Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
File: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft (raw, json)
Hash identifier: UF3+WMPwIWYjpDaMLOFznHBK5Fj0gqeyRTVbaF8nU0g=
Subject key identifier: CA:8E:F6:AF:93:E0:2E:39:09:B6:73:5C:BB:9D:56:DF:7B:03:2E:CE
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Certificate issuer: /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial: 019D389BCC28D07C97475BEE5945BA93F8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
Manifest number: B9
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl (hash: cGoJCa7p6u/g3To2qCn3jNbykgPs8jG88sUHo8OZuAQ=)
2: M3cij6CcBvj7hcRt6vLnIO0jqfM.roa (hash: Nx+0gfLrWoVhxt8BGvvUFMWp0qwsFwKGJrVnSSE/5Yo=)
3: ZXtAvGieZF0UNxjzkMUWW7L33Fg.asa (hash: IfrPVXvXZXPI5Bs8Ll1fYOxjNpHmlPmR4BZz8+zT3CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cc:28:d0:7c:97:47:5b:ee:59:45:ba:93:f8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=ca8ef6af93e02e3909b6735cbb9d56df7b032ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:97:2a:75:64:8c:1d:7b:69:bc:15:3d:0e:
f2:be:44:99:fd:9d:43:24:83:a6:8a:c7:6b:ec:96:
cb:b5:94:24:38:9a:2a:89:0c:6a:61:f8:cb:5c:f5:
24:a4:fc:be:cf:07:3e:58:85:00:16:85:ae:81:23:
c7:cc:3c:10:1c:13:45:e2:1e:36:3f:02:d9:17:dd:
94:ec:f7:77:ab:24:07:f4:58:64:8c:c0:19:ff:78:
ab:b1:89:c5:19:15:eb:cb:46:ef:b5:f5:1c:a3:a0:
1c:e5:59:47:36:58:49:60:c7:16:ad:2f:8e:33:d4:
93:e1:4b:8e:ce:ad:57:70:78:cf:58:33:e6:09:85:
9d:fc:fc:0c:e6:ff:f9:30:9c:82:2e:e5:62:83:76:
7c:3b:34:25:88:1f:1e:eb:ba:3f:87:3c:1d:8e:6c:
c2:43:f5:84:67:38:9d:bf:ca:a5:33:e9:11:f9:9f:
87:e7:91:24:fb:25:33:f1:73:09:8d:11:81:65:e1:
52:7a:d4:88:03:55:00:d9:b2:8b:13:88:8f:22:ca:
a5:41:a7:de:f6:30:d4:3f:d7:af:de:27:56:0f:be:
7f:97:9e:3c:3d:27:ce:f7:cf:48:17:99:06:13:45:
f7:99:9d:57:cf:84:cf:d7:1d:df:b3:11:f0:24:2f:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:F6:AF:93:E0:2E:39:09:B6:73:5C:BB:9D:56:DF:7B:03:2E:CE
X509v3 Authority Key Identifier:
keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a5:9f:32:52:ee:c2:8b:a2:7b:1b:ff:b4:d6:b1:b8:8e:ce:
3a:c0:9f:0a:d3:8e:ce:0d:6d:4a:fa:ae:2b:e3:4a:c0:a1:7a:
52:09:14:0b:86:56:b9:51:e6:48:d7:b7:d3:93:9f:82:97:a2:
e3:64:11:25:d9:2d:65:ea:56:5f:7a:fb:c8:be:39:2e:4b:4c:
90:45:22:00:10:4b:b8:5f:96:49:75:ca:2f:07:2a:4e:c3:b7:
63:16:f8:cd:3d:2b:93:0c:16:c4:17:07:f1:1c:07:2b:d3:ae:
7f:26:95:a5:5f:6b:bc:32:00:4a:7e:99:dc:f3:64:c3:96:30:
40:b4:e4:79:47:3e:ab:19:17:e7:ca:c5:3e:6f:e2:06:8f:7e:
86:48:4c:d4:f7:5e:1a:e6:10:ef:d1:05:2e:1c:4c:6e:63:df:
0a:67:e6:86:fe:a4:59:10:1e:c4:1e:3a:c1:20:5f:b5:ac:6c:
4b:1a:d8:6c:e5:92:4e:1e:fc:41:51:49:ca:aa:a2:d9:64:ff:
c9:22:06:ab:ed:c8:64:b0:1b:b6:5d:c5:42:87:70:98:c2:df:
63:a3:37:54:a3:c9:a9:84:ea:4f:b9:61:a4:9a:14:43:58:b3:
50:16:ef:32:f9:3f:c3:b9:30:d1:ad:ca:45:49:18:76:41:c4:
8b:ab:e5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:52 2026 by rpki-client