Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: dzCkuf/Svl10AWF5ygqApEakNk0LW5s4mar/I+/vZ+M=
Subject key identifier: 5B:B2:D3:9B:12:D2:E7:C0:BB:CF:EE:9C:91:0D:8E:EF:D5:81:A6:50
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019D37F794437545AB80C5478FBCCA9B5EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:01:05 +0000
Manifest this update: Sun 29 Mar 2026 05:01:05 +0000
Manifest next update: Mon 30 Mar 2026 05:01:05 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: 4SZCKmB9cYZRbC0lc96n5G8/UJtX3eCjOIC2iDmJfaE=)
2: xHdQm9eajl_-s6UmnTM6iscJFVc.roa (hash: kI5yXHQqZsO9mW/MmVAsJAYZ2S2lqy/VUF6lDZvuKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:94:43:75:45:ab:80:c5:47:8f:bc:ca:9b:5e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Mar 29 05:01:05 2026 GMT
Not After : Mar 30 05:01:05 2026 GMT
Subject: CN=5bb2d39b12d2e7c0bbcfee9c910d8eefd581a650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:bc:d7:96:d4:5f:0c:6d:82:eb:23:86:0b:
95:5c:18:26:46:22:6c:9e:75:59:11:ca:e2:9a:2c:
7d:6d:f5:82:f5:aa:2c:45:ee:61:49:d8:0f:ea:a0:
ac:63:3c:b4:85:01:47:84:1c:c0:d1:9c:08:d9:97:
fd:b2:f6:17:89:39:26:f0:29:55:4e:c1:4a:7c:f8:
e3:77:3c:fa:00:21:cc:88:2f:ba:32:55:04:e4:e0:
68:94:4b:09:12:6e:02:a6:57:8a:d9:99:5e:4e:c4:
ef:ad:e1:84:dd:70:b2:77:1c:b9:d8:cc:51:0a:9f:
03:fb:b7:d3:c1:50:01:e9:a4:57:ef:a4:ce:c3:0c:
2e:12:2c:55:ac:fb:84:2f:4a:e7:23:91:7c:e0:d1:
c9:7f:02:e1:5b:7c:9a:26:83:e8:c5:fc:58:e9:35:
48:2a:3b:92:7e:8b:16:52:d2:34:60:58:3b:07:64:
d9:20:6d:44:ae:aa:b5:97:f2:d3:30:9b:f8:13:ec:
27:b9:64:ca:05:65:50:b4:f9:5e:60:98:5e:cf:7a:
fe:d5:1c:92:7d:8d:54:b7:dc:a0:3a:5e:8d:8c:6f:
00:d3:f8:df:c8:1e:0d:f9:69:bd:3b:a3:b1:a0:d5:
43:62:89:e4:87:4a:2c:95:7e:79:88:a8:dd:3e:a2:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B2:D3:9B:12:D2:E7:C0:BB:CF:EE:9C:91:0D:8E:EF:D5:81:A6:50
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:63:33:b0:82:9e:55:d3:07:b9:80:df:4e:ee:19:a9:6c:
e0:d9:c8:84:f1:cb:81:31:db:3d:97:a9:0f:8a:02:f1:d2:15:
a3:22:e2:b2:74:2a:25:f6:79:7d:fe:1c:5e:c1:b9:65:39:e6:
50:b4:7e:71:dc:f3:db:73:70:35:61:33:5f:ec:19:f1:25:b5:
94:9b:05:fe:36:f6:9e:67:39:09:55:9e:c8:81:6d:bd:62:9b:
8b:a1:5b:27:a8:66:90:1a:40:aa:43:01:aa:49:31:81:73:ae:
c1:15:16:b9:ab:19:56:b2:83:2b:33:45:b8:80:65:5a:ca:b1:
f5:ea:4c:2a:e0:de:6e:99:58:83:9c:e7:59:df:01:b3:14:bc:
f9:e9:7e:06:dd:2f:7f:06:e1:5a:4b:7e:33:65:55:7d:83:a5:
ba:22:04:fe:ae:14:dc:91:87:84:67:9a:46:4c:3e:69:c0:e0:
96:3c:dd:42:5e:61:23:33:58:8e:bb:3a:2e:36:b5:0a:26:51:
98:d0:ee:94:fc:81:3d:32:51:d0:8b:1d:d7:3a:6f:1c:be:87:
2f:cf:2f:72:05:72:e8:c9:99:41:ba:56:e7:9c:c2:9f:2c:4b:
71:02:e7:f2:ac:27:5f:66:6f:9d:df:62:15:18:87:85:e5:50:
f4:4b:86:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:34 2026 by rpki-client