Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File: B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier: E2EFjC/mzSxOKjLEgZkPRomWvXI+IjuwY4cxulKFgd4=
Subject key identifier: 02:6D:F9:C4:A6:B8:C9:D7:A1:6C:57:A8:47:40:4F:D5:53:E9:0B:7D
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer: /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial: 019D3940769D075311598500D2FCF044284D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:19 +0000
Manifest this update: Sun 29 Mar 2026 11:00:19 +0000
Manifest next update: Mon 30 Mar 2026 11:00:19 +0000
Files and hashes: 1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: WkriS0hzXfakIi7ZabCl1JrVQ33XuiUtKr4/Hjs6P+E=)
2: UiYKZv_nf6g6lMuEagnSGv0kAAw.roa (hash: PTK0hI3EFperuvKBPntydYLK0hdElxooN2h+y17nzk0=)
3: YXSgyUgUnB863rJPTcWCW7mGwFc.roa (hash: V1Uuys2uya26ArEHIls/PYBVdC0Vm3sFwdUGRo5ZhTA=)
4: lMQfwH-V7Yhd6sNgC8BpN5Ho3vc.roa (hash: 80PQfjBzEobkUlg1u1KjDZCEtHTRyd3Qm3q0fmEsPoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:76:9d:07:53:11:59:85:00:d2:fc:f0:44:28:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f2a175be20108641c649553213f212511667a5
Validity
Not Before: Mar 29 11:00:19 2026 GMT
Not After : Mar 30 11:00:19 2026 GMT
Subject: CN=026df9c4a6b8c9d7a16c57a847404fd553e90b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:ef:21:29:26:dd:92:e5:c1:6e:55:d9:1d:
c3:15:2a:a4:01:52:fd:f8:5e:d6:94:40:66:62:4b:
0a:29:31:e3:c6:56:c7:ab:39:52:4d:64:7b:e8:90:
fa:87:14:30:c5:93:a9:38:2b:cc:1e:98:e8:4d:72:
db:43:61:dd:0e:97:aa:23:4e:e8:d6:97:ac:b8:13:
36:7a:7c:f4:fa:99:ed:fc:67:ed:5b:7a:92:93:71:
fa:5e:51:30:10:a5:6f:9b:0f:4f:81:77:00:f8:ed:
34:0e:c5:06:99:38:ea:2c:c8:65:8e:94:90:bd:4f:
c3:79:94:01:a0:4d:57:ce:6e:aa:58:a3:0b:af:7e:
7c:6c:7f:cd:38:49:36:07:34:01:69:e0:27:2c:68:
87:81:cb:b0:bb:4e:ed:d9:d3:94:f3:b2:94:23:f6:
b5:56:93:01:38:d0:4c:09:25:98:81:2e:24:41:21:
a1:5b:ed:1b:39:61:9c:20:41:f0:97:e3:ba:5b:af:
fb:bb:64:68:12:3b:96:07:98:cf:30:24:6b:93:09:
5d:02:f6:f5:20:69:fa:76:5c:ab:04:14:71:d9:cf:
47:04:03:8e:bc:e3:f6:06:07:a1:66:93:79:f8:6d:
02:7c:50:28:9f:7a:c2:8e:72:bc:93:0e:3b:82:ca:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:F9:C4:A6:B8:C9:D7:A1:6C:57:A8:47:40:4F:D5:53:E9:0B:7D
X509v3 Authority Key Identifier:
keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fd:2c:b0:ab:fc:30:ff:14:54:73:6e:9f:d6:5a:d3:21:de:
fe:86:bc:c1:e1:f3:0a:da:fb:c0:82:6f:12:13:3e:2e:53:54:
81:8e:ad:1d:43:86:d2:09:40:b5:22:90:ea:b2:af:df:fc:51:
90:06:61:32:af:b5:a5:f4:b5:80:88:2e:ba:1d:cf:c3:a0:4c:
ca:a7:29:81:94:34:53:b5:3f:26:76:a0:c2:f3:83:bf:27:86:
4c:ee:c4:c2:a1:de:c1:2d:4f:10:aa:d4:d6:c1:cf:a0:2f:03:
88:5a:4b:cc:a5:ed:24:ec:d9:74:5e:49:8a:5b:ad:0f:15:ba:
7f:09:97:3b:19:92:45:59:54:b4:e1:46:16:17:5e:9f:eb:dd:
60:b3:d1:c3:47:bd:04:9e:2d:97:6a:89:9b:22:2f:0e:fb:33:
88:79:94:d2:c6:3d:c7:b7:de:b3:c8:48:ed:71:a4:3e:19:21:
c6:bd:0e:92:db:04:56:90:13:7f:ca:37:ff:8c:7b:9f:02:3a:
89:ec:ce:c3:b0:52:bc:7e:ef:c1:0c:7b:5f:5c:ea:e0:27:98:
07:05:b2:13:ba:09:47:40:b3:7a:d8:9a:74:79:15:70:41:4c:
60:6c:98:1b:b3:79:94:1b:3e:ea:82:13:c7:9a:16:5c:6d:ab:
b1:61:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:26 2026 by rpki-client