Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier: Nz1jnHdAdC8z0Nhi9lFq+hmi9kqhCfTacsGdJnJHmXI=
Subject key identifier: 42:AF:81:D6:1C:A8:A6:78:75:2E:98:53:7D:B3:40:C4:DA:FE:A5:E0
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial: 019D39415FB728CC1DE0359A711202AB9FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number: 0F73
Signing time: Sun 29 Mar 2026 11:01:18 +0000
Manifest this update: Sun 29 Mar 2026 11:01:18 +0000
Manifest next update: Mon 30 Mar 2026 11:01:18 +0000
Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: qBbIIEUEXokJSPXVszoqtD0+Kwpr8XzrzeHiL07wOtc=)
2: mXvHGytm_d-ZmmjoABMVc3yVsds.roa (hash: yE1KIjBpAWB8h1LtfkwyNXpw6sG5nRfdWFiNpWMDlR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5f:b7:28:cc:1d:e0:35:9a:71:12:02:ab:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Validity
Not Before: Mar 29 11:01:18 2026 GMT
Not After : Mar 30 11:01:18 2026 GMT
Subject: CN=42af81d61ca8a678752e98537db340c4dafea5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:b2:7f:15:6b:b4:bf:e5:1a:c0:85:40:1e:
e8:b4:0b:3c:2f:85:c6:17:f0:d8:ea:0f:eb:90:a9:
0b:50:b3:66:83:d1:d4:52:03:42:c1:9a:8b:73:34:
c2:53:6a:db:d5:68:1f:53:06:b0:d4:7f:72:ef:03:
85:a8:1d:b6:21:5f:c9:0f:c9:ae:b3:50:89:05:f7:
72:a8:4f:65:2e:e1:43:db:d7:dc:a5:43:4c:ef:f8:
74:24:61:a6:62:4c:d5:ae:0a:de:57:5b:60:82:9e:
51:6d:fe:bc:6d:8c:f8:86:31:6c:cf:82:65:09:30:
ae:d3:95:ce:2b:25:a3:a2:36:e7:56:7c:c4:9a:67:
33:cc:54:e6:b3:22:74:aa:fb:59:76:68:d2:21:19:
16:3b:3b:6e:ec:0b:8a:81:76:17:de:e5:e8:50:cb:
31:e5:1e:8a:06:72:61:c5:fb:cc:2e:15:fe:25:4f:
89:a9:9f:1f:63:8f:ae:08:a0:17:34:07:69:6a:93:
48:0c:52:db:77:3e:bf:77:db:2e:f7:b1:a6:57:11:
fd:bc:e5:06:1a:2a:45:bc:02:67:b8:0a:79:79:15:
6f:1a:30:2f:35:ad:24:66:db:2b:d6:13:22:b8:30:
7f:6c:b8:16:ac:ec:8b:b2:bc:4e:5e:09:e1:27:ee:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AF:81:D6:1C:A8:A6:78:75:2E:98:53:7D:B3:40:C4:DA:FE:A5:E0
X509v3 Authority Key Identifier:
keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:93:a4:ce:5f:c9:08:f4:88:6c:34:0a:fd:09:7a:81:50:4c:
b3:c9:f4:07:31:0a:8c:65:fd:16:06:65:39:02:8f:b2:ce:03:
9e:ee:64:75:54:57:d2:0a:ec:29:24:ea:4b:c3:01:76:18:59:
c7:b3:43:35:e4:a4:b1:67:18:e8:a2:48:80:46:f4:01:65:82:
3b:48:88:7d:7b:90:19:d3:c8:0e:66:ba:93:5e:48:41:3a:f5:
52:f1:6b:d4:bc:91:75:d6:5b:53:59:9d:a2:00:fd:43:6c:f0:
9a:4e:fd:a0:10:f0:1b:30:a6:33:ec:b5:2a:08:1c:40:a5:58:
e4:56:6c:e9:60:eb:37:f5:78:cd:3b:18:64:94:b5:79:8a:1c:
ef:09:fd:27:47:98:bb:57:f3:3e:eb:cb:35:96:7e:bb:bf:9d:
12:b9:18:a6:f6:4b:b3:ce:b9:71:4f:a1:57:43:c5:5a:08:46:
15:44:88:77:39:35:89:8e:8c:ee:bf:8f:84:5b:a9:7c:ba:a7:
5d:e8:a9:a4:dc:f1:f2:ce:ee:da:1a:10:44:a8:ca:76:b8:b8:
d7:02:04:1b:42:60:06:da:cf:d4:4b:7c:d7:f5:3b:27:8e:a1:
81:82:85:53:d4:5f:70:4e:cb:a4:b0:05:26:c5:8f:14:45:1f:
a8:8c:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:25 2026 by rpki-client