Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
File: B0BT0c-25_2HUE_jF1FYOQHnuME.mft (raw, json)
Hash identifier: hGLCJWnzH8XCsCTX3yk2FRcNxLBXRboAtNeL8Vm/hW8=
Subject key identifier: 5E:F6:8B:E3:31:2F:29:DF:FE:4D:29:43:0B:0B:2B:07:0E:18:F7:2D
Authority key identifier: 07:40:53:D1:CF:B6:E7:FD:87:50:4F:E3:17:51:58:39:01:E7:B8:C1
Certificate issuer: /CN=074053d1cfb6e7fd87504fe31751583901e7b8c1
Certificate serial: 01A0401729729C3D780A806A0BCDF8308160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0BT0c-25_2HUE_jF1FYOQHnuME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 22:00:54 +0000
Manifest this update: Wed 26 Aug 2026 22:00:54 +0000
Manifest next update: Thu 27 Aug 2026 22:00:54 +0000
Files and hashes: 1: B0BT0c-25_2HUE_jF1FYOQHnuME.crl (hash: yhaG3mWz1idBu6zksSlrRWwEwl+62Dd/6RX/aYv52MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0BT0c-25_2HUE_jF1FYOQHnuME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:29:72:9c:3d:78:0a:80:6a:0b:cd:f8:30:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074053d1cfb6e7fd87504fe31751583901e7b8c1
Validity
Not Before: Aug 26 22:00:54 2026 GMT
Not After : Aug 27 22:00:54 2026 GMT
Subject: CN=5ef68be3312f29dffe4d29430b0b2b070e18f72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:b5:4d:c1:a7:57:1b:51:32:89:40:ff:da:
ae:c4:32:08:52:c9:1a:51:18:8e:51:53:0a:d0:93:
54:0b:cb:1e:4e:b3:0e:ef:e3:05:37:d1:a0:5e:6c:
f7:c7:b4:39:70:62:52:a4:fd:dd:c9:4c:53:9e:28:
48:8e:9a:5a:78:18:42:fd:25:b8:b5:3d:90:86:6a:
a3:f3:77:d9:c6:4e:58:ae:46:ac:22:23:2b:e1:90:
dc:56:34:eb:4f:e0:bc:35:5a:90:18:54:0c:d0:10:
62:a8:ee:93:f8:b2:3c:9d:f6:88:cf:52:39:19:6e:
41:b4:80:06:3e:6c:9f:df:42:01:66:45:61:4e:7f:
be:d7:5e:69:9a:bc:64:48:8e:05:4d:8a:58:eb:ce:
25:da:77:d0:cd:f6:02:11:f8:8f:65:53:03:11:35:
c7:1c:b1:fe:ce:b6:99:26:c1:dc:05:e1:6b:c5:a5:
d6:7f:5f:b0:0e:eb:ea:ff:67:eb:79:12:40:0e:16:
60:63:37:fe:11:c9:f8:9a:87:31:83:99:e1:37:6d:
ef:d7:b8:c5:65:0a:64:e3:b4:1a:63:89:c4:f2:82:
2b:73:35:f4:1a:00:09:97:f3:e9:51:ce:20:4f:c1:
48:4e:63:c1:68:a9:63:22:80:7f:15:15:77:af:0c:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F6:8B:E3:31:2F:29:DF:FE:4D:29:43:0B:0B:2B:07:0E:18:F7:2D
X509v3 Authority Key Identifier:
keyid:07:40:53:D1:CF:B6:E7:FD:87:50:4F:E3:17:51:58:39:01:E7:B8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0BT0c-25_2HUE_jF1FYOQHnuME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f58cf3-6909-458a-a51a-5914f9d3378b/1/B0BT0c-25_2HUE_jF1FYOQHnuME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:71:eb:65:8f:c6:c5:35:37:ae:b6:82:95:dd:38:12:79:5f:
31:24:89:29:0f:26:e0:31:47:f7:59:58:dc:bc:d8:79:2b:f4:
0c:96:c2:76:23:af:dd:6b:ed:8a:4a:b1:4b:39:76:38:37:b5:
cc:18:31:62:67:2d:07:34:e0:2e:4f:a7:bd:16:80:6b:37:9b:
5b:fd:72:64:b2:f3:07:36:ec:ae:c0:ee:11:c4:98:b3:10:11:
6f:80:53:86:d6:b7:35:1b:94:6b:cc:32:2a:cf:64:ba:ba:e6:
70:3a:09:60:28:f8:dd:d1:dd:ad:8a:62:c0:8c:07:c9:90:b8:
fe:4e:5d:5b:ea:bd:7a:58:5a:b5:44:5f:8b:77:d7:a5:db:05:
b4:9b:53:78:cd:ea:ce:7b:e9:bc:4c:f8:a3:3e:84:e7:ae:ce:
94:54:ce:1e:d1:62:d9:f7:c7:db:b4:42:e3:c3:a2:0a:90:3b:
5f:cf:f8:2b:d9:d2:91:9d:60:6d:8c:aa:5c:33:d4:b3:01:ca:
c7:71:13:b1:e7:60:88:b1:f9:c2:fd:8a:0f:9c:30:2d:6b:b6:
ff:ad:2e:6d:84:f0:88:b2:41:32:6f:bd:0d:71:29:ab:89:81:
a8:a9:ff:25:41:10:a7:30:24:a6:32:93:84:cc:8b:22:27:66:
95:e4:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:28 2026 by rpki-client