Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: YEesku5M6qdMhwbW5bwNvepeI1Rbt5zjvc4R1FzErJI=
Subject key identifier: 4A:D5:02:E0:0A:B5:1D:FE:B5:B7:77:3B:53:22:AD:B8:B8:72:E3:DB
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 01A13D815383C3FADB2F2A1DB46A7FB7660D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 03:00:47 +0000
Manifest this update: Thu 15 Oct 2026 03:00:47 +0000
Manifest next update: Fri 16 Oct 2026 03:00:47 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: ge1vZT5uTey747TQXWVHVVSa1Mmqwt0eNOaTn/Cg+Ug=)
2: sIMIn1dJinS_QNCqRZ3sAyP03Ys.roa (hash: wj+8SIZf3ByO3mjHkql3d5okITDClOtvY8eSZHJh2bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:53:83:c3:fa:db:2f:2a:1d:b4:6a:7f:b7:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Oct 15 03:00:47 2026 GMT
Not After : Oct 16 03:00:47 2026 GMT
Subject: CN=4ad502e00ab51dfeb5b7773b5322adb8b872e3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:41:0b:35:1e:f7:9a:27:45:d1:34:c4:f1:
d8:03:18:8a:65:a9:b1:16:a4:b8:69:04:be:b3:c1:
51:de:c9:4a:30:77:59:bc:53:e1:a9:37:0d:14:12:
e2:91:7f:67:ce:88:8e:18:33:56:c6:51:6c:57:a8:
c7:e2:0c:91:68:6a:47:bf:d6:ff:f4:67:91:6a:32:
78:57:bb:fd:a9:b2:32:2b:45:79:a2:d1:4a:ef:ae:
14:bc:65:86:1e:16:03:34:0d:6b:46:74:b0:ca:cf:
af:b7:2f:99:77:ce:f0:57:c0:b3:8b:1a:59:2f:5e:
ce:4f:b8:80:13:72:09:85:cc:79:ce:ce:20:76:f4:
27:fa:b6:d0:37:63:36:67:6b:36:b3:c9:d3:8a:35:
bb:82:92:26:88:09:66:38:91:2c:29:45:c9:b4:ab:
a4:38:4d:36:f3:be:67:a9:38:91:b0:0e:3a:64:89:
32:bb:be:0d:30:27:de:26:07:b0:28:4f:73:f4:eb:
e9:44:9b:83:c1:33:81:9a:36:dd:2e:5b:be:3c:d0:
8e:d5:a4:69:77:21:b2:5d:02:f8:41:a1:0f:f0:06:
9f:7e:55:c0:e2:3c:7c:2f:ae:0e:33:0b:9a:25:83:
56:06:7a:36:50:bc:b1:5c:a5:d0:24:e8:ed:f9:df:
5c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D5:02:E0:0A:B5:1D:FE:B5:B7:77:3B:53:22:AD:B8:B8:72:E3:DB
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:44:ec:50:08:d8:63:c9:bb:03:fe:04:ef:58:27:da:ad:d5:
b3:ad:29:45:23:30:54:3d:51:a9:3d:29:bc:b4:78:88:be:e8:
52:28:52:16:d5:fc:49:19:ca:f5:99:9c:2e:d0:43:cc:4e:30:
1a:ee:92:36:91:e2:aa:86:52:85:77:1b:f1:ce:03:b4:06:08:
da:11:8c:03:65:f7:2b:3c:ab:5d:80:ac:d1:bc:6d:80:cc:09:
d3:72:d2:c4:70:2e:b0:1c:23:f4:1a:87:70:14:97:3f:d4:25:
b9:b1:6b:d5:84:89:99:b1:35:c5:04:da:f4:4c:78:f7:cc:61:
7b:a5:e5:cd:bf:fa:54:8b:8c:25:47:bc:3e:3c:e4:d1:08:a1:
07:a4:0f:2d:f8:12:44:6a:31:fc:d0:e5:f5:a4:e7:c7:99:53:
82:41:76:f6:84:25:96:07:0d:f1:1f:6b:9a:24:fd:b8:33:3c:
ef:07:04:ee:d3:fb:0b:dc:33:ed:17:42:80:41:98:cb:8e:ee:
7c:ba:8d:b7:1b:9e:36:94:82:a5:05:0e:71:07:aa:6b:0c:11:
4f:49:be:65:b5:ca:79:45:c6:0a:36:bf:28:30:a1:b0:af:42:
59:7e:35:50:79:cf:24:81:7b:5c:b6:27:53:bc:c3:b4:cf:32:
3b:47:c5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gVODw/rbLyodtGp/t2YNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDA4ZGY4YmM3YTM4M2U5NzZkYmIwM2QyYTBlYjlmZTBk
Nzg2ZTcwHhcNMjYxMDE1MDMwMDQ3WhcNMjYxMDE2MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg0YWQ1MDJlMDBhYjUxZGZlYjViNzc3M2I1MzIyYWRiOGI4NzJlM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/lBCzUe95onRdE0xPHYAxiKZamx
FqS4aQS+s8FR3slKMHdZvFPhqTcNFBLikX9nzoiOGDNWxlFsV6jH4gyRaGpHv9b/
9GeRajJ4V7v9qbIyK0V5otFK764UvGWGHhYDNA1rRnSwys+vty+Zd87wV8CzixpZ
L17OT7iAE3IJhcx5zs4gdvQn+rbQN2M2Z2s2s8nTijW7gpImiAlmOJEsKUXJtKuk
OE02875nqTiRsA46ZIkyu74NMCfeJgewKE9z9OvpRJuDwTOBmjbdLlu+PNCO1aRp
dyGyXQL4QaEP8AafflXA4jx8L64OMwuaJYNWBno2ULyxXKXQJOjt+d9cywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErVAuAKtR3+tbd3O1Mirbi4cuPbMB8GA1UdIwQY
MBaAFAfQjfi8ejg+l227A9Kg65/g14bnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYt
NTE0ODVmZTIyMmRiLzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8wMzE4MTgtMDQ2My00YmFiLWJiNTYtNTE0ODVmZTIyMmRi
LzEvQjlDTi1MeDZPRDZYYmJzRDBxRHJuLURYaHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMETsUAjY
Y8m7A/4E71gn2q3Vs60pRSMwVD1RqT0pvLR4iL7oUihSFtX8SRnK9ZmcLtBDzE4w
Gu6SNpHiqoZShXcb8c4DtAYI2hGMA2X3KzyrXYCs0bxtgMwJ03LSxHAusBwj9BqH
cBSXP9QlubFr1YSJmbE1xQTa9Ex498xhe6Xlzb/6VIuMJUe8Pjzk0QihB6QPLfgS
RGox/NDl9aTnx5lTgkF29oQllgcN8R9rmiT9uDM87wcE7tP7C9wz7RdCgEGYy47u
fLqNtxueNpSCpQUOcQeqawwRT0m+ZbXKeUXGCja/KDChsK9CWX41UHnPJIF7XLYn
U7zDtM8yO0fFwQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:53 2026 by rpki-client