Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json)
Hash identifier: NpYhY15zH7fE7v9N3ALOIzcvD4+r+GS+9bhzaTmv05A=
Subject key identifier: C2:D4:2B:CF:2C:D1:83:BD:09:A5:B5:25:D4:55:A9:BD:F5:1D:83:E7
Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445
Certificate serial: 019DD0515864D1665A13181278D6F2632C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
Manifest number: 0A39
Signing time: Mon 27 Apr 2026 19:01:25 +0000
Manifest this update: Mon 27 Apr 2026 19:01:25 +0000
Manifest next update: Tue 28 Apr 2026 19:01:25 +0000
Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: kVHFIjpex7viaKRsnqZn7ky5kiB9mRjw7S5ueimwsc8=)
2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:58:64:d1:66:5a:13:18:12:78:d6:f2:63:2c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445
Validity
Not Before: Apr 27 19:01:25 2026 GMT
Not After : Apr 28 19:01:25 2026 GMT
Subject: CN=c2d42bcf2cd183bd09a5b525d455a9bdf51d83e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:89:c9:ac:1c:79:2d:99:22:b1:f2:04:84:
52:88:8a:24:a3:bd:70:39:5c:49:f3:06:09:95:e2:
ba:ca:bc:4a:8c:90:6d:1a:36:c4:c1:1e:29:5a:42:
92:7a:f4:b6:f1:d1:ef:fe:cc:7e:cd:85:b7:5c:1a:
1e:96:00:96:5c:6a:02:e6:1b:17:86:af:e5:0e:08:
7f:17:db:26:f4:87:f2:6a:97:a6:45:ae:88:3c:fc:
f0:33:fa:8c:61:c0:f1:d7:42:fd:4b:a2:1a:e9:1f:
7d:da:06:cb:12:43:7c:4d:1a:a7:bb:7e:9d:a3:51:
1f:22:3d:45:4e:e6:9f:26:33:0c:59:cc:a4:aa:f8:
e2:fa:26:86:52:f4:3e:a9:fb:e0:e9:6a:3f:89:0c:
d7:33:72:2e:82:30:a4:da:9b:9a:2d:db:ba:95:ab:
80:dd:fd:f7:9e:87:12:b4:f4:3d:65:5e:be:27:39:
1f:fa:e4:35:16:5c:79:55:0c:f0:89:4c:21:e4:7b:
e2:ae:86:ec:13:bc:ea:cd:e3:3d:60:4a:25:bb:6f:
89:26:e0:d6:45:22:1e:04:f4:32:3b:38:9f:a6:38:
c1:f3:c5:e8:e5:6e:fc:b1:70:85:db:ab:78:b0:98:
c8:c4:1d:6f:cd:0a:4b:be:ca:a1:ef:97:1a:10:01:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D4:2B:CF:2C:D1:83:BD:09:A5:B5:25:D4:55:A9:BD:F5:1D:83:E7
X509v3 Authority Key Identifier:
keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c3:cd:bc:18:2b:03:43:6e:76:60:0d:c8:21:ef:c1:23:15:
a2:6f:7b:a8:98:fc:ca:f7:17:64:1d:c0:f6:51:9b:1d:fb:32:
06:85:14:5d:d7:38:93:75:a1:0a:f8:85:e4:28:7c:a3:81:36:
0e:5a:4c:72:b8:3a:84:34:e0:04:d1:7d:96:e5:b2:3a:1b:78:
86:1b:a5:d9:98:de:7c:b5:f6:57:3d:0b:9e:2f:db:e2:c3:47:
68:cf:7c:b4:e6:a1:84:7d:e1:d9:56:20:80:83:2d:cc:0c:10:
c4:52:1e:0b:4b:35:0a:37:21:26:7e:aa:b3:cb:68:30:92:32:
30:05:0d:21:22:97:00:e3:64:bd:3a:4e:8a:64:32:4d:9c:b4:
69:7f:6e:bb:d3:f4:fc:a0:38:79:fd:d7:a6:36:d2:bb:82:54:
0b:53:94:21:95:97:2a:2f:7f:6d:6b:e7:79:09:3e:64:c7:89:
fc:07:0e:93:56:ac:af:71:9a:8d:54:e0:59:90:1e:b8:48:59:
a1:68:71:1e:89:ac:17:e6:a1:86:eb:8d:07:37:cf:68:fc:37:
5c:e8:f9:d1:86:20:29:e1:30:5b:47:34:60:56:b2:6f:82:8d:
db:14:d6:b9:4e:4f:45:45:e5:1a:7b:00:7b:80:aa:ed:90:6d:
36:e2:8f:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QUVhk0WZaExgSeNbyYywRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl
NTc0NDUwHhcNMjYwNDI3MTkwMTI1WhcNMjYwNDI4MTkwMTI1WjAzMTEwLwYDVQQD
EyhjMmQ0MmJjZjJjZDE4M2JkMDlhNWI1MjVkNDU1YTliZGY1MWQ4M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZCJyawceS2ZIrHyBIRSiIoko71w
OVxJ8wYJleK6yrxKjJBtGjbEwR4pWkKSevS28dHv/sx+zYW3XBoelgCWXGoC5hsX
hq/lDgh/F9sm9IfyapemRa6IPPzwM/qMYcDx10L9S6Ia6R992gbLEkN8TRqnu36d
o1EfIj1FTuafJjMMWcykqvji+iaGUvQ+qfvg6Wo/iQzXM3IugjCk2puaLdu6lauA
3f33nocStPQ9ZV6+Jzkf+uQ1Flx5VQzwiUwh5HvirobsE7zqzeM9YEolu2+JJuDW
RSIeBPQyOzifpjjB88Xo5W78sXCF26t4sJjIxB1vzQpLvsqh75caEAFHZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLUK88s0YO9CaW1JdRVqb31HYPnMB8GA1UdIwQY
MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt
ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw
LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMPNvBgr
A0NudmANyCHvwSMVom97qJj8yvcXZB3A9lGbHfsyBoUUXdc4k3WhCviF5Ch8o4E2
DlpMcrg6hDTgBNF9luWyOht4hhul2ZjefLX2Vz0Lni/b4sNHaM98tOahhH3h2VYg
gIMtzAwQxFIeC0s1CjchJn6qs8toMJIyMAUNISKXAONkvTpOimQyTZy0aX9uu9P0
/KA4ef3XpjbSu4JUC1OUIZWXKi9/bWvneQk+ZMeJ/AcOk1asr3GajVTgWZAeuEhZ
oWhxHomsF+ahhuuNBzfPaPw3XOj50YYgKeEwW0c0YFayb4KN2xTWuU5PRUXlGnsA
e4Cq7ZBtNuKPfg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 22:31:08 2026 by rpki-client