Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File: B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier: m56AbfhTLcThCMHP9aitRtG434/O8fq3UpFyXGcdGqo=
Subject key identifier: 48:7D:0E:16:26:86:DF:C4:80:9A:CC:F2:A3:29:F3:03:4C:BD:35:C6
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 019D37F6EF27EE8043B18C968C9B7DE53D52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number: 0DE8
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: NMU1GjBa9avLBNlTzFcK4+B6GoJqOqh78Obj+JqHMbY=)
2: g8AniT98jgfKG_IB19d9xu2syLw.roa (hash: 7R3vOrjrBzZjR9ZmhYF8VUus96RI5RYOknR8+bpyK+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ef:27:ee:80:43:b1:8c:96:8c:9b:7d:e5:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=487d0e162686dfc4809accf2a329f3034cbd35c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:9d:03:43:95:9f:d7:70:59:73:a7:6c:51:
90:8e:1b:5c:26:d1:20:02:80:d3:d9:a0:ea:f6:13:
6d:76:9b:27:ed:10:7f:82:ad:4a:95:21:a6:c5:da:
4b:a3:c0:e9:5c:a6:28:c1:9d:38:c9:75:53:27:c2:
16:e8:5a:cd:86:9a:cf:90:11:11:eb:8c:9f:61:82:
bf:76:c3:e6:00:66:1e:df:77:90:18:1a:cb:62:38:
00:34:b2:85:f3:28:d2:a8:c3:fc:dc:58:ed:f6:b7:
7c:a8:fa:57:4f:81:fd:21:ae:fd:7b:f4:2b:a4:03:
2c:04:18:fd:5e:f5:f4:02:15:fa:9a:81:8f:21:06:
60:90:50:f4:80:cb:18:07:85:e7:df:55:bf:b2:58:
f1:27:a3:c7:75:bd:1b:50:4d:34:83:6f:02:7c:8c:
6a:a0:a5:b8:52:40:31:eb:e5:51:3c:4a:d4:b5:bf:
a6:31:13:85:65:e3:11:f5:ed:9e:57:f2:fa:37:4c:
a9:eb:67:22:72:5a:d8:87:fd:ae:11:bf:19:ed:02:
16:cb:4a:cc:85:b4:4b:a2:6a:3a:a6:e9:12:27:33:
77:ac:3b:37:ce:aa:ec:f8:b1:da:c3:46:d3:1f:5a:
30:66:7d:96:15:34:e5:3a:b6:27:e8:cd:40:1b:0f:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:0E:16:26:86:DF:C4:80:9A:CC:F2:A3:29:F3:03:4C:BD:35:C6
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:28:55:15:57:a9:b2:9d:12:96:a9:ee:2c:2c:fe:4f:14:2d:
ba:ca:51:c7:98:0a:65:63:62:03:9b:84:d7:79:ec:d3:67:50:
a8:81:1e:8c:2f:58:f7:58:86:ca:2c:20:f0:9a:b9:d8:df:94:
47:46:25:16:08:2b:44:fc:14:e1:de:56:57:5b:28:d7:5f:4b:
70:52:73:36:8a:a0:79:eb:2e:50:9d:28:25:11:f5:c8:4b:1d:
5c:16:56:48:70:e3:08:47:ff:fd:36:81:72:a7:75:40:e4:e6:
5b:a3:8f:5f:cb:5b:7f:9c:3c:45:99:2b:4e:fe:67:3f:8a:ce:
c3:db:ee:6a:26:28:ee:71:4b:94:f3:fb:7a:5e:44:8a:9d:a3:
0e:8e:82:30:13:d8:e3:34:39:f4:03:0b:8a:59:77:74:25:b7:
b5:e6:a8:de:6f:74:27:35:56:e2:e4:67:03:e9:49:eb:89:9c:
0d:1d:05:67:a7:ee:91:a0:89:7f:d4:a6:e1:ac:5b:9c:4d:4a:
63:de:ea:44:08:73:7b:2e:0d:4b:24:fb:da:30:f5:c4:b6:2b:
2b:ac:f0:d9:b8:fd:c1:2c:02:49:9d:d8:41:99:c7:b3:00:95:
66:ca:e0:ba:a1:68:18:43:68:19:65:bd:27:e1:b2:e5:c8:a1:
64:43:8f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039u8n7oBDsYyWjJt95T1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YWVmMTkwZjQ0YmZjMWRiMGM1MGYxYTczZmRmMDE3MDgx
YWZlMTYwHhcNMjYwMzI5MDUwMDIzWhcNMjYwMzMwMDUwMDIzWjAzMTEwLwYDVQQD
Eyg0ODdkMGUxNjI2ODZkZmM0ODA5YWNjZjJhMzI5ZjMwMzRjYmQzNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl42dA0OVn9dwWXOnbFGQjhtcJtEg
AoDT2aDq9hNtdpsn7RB/gq1KlSGmxdpLo8DpXKYowZ04yXVTJ8IW6FrNhprPkBER
64yfYYK/dsPmAGYe33eQGBrLYjgANLKF8yjSqMP83Fjt9rd8qPpXT4H9Ia79e/Qr
pAMsBBj9XvX0AhX6moGPIQZgkFD0gMsYB4Xn31W/sljxJ6PHdb0bUE00g28CfIxq
oKW4UkAx6+VRPErUtb+mMROFZeMR9e2eV/L6N0yp62ciclrYh/2uEb8Z7QIWy0rM
hbRLomo6pukSJzN3rDs3zqrs+LHaw0bTH1owZn2WFTTlOrYn6M1AGw9XyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEh9DhYmht/EgJrM8qMp8wNMvTXGMB8GA1UdIwQY
MBaAFAeu8ZD0S/wdsMUPGnP98BcIGv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYt
ZWY0NDU4ZWEyMGNkLzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYtZWY0NDU4ZWEyMGNk
LzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJChVFVep
sp0SlqnuLCz+TxQtuspRx5gKZWNiA5uE13ns02dQqIEejC9Y91iGyiwg8Jq52N+U
R0YlFggrRPwU4d5WV1so119LcFJzNoqgeesuUJ0oJRH1yEsdXBZWSHDjCEf//TaB
cqd1QOTmW6OPX8tbf5w8RZkrTv5nP4rOw9vuaiYo7nFLlPP7el5Eip2jDo6CMBPY
4zQ59AMLill3dCW3teao3m90JzVW4uRnA+lJ64mcDR0FZ6fukaCJf9Sm4axbnE1K
Y97qRAhzey4NSyT72jD1xLYrK6zw2bj9wSwCSZ3YQZnHswCVZsrguqFoGENoGWW9
J+Gy5cihZEOP5w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:01 2026 by rpki-client