Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: 11vHUh5SPp+xaJta9lnL+PA6yNKA16J8VmACp7f3yz4=
Subject key identifier: 20:25:48:51:09:87:F5:8A:61:A2:8A:5B:B3:7E:16:6C:C4:71:53:91
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 019E30E0CE3C9BBDA8D17F8F2FF0BF186726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 07D7
Signing time: Sat 16 May 2026 13:01:39 +0000
Manifest this update: Sat 16 May 2026 13:01:39 +0000
Manifest next update: Sun 17 May 2026 13:01:39 +0000
Files and hashes: 1: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: bsGg2v/OE45UATpMFOAyp63hpGrpfAUdPj9zKtsVFiU=)
2: IigNMRixnMPVS75SrzKehSBBVDM.roa (hash: gUgOp5BTHqunalktb9d7rS6HPdtqyYvIKl0kb1Nt8OQ=)
3: y-HjtwR4wSx0DUihdNST7R_S2o8.roa (hash: VEt+M0A57FyhjxmDHZ0yKL7ASQDN3BrLmNEFa7RXahE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:ce:3c:9b:bd:a8:d1:7f:8f:2f:f0:bf:18:67:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: May 16 13:01:39 2026 GMT
Not After : May 17 13:01:39 2026 GMT
Subject: CN=202548510987f58a61a28a5bb37e166cc4715391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:2a:72:36:7a:5d:64:f5:06:01:aa:d6:9d:
58:b6:e0:f9:ed:78:54:78:94:8b:35:37:c2:fd:1e:
7e:a4:d5:1a:96:a6:53:df:0a:e3:5d:54:5b:53:59:
70:5a:4f:93:1d:24:a0:4a:d1:6c:61:b4:6a:65:0c:
b4:1d:ea:80:59:46:6d:e5:56:28:2b:02:ee:73:80:
3c:5e:14:0b:01:e1:38:ce:ab:05:88:24:fa:e3:cb:
a6:0d:45:15:dd:22:ac:b0:81:bb:18:a7:db:ed:71:
fa:95:90:7e:91:2e:1a:67:af:48:59:a9:68:0f:33:
47:6c:ab:95:8f:c7:37:e0:01:66:3c:10:22:41:ee:
f2:fc:78:e6:f5:fd:55:73:66:0e:2c:c2:48:42:69:
fb:47:df:19:24:44:d4:27:c0:10:9e:05:ad:65:32:
13:92:e5:5f:0a:e9:80:66:bb:39:0a:5f:5c:4c:70:
a2:0e:2e:82:51:51:b0:4c:dd:2d:70:35:bc:ab:15:
16:bd:fc:73:ee:e0:31:20:f3:8b:0b:9c:4d:fb:2f:
4b:d6:ff:77:9f:f1:07:5c:21:14:71:1e:18:20:e7:
52:1c:fc:b1:e4:66:5f:c8:4b:4f:35:e9:ec:d6:52:
6d:d1:8c:22:5b:97:16:54:c2:5f:7b:ef:ca:bc:9c:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:25:48:51:09:87:F5:8A:61:A2:8A:5B:B3:7E:16:6C:C4:71:53:91
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:60:02:b3:86:67:f6:7c:73:ff:2e:8e:d8:a9:63:04:d6:
b5:1b:97:4f:37:e9:a0:92:2a:f7:e8:67:14:06:2a:2b:5a:0d:
c2:b6:de:59:b1:76:1b:c7:cf:69:06:d8:5d:ba:22:9e:73:61:
e0:69:49:32:f3:2b:5e:c1:aa:98:60:3b:37:3a:ae:f1:22:a3:
58:75:5f:34:98:60:c7:4b:38:6a:f8:31:c8:0b:80:00:4d:f9:
7c:d5:81:1d:8e:3a:89:9d:5b:5d:8d:ec:92:39:48:98:e5:50:
db:71:c8:cd:e0:4e:ea:23:3c:cd:a2:e2:3b:98:61:48:e3:a5:
04:7e:ce:d5:74:8f:72:e7:19:07:43:31:29:ad:7b:76:72:fd:
41:64:33:72:6d:5b:30:55:4e:77:47:69:5b:b5:9c:20:80:cb:
27:77:88:ce:d9:1b:d4:51:4c:11:1e:f6:40:9c:c9:45:12:03:
45:58:bd:1f:09:7d:1e:4b:b5:b4:cd:b1:22:26:d9:48:73:40:
93:b2:78:b9:b6:89:67:35:48:f8:d6:03:2e:f9:16:5d:65:fa:
7b:5d:32:9a:44:56:83:51:7f:c3:a1:16:1a:ce:d3:07:a8:be:
1e:75:7e:57:12:f6:15:1b:8e:f0:41:45:60:00:67:a2:fd:e4:
c8:ef:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:39 2026 by rpki-client