Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier: 6PigwcGezgDRNH0xIXJu95B/7A3RLV8D6Diz9y4WGDI=
Subject key identifier: A1:76:D0:63:32:74:AC:79:87:1A:62:78:35:5F:2F:C0:D9:0C:FA:4A
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 019D382E11F35F2EA8ECE3A60B335A448CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number: 1766
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: JkAvXUC3wtNxlyNczUJ8E0Xut1M1dQoL4ZD6iq4p6rU=)
2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:11:f3:5f:2e:a8:ec:e3:a6:0b:33:5a:44:8c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=a176d0633274ac79871a6278355f2fc0d90cfa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:32:cc:b1:a0:94:0d:43:09:bc:0c:19:99:
90:d6:a2:77:3b:f0:82:90:51:dd:7f:58:9f:22:a9:
44:9b:93:c3:f5:91:9f:01:29:b4:f3:3d:63:07:d0:
ea:0f:a9:99:33:8d:0e:18:94:aa:ae:50:d6:9f:19:
94:16:99:12:ac:a1:12:82:b8:fc:71:4f:29:d5:1e:
1e:74:2a:93:46:a7:a1:b4:15:b4:f9:f7:c0:7d:66:
db:3f:e0:4d:95:60:ea:15:57:ac:6f:c0:d8:27:d4:
bd:a5:f8:8c:03:d6:67:f8:c6:83:9b:a0:0c:30:d3:
f8:b3:7a:a3:0d:98:f3:87:f8:6e:8b:ec:45:5f:a1:
85:cd:80:63:92:ed:36:1d:b3:08:2c:64:27:5c:99:
49:53:b1:b2:17:eb:91:21:dc:b5:7a:2c:47:12:38:
af:fb:48:3b:0e:73:4c:1f:86:b8:a0:a7:dc:21:38:
b3:7a:da:83:62:a4:e8:d0:06:0f:bc:af:6b:6a:c3:
77:b2:77:d4:3a:f6:e6:bf:ba:ea:3c:e5:a1:99:05:
e3:d6:d1:ae:38:0c:4e:5c:e6:28:8c:e3:5a:c0:f7:
b5:94:c6:e6:7f:0c:eb:74:31:59:26:a7:ad:7f:4e:
c6:b2:59:16:5c:06:8e:8e:c1:6c:25:5c:fa:f8:ba:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:76:D0:63:32:74:AC:79:87:1A:62:78:35:5F:2F:C0:D9:0C:FA:4A
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7b:35:2b:4e:32:8d:cb:a9:b9:ad:80:bc:60:cc:95:2e:8a:
64:cc:ed:c1:62:fa:09:b7:ab:0c:51:57:75:e6:6a:7a:31:23:
b2:04:cd:1f:28:82:5a:e5:6b:21:6a:c2:f9:7f:22:24:e9:e7:
9f:a3:76:33:71:65:17:8d:aa:8f:80:ec:51:98:7b:95:b8:60:
21:56:20:64:6c:3e:13:33:b3:c6:9d:5c:33:55:91:32:2a:c9:
ae:45:f6:a7:89:55:e9:89:30:53:e0:5a:f2:91:da:7b:ea:2e:
0a:5c:87:e4:24:fd:a1:99:a0:19:03:a3:70:d9:a3:81:ea:f4:
bd:51:06:45:67:93:fb:32:57:65:96:24:5b:37:f8:12:fc:d6:
f7:07:1c:21:ae:25:2d:45:18:55:d4:fa:78:53:96:50:44:52:
5d:e2:9f:75:c3:7a:0b:21:b6:9f:1a:f8:d8:04:41:fe:d7:b1:
32:a0:b4:59:6a:ff:30:97:7f:85:54:05:06:d1:cc:57:f0:bd:
71:09:60:53:b6:b9:31:3f:c5:e8:2d:6e:e6:f4:ff:16:b5:35:
4a:c3:c8:54:8b:4e:43:39:56:d4:e3:53:ed:82:c4:bd:c0:fc:
6c:b0:38:c8:a0:1a:c9:0a:07:f5:b5:20:27:d2:0b:33:56:eb:
23:c1:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:59 2026 by rpki-client