Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: 2rQEpliR4jEzLpON1oRQu4kUkiElL4ntC1w1Nv41r2k=
Subject key identifier: F3:F8:40:05:CF:90:F9:01:90:8F:85:FC:33:DA:8D:A7:8E:F9:BE:D0
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 019E31173EA3F89A8B1EBD3441CF8F13918D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 14:01:07 +0000
Manifest this update: Sat 16 May 2026 14:01:07 +0000
Manifest next update: Sun 17 May 2026 14:01:07 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: CSw4YMhFsOCqMcQS8lpq3zJOPwTt0P3jNX3fwbDMJ1g=)
2: xHdQm9eajl_-s6UmnTM6iscJFVc.roa (hash: kI5yXHQqZsO9mW/MmVAsJAYZ2S2lqy/VUF6lDZvuKJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:3e:a3:f8:9a:8b:1e:bd:34:41:cf:8f:13:91:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: May 16 14:01:07 2026 GMT
Not After : May 17 14:01:07 2026 GMT
Subject: CN=f3f84005cf90f901908f85fc33da8da78ef9bed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:df:88:7c:7f:d1:93:97:ba:de:b4:ac:1e:
9a:e2:21:c5:ff:3f:6c:7b:1a:80:11:28:36:a2:a7:
57:27:02:be:90:b0:6c:7b:f8:89:68:05:3b:c1:83:
d9:db:7b:52:4f:35:79:21:2b:fc:33:5e:d1:69:24:
b5:c6:ad:57:1a:69:8d:a4:f9:a7:46:92:d4:20:f1:
bf:0a:06:40:34:3b:39:32:d6:d1:e6:42:50:50:49:
97:bf:0e:cd:4e:32:99:67:4e:d6:86:0d:22:bb:19:
83:7a:63:fe:0a:43:2b:2c:3e:23:2d:96:24:d2:fb:
c4:f9:c4:37:d5:81:5d:ca:49:bb:b7:d3:6b:d3:2b:
3f:88:bc:f0:97:35:34:71:f5:95:dd:dd:1d:da:0e:
39:fe:92:ec:da:41:9d:e5:1d:c0:4f:30:1a:ae:3e:
c6:7e:07:8e:1a:a7:64:32:e0:00:cc:36:b9:2d:66:
b7:1d:35:f0:cb:79:3a:26:3b:68:c9:b0:8f:27:54:
ef:0b:0a:f0:05:9c:57:42:04:18:71:b2:f9:df:7b:
e9:9f:f0:2f:24:bb:1a:0e:1e:92:67:4c:9b:4f:de:
68:e0:57:9a:d6:53:43:ae:20:68:5a:ce:01:f3:a1:
bb:fb:0f:96:dc:1f:05:50:4b:ff:56:9c:99:7a:5b:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F8:40:05:CF:90:F9:01:90:8F:85:FC:33:DA:8D:A7:8E:F9:BE:D0
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:25:a9:33:86:47:31:90:22:c0:62:ff:bf:7e:2f:1c:7b:b4:
de:a5:4e:eb:b7:53:ba:59:b3:28:bf:c2:3c:9b:9a:09:79:bc:
fa:46:25:b8:40:a8:69:dc:c9:d1:f0:d2:f4:cb:1e:25:99:4f:
3d:4f:cb:ec:0b:be:37:06:a9:27:b5:7b:e8:b0:7a:14:c1:5b:
57:d5:ef:f1:9c:8c:ee:f8:b9:00:7f:60:f3:0a:b5:a6:cd:88:
01:34:c2:94:c4:95:9c:d7:50:72:d0:10:bc:75:dc:85:7e:e1:
89:0b:ac:a2:da:b1:b8:41:01:c7:64:79:c3:36:4b:2f:41:b0:
5b:fe:f2:6e:83:95:74:62:34:ce:e3:a0:16:63:6b:c5:60:71:
9e:82:f2:2b:da:4f:52:45:77:3c:7c:ef:32:15:75:c6:8b:33:
42:79:d9:83:f0:e5:04:93:7f:29:33:ae:1c:66:92:f2:33:21:
7d:cb:4c:75:81:9f:db:28:6e:ef:fb:fe:f4:28:5e:a3:c5:ca:
b3:9f:6e:53:9e:5e:82:a8:15:d3:10:6b:ac:9d:ae:69:a0:4e:
e3:71:ea:65:cc:f9:c6:98:8e:05:bb:f1:56:8d:2a:63:96:5a:
28:03:85:8d:d6:42:e9:82:0a:23:ca:a0:8c:50:99:f5:5f:43:
66:36:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:16 2026 by rpki-client