Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
File: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft (raw, json)
Hash identifier: MqmG7rWEexd3Eg63AaigqWHtovKqi9kjywWG7u0B2eM=
Subject key identifier: 7B:BD:9D:4C:C7:4B:5C:A6:71:38:E6:CD:37:B7:D0:F0:6E:38:F0:12
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Certificate issuer: /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial: 01A03FA9FA1CF402692BC2195A69743589D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
Manifest number: 024C
Signing time: Wed 26 Aug 2026 20:01:39 +0000
Manifest this update: Wed 26 Aug 2026 20:01:39 +0000
Manifest next update: Thu 27 Aug 2026 20:01:39 +0000
Files and hashes: 1: 3ClflYOCERr_Ro48IStxxlR6OkE.asa (hash: yUYnf8vfvP0dW5+JLs6OxQVLMfM3//FHX+mPYuLeYgU=)
2: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl (hash: Q98zHubQQAO88hlBgODi/m04zjfXX0aZaf0RYDZT6uA=)
3: CTiIYG5Z0i8NFD9GTIvIRbIzJQ8.roa (hash: lHylF9jTQy3B30h+EVJ1w8Da80DIiicRD5M1TS3mYr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:fa:1c:f4:02:69:2b:c2:19:5a:69:74:35:89:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
Validity
Not Before: Aug 26 20:01:39 2026 GMT
Not After : Aug 27 20:01:39 2026 GMT
Subject: CN=7bbd9d4cc74b5ca67138e6cd37b7d0f06e38f012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:80:24:5e:d2:33:f8:bc:84:80:c1:5b:16:00:
bf:8d:7e:6a:52:ec:c8:8f:f9:37:2f:1f:69:67:fb:
41:21:de:5e:fd:4a:74:0c:4a:60:5d:af:9e:c2:2d:
64:a7:47:fc:22:26:2f:dc:a3:42:02:37:48:76:4c:
b0:24:06:d7:5f:b5:9d:56:f1:8a:20:12:60:41:56:
28:21:22:1b:40:9e:3a:83:5d:f6:c0:59:15:86:0b:
63:79:2a:15:51:5a:31:66:f9:a1:49:27:ff:39:0c:
11:bc:21:46:71:61:6a:37:bd:49:6f:6d:03:1f:5f:
00:ac:b6:35:e3:26:38:d9:00:da:6b:ac:49:30:a0:
b9:3a:c0:2a:9d:e3:fe:c2:3d:e5:d3:ac:6c:0a:1f:
60:6b:f6:49:5f:8b:2f:e1:41:67:cd:73:99:41:44:
2b:ae:67:76:91:48:2b:fe:d1:8e:06:b2:69:02:35:
af:99:b9:59:83:85:7c:b2:fc:02:35:8e:4e:b6:7a:
84:52:8a:b3:bc:d4:25:8f:52:5d:ff:c0:60:90:46:
98:43:e1:39:02:79:5d:c8:e9:a9:ab:f4:d7:1c:32:
45:7e:92:f5:12:72:73:ee:e0:5e:53:a7:b4:03:eb:
a3:6f:15:66:fc:02:35:dc:a3:3a:1f:ba:a7:9c:62:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BD:9D:4C:C7:4B:5C:A6:71:38:E6:CD:37:B7:D0:F0:6E:38:F0:12
X509v3 Authority Key Identifier:
keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:1c:00:63:27:f0:2e:d4:4a:8a:2a:c3:d1:52:37:16:c8:b6:
5f:b8:c0:e9:c6:93:3e:da:e5:20:f5:17:13:82:31:67:94:6c:
4c:69:0e:41:a6:8e:6f:be:9b:18:3a:1d:db:e0:30:f6:3a:5d:
a4:60:bb:a7:bb:14:ab:0c:fd:6e:8a:73:64:8c:54:be:0b:ee:
b7:86:28:fe:27:1b:f3:a5:16:7b:e0:f4:97:ac:ef:c3:36:11:
35:e2:23:15:d7:bb:ea:f4:d7:cc:49:1b:50:7f:a6:0a:a8:50:
61:ec:f9:70:65:d4:32:c9:bf:c0:c8:fb:53:fd:7c:e8:44:54:
5d:4a:45:e8:64:50:bb:90:f7:90:e4:99:eb:e9:58:b6:c3:61:
c5:12:5c:b0:aa:81:e0:e6:77:c3:56:83:c1:11:5f:f6:03:68:
c5:f6:e8:b1:e2:c8:b5:c8:60:b9:8f:84:de:81:bf:65:84:12:
76:b9:dd:f0:69:30:94:fc:7c:62:d1:94:c1:55:98:0c:0d:c1:
8a:f4:d9:88:15:0b:fd:a3:c1:96:70:5c:17:62:50:52:a0:ed:
2e:48:de:9b:0d:fe:a4:6a:06:42:69:1c:c1:5f:a4:0b:46:ce:
49:78:5f:0e:32:5c:77:30:f9:ed:54:dd:76:bf:76:f1:65:b9:
1a:8e:9e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:28 2026 by rpki-client