Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: Llmvn4OqHwqJr3unIGRj/dgErLif62aQnwZA47PXWD0=
Subject key identifier: 45:D5:6B:1C:B8:57:69:B2:81:BE:99:D3:4A:6B:C7:9F:00:1C:32:DB
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 01A08D56468D10AF2F6C95E214C6840A0681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0BA4
Signing time: Thu 10 Sep 2026 22:00:36 +0000
Manifest this update: Thu 10 Sep 2026 22:00:36 +0000
Manifest next update: Fri 11 Sep 2026 22:00:36 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: p3K4e0w2PEhuWN9tpirEuhrnOhSrPlccudmraTIACb4=)
2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:46:8d:10:af:2f:6c:95:e2:14:c6:84:0a:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Sep 10 22:00:36 2026 GMT
Not After : Sep 11 22:00:36 2026 GMT
Subject: CN=45d56b1cb85769b281be99d34a6bc79f001c32db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:11:3b:1d:2d:19:7b:72:8f:08:c1:f8:78:
be:52:08:02:d6:ff:ac:d7:31:f4:82:e1:e3:94:53:
c6:58:31:b8:e0:d3:86:b7:5a:d2:db:19:41:1a:cd:
05:88:a2:f9:ae:f0:52:5f:21:21:53:c0:fb:4c:27:
ec:1b:c7:ae:82:90:a6:2b:36:48:2a:ec:4d:2a:3a:
f9:61:66:f0:2c:5c:da:7f:4f:fd:4e:b8:a4:b3:ea:
fc:21:29:7f:bf:b9:19:95:79:9f:aa:8d:a3:05:1e:
b6:41:90:e1:0d:a0:a0:0d:83:78:38:c2:d7:70:17:
77:3c:39:4b:98:eb:4c:aa:55:67:eb:49:4f:47:fa:
75:2d:55:ae:97:03:5f:6a:39:ce:30:11:97:c6:01:
14:dd:84:a0:d3:62:79:cd:f4:5b:1e:94:de:1a:7b:
4e:7c:0b:3a:7c:e0:56:11:b6:b2:6b:98:6d:b0:de:
40:16:44:ea:25:be:b1:80:1c:57:e0:e8:af:fc:b0:
1d:cf:1b:c1:59:6f:2e:18:be:03:77:13:e2:18:75:
73:fa:48:9a:c4:4e:57:fa:3d:65:f1:14:c7:6c:27:
0b:48:d9:5c:81:c0:ef:05:1d:04:9a:27:48:02:d4:
d9:3c:20:34:97:57:37:ab:e2:f6:11:68:cc:34:24:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D5:6B:1C:B8:57:69:B2:81:BE:99:D3:4A:6B:C7:9F:00:1C:32:DB
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:25:d2:4b:37:31:63:9e:6e:83:76:d8:c5:87:2b:bb:be:35:
94:5b:4b:ed:47:8c:b0:0d:54:b9:9d:df:62:e5:dc:cc:8d:c9:
1e:60:08:a6:e1:f4:b6:a4:ae:34:e3:3c:91:45:ab:88:3d:8f:
a2:44:0f:cc:10:7b:1a:92:55:2b:ad:60:49:c0:3a:35:d7:83:
46:1d:24:b5:a1:8b:c7:9c:dd:aa:12:b7:f8:c8:b8:d0:d2:c6:
d0:93:7b:bd:68:c6:d5:a4:10:4e:6e:f3:76:00:2f:cd:a4:21:
55:19:ef:a2:7a:bc:c2:8a:21:97:71:51:73:c6:a0:58:57:9c:
21:c6:f3:bc:0d:21:dc:dc:30:db:36:89:92:7c:df:8d:68:a9:
ff:47:a7:08:01:97:37:37:dd:98:ca:a1:f3:46:10:f1:8b:b3:
e3:6c:17:9f:8d:13:ff:a5:76:7b:3b:fe:7d:0f:ca:4f:d0:82:
1a:40:66:7e:62:0c:04:2e:b1:9a:e5:75:7b:fe:47:c1:ea:b4:
2d:e3:95:7b:31:2a:01:b9:5b:86:ec:e2:8f:31:04:f6:1e:6c:
f2:f9:5a:80:48:1e:6a:76:18:4b:e1:f6:a5:60:82:08:52:b3:
79:c5:dd:53:9d:bb:3e:49:7d:4e:35:fe:95:54:ec:a3:8c:f0:
ed:94:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:14 2026 by rpki-client