f547c331423779d2faf342bf7ad64982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:15:de:e3:72:40:2e:fa:d6:15:d3:63:10:
58:e6:d6:5b:25:b2:c8:d0:a6:9d:10:0c:cd:97:74:
b0:25:ff:3b:35:81:33:e4:cf:9b:8a:21:aa:f3:39:
e7:20:1d:d5:69:ed:9f:9a:39:1e:f6:84:28:3e:34:
dd:81:ab:9f:d7:56:a9:12:18:d6:35:c1:ba:71:c4:
3f:f2:af:9d:a7:93:a1:83:77:db:91:f2:04:1f:84:
80:b3:41:81:f1:e4:37:05:7e:60:3b:fb:59:43:1a:
83:6e:5f:21:98:21:69:68:24:48:7e:f5:16:00:ce:
ba:e7:ec:ac:f8:49:75:f6:af:75:22:77:92:f8:31:
af:43:f3:c9:76:85:e6:c1:90:16:31:3c:82:47:07:
4b:8b:6f:4b:3c:69:45:0a:01:50:12:c7:6b:52:75:
03:cd:04:05:e7:ae:ee:78:1f:b5:f7:94:00:5d:d5:
09:f3:07:d0:2d:58:a3:b9:5b:dc:14:a3:c3:06:3d:
ed:34:8f:14:d2:0d:e0:55:9e:93:57:62:02:70:19:
29:47:de:0c:5f:9c:fb:2d:fe:70:9d:72:ab:ac:ae:
79:1b:d3:4b:62:30:f7:7b:1d:c1:22:b3:66:61:cf:
7e:af:2b:fd:d4:33:36:28:94:d1:ba:4b:b4:d0:c5:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:ED:4A:08:F5:47:C3:31:42:37:79:D2:FA:F3:42:BF:7A:D6:49:82
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:35:40:b1:32:c2:1f:49:6f:38:df:2c:69:eb:dc:5d:ec:98:
23:34:c7:28:ea:eb:46:ac:96:8b:25:34:e1:4c:87:c9:df:40:
45:9f:67:fd:da:60:dd:75:21:9c:5f:da:f2:0b:c2:d6:fa:39:
2b:aa:9d:29:63:72:d0:74:34:6a:1e:f6:95:ff:4a:e5:bf:5f:
4e:e4:bc:30:80:67:6a:3b:dd:ac:8a:43:9b:e1:e1:ab:c9:74:
00:1d:b6:fb:97:d6:73:91:36:d0:11:75:b7:fd:76:27:ac:4f:
7c:8f:9e:e4:41:bb:7c:5d:d8:9e:28:37:dd:06:aa:df:57:f6:
68:41:74:a8:4b:96:8d:d6:ec:0c:c4:18:c0:5d:d9:17:a6:da:
06:53:e6:1f:eb:27:ad:e3:32:88:5f:69:d4:b0:ba:14:ea:e2:
97:d2:83:3f:58:f4:b2:e2:48:38:66:00:86:fb:a2:79:70:d8:
22:2f:b9:12:63:22:fa:1c:4b:da:2c:3a:f4:42:a8:1f:fb:e7:
0c:11:21:d2:ae:e0:2b:aa:6d:d6:e6:26:7b:0b:c6:e0:71:aa:
37:23:a0:45:f8:d4:a3:8a:52:1f:a3:2b:bc:16:37:29:d0:7c:
a0:74:de:7c:31:2a:84:6d:9b:14:c9:2b:57:13:13:22:1c:fb:
9f:c6:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:44 2026 by rpki-client