Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: nopaK55FHr7r+7PfvrigIwkfngFtYGsheEXNeLAGPUk=
Subject key identifier: 8E:6E:79:0A:66:73:31:6C:55:ED:99:5C:4B:CA:B0:88:AC:78:8E:F0
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019F17F98F5C845A4A8E86627D2F32DC9993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 10:00:58 +0000
Manifest this update: Tue 30 Jun 2026 10:00:58 +0000
Manifest next update: Wed 01 Jul 2026 10:00:58 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: qyfNQQzCVFzyTssmR6NzoHmFFGxPuG+B681T8k41KJc=)
2: KZcHjGEjlEqiqqvazolxSXEDbuA.roa (hash: npVlibuFk5hKI0+SFymhsNVWKoQikj7X0ByNh6Jwl9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:8f:5c:84:5a:4a:8e:86:62:7d:2f:32:dc:99:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Jun 30 10:00:58 2026 GMT
Not After : Jul 1 10:00:58 2026 GMT
Subject: CN=8e6e790a6673316c55ed995c4bcab088ac788ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:36:d6:95:38:17:01:18:a8:8e:19:77:d3:
b0:a8:c4:66:fe:ba:50:a7:79:bc:1f:a8:f3:f7:25:
7f:7e:cd:87:30:c4:50:2b:36:38:d0:c3:7b:a5:df:
80:8a:ae:58:2a:20:7d:01:94:32:de:33:04:08:c9:
ad:eb:58:f2:8a:d5:e2:98:5f:ed:20:eb:33:4d:b4:
71:82:29:81:f3:f8:cb:2c:19:e4:e4:1c:eb:8f:dc:
2f:be:fa:83:63:fa:e8:29:77:41:ed:ee:3b:f1:3f:
05:96:cd:92:ea:2f:c0:8c:eb:fe:24:70:e7:a5:98:
29:f4:cc:bf:43:89:04:3c:42:db:50:2e:c8:ac:e6:
ec:27:83:dd:ad:e7:4e:36:88:38:51:a1:60:b5:f0:
4f:e0:ba:2a:5b:0b:6e:3c:d3:e3:98:f3:87:3b:98:
93:a5:4c:43:cd:a0:7c:38:f7:3a:cf:83:f3:ff:4c:
d0:7f:37:53:5e:c7:8f:82:84:1b:f2:d5:14:7c:34:
93:cc:87:d9:df:c3:20:6f:2c:0c:60:5d:59:d8:41:
b6:f2:f8:30:37:ab:f2:bb:d9:aa:ee:13:18:9c:77:
5c:a8:5a:eb:7d:ce:b4:f8:bb:03:cf:82:38:6b:56:
38:0b:5f:a5:8b:bb:0c:25:4b:c0:a3:33:e1:5b:70:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:79:0A:66:73:31:6C:55:ED:99:5C:4B:CA:B0:88:AC:78:8E:F0
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:2a:b7:39:1e:2d:01:a8:5d:29:c0:15:5a:ca:d9:78:cf:
b1:60:18:ce:cb:eb:4d:ed:dd:b7:f5:45:0b:b4:a8:55:70:11:
f3:9c:9f:8d:65:83:e9:97:56:af:bf:df:01:2a:dd:05:14:d9:
46:be:5a:7f:4c:e8:26:15:fb:30:c0:9e:82:fc:6e:a2:8c:8c:
14:0a:23:0a:03:0f:de:c8:1b:18:b2:e1:ba:9e:f1:d1:77:1b:
41:31:ab:fa:94:07:9a:3d:a6:59:fb:5d:2a:38:a0:47:b9:1b:
4e:5f:f0:b7:d2:c5:13:c1:76:8b:98:73:67:11:ac:83:a7:00:
bc:7b:a3:fa:5b:a7:e1:73:83:7a:24:0a:50:81:74:6d:ad:2f:
be:79:38:b9:28:2a:33:6a:02:ca:28:c0:a0:5d:cb:b8:1b:f3:
3a:73:6a:2d:fb:ee:1d:86:b1:b7:ae:3f:7e:0a:46:ed:64:dc:
14:2d:75:f1:d1:99:8c:54:5b:04:ce:f8:46:87:92:b3:36:a5:
66:15:9a:ff:2e:c5:9a:34:4a:15:38:72:76:1c:d9:15:ac:82:
20:3b:32:13:7b:2e:d7:67:ed:cf:7e:95:e7:c4:a0:08:06:a9:
a3:ad:a6:39:5e:79:55:29:23:83:1a:6d:27:3a:b4:1c:3f:f3:
02:94:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:52 2026 by rpki-client