Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: qTDNFhW63zu3pYX624o2O9P5shIYsmb7g+CV8VpQvyA=
Subject key identifier: A3:7F:2C:94:C6:0D:64:1E:EF:22:C4:B2:D6:9B:D5:05:D9:52:15:03
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 01A17CCEA72F5B3CD99431A8135EED7762D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0C20
Signing time: Tue 27 Oct 2026 10:01:20 +0000
Manifest this update: Tue 27 Oct 2026 10:01:20 +0000
Manifest next update: Wed 28 Oct 2026 10:01:20 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: z3JRnz/E0k3eoLVYDKMEPSVPHaQBaiH2+6hFAgm8c0E=)
2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:a7:2f:5b:3c:d9:94:31:a8:13:5e:ed:77:62:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Oct 27 10:01:20 2026 GMT
Not After : Oct 28 10:01:20 2026 GMT
Subject: CN=a37f2c94c60d641eef22c4b2d69bd505d9521503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:e3:49:2b:d7:6d:ee:9b:1a:25:08:b7:e2:
46:bd:07:0f:5a:fa:65:52:96:ed:9e:e5:14:76:30:
64:41:c6:5b:f5:6c:59:8a:79:3f:ad:64:90:30:43:
a0:de:c5:2b:4a:e2:8e:fc:c1:61:9b:1b:96:2b:a2:
d5:68:7b:06:5a:e4:1c:8d:9f:78:57:42:37:2b:a2:
2c:f3:5c:5e:84:26:38:f7:67:6f:ff:10:16:2b:11:
12:b2:5d:ca:59:5c:31:f6:cd:fe:87:8a:09:f5:a3:
70:c9:7b:8c:d5:1d:59:87:36:90:38:6f:1a:26:d7:
c8:10:80:70:c6:86:63:b3:2d:d9:df:cd:f5:3d:8c:
14:e4:84:68:35:4d:d9:e9:45:33:3c:52:a1:4d:ae:
51:2a:86:5b:7e:aa:9f:13:68:bd:37:de:9e:fb:a2:
54:9f:9e:ec:77:2d:c1:ae:d9:d5:8d:c3:f2:0f:60:
72:0d:00:36:01:bb:d1:2d:e1:bb:81:66:03:c4:f9:
73:28:0d:ce:ce:e2:19:33:6b:9f:d1:14:c8:c1:7d:
bd:c8:72:08:4b:1e:85:9b:45:38:fc:12:a9:51:45:
4a:87:d2:0a:6f:0b:1b:61:3a:ff:82:96:7d:59:b4:
70:c7:68:ca:d0:76:46:5b:4f:b2:d8:50:80:06:ea:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:2C:94:C6:0D:64:1E:EF:22:C4:B2:D6:9B:D5:05:D9:52:15:03
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a1:ed:fd:ec:b6:dc:56:a9:93:26:bf:93:ef:2c:94:b8:e2:
63:fa:31:f4:69:af:7f:bb:b5:a4:86:87:d1:8f:b7:0f:44:4b:
1c:f9:8c:ba:28:fa:06:8f:22:be:71:6b:38:2a:e4:12:b2:30:
36:9d:bc:a7:54:94:cf:22:f2:0a:7b:6b:b4:46:17:ac:5b:17:
14:7a:fe:7b:fb:45:76:4e:41:a4:4c:12:d6:93:a3:d6:b5:45:
28:54:03:09:7f:19:a9:2b:08:51:69:3e:30:f7:13:29:af:2d:
d2:27:9e:0a:48:ac:85:1b:fe:e3:99:6d:b2:5e:c3:0a:0d:1b:
fa:55:ea:20:9a:bf:a7:99:38:bb:07:68:b6:b5:b3:d9:c8:ea:
75:14:b7:20:45:ed:d5:dd:33:41:01:d8:4d:f0:51:54:ff:3c:
b3:26:1d:d3:c9:5b:3c:d5:e8:13:c5:07:ea:23:e1:56:bd:8a:
f5:44:e5:40:9d:2d:3f:22:d1:89:41:2d:6b:2f:cd:44:55:ac:
4b:a2:c7:04:65:54:66:c8:54:ec:2c:dc:5f:7f:7c:4f:5d:87:
da:d6:36:7c:8b:21:d0:52:92:ee:30:4f:1a:45:94:fc:c7:45:
62:1e:df:a6:2a:52:63:78:37:42:83:06:68:5d:67:8c:44:fc:
6e:c4:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:07:28 2026 by rpki-client