Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
File: 470BQW0GPp8si7MOunJUmJ1oyl4.mft (raw, json)
Hash identifier: /QjSs9LQd8sEPLKSBmVnga5OBPuXORAYfg2q3arKgJ0=
Subject key identifier: 90:BC:0E:0E:D7:75:6D:5E:02:AD:6E:B9:BC:FA:03:EA:2D:17:2D:2D
Authority key identifier: E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
Certificate issuer: /CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Certificate serial: 019F905A3656712C40B3D7DD78568639D2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
Manifest number: B3
Signing time: Thu 23 Jul 2026 19:00:59 +0000
Manifest this update: Thu 23 Jul 2026 19:00:59 +0000
Manifest next update: Fri 24 Jul 2026 19:00:59 +0000
Files and hashes: 1: 470BQW0GPp8si7MOunJUmJ1oyl4.crl (hash: A6r0feVE5aES7HgPvp4lgvxb+DdTCzPM7cqeElp4y0g=)
2: pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa (hash: KCyynhPI7ik936knmtF7PX4p6nVsyuU0oUPtdUxG/Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:36:56:71:2c:40:b3:d7:dd:78:56:86:39:d2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Validity
Not Before: Jul 23 19:00:59 2026 GMT
Not After : Jul 24 19:00:59 2026 GMT
Subject: CN=90bc0e0ed7756d5e02ad6eb9bcfa03ea2d172d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:59:64:53:85:b4:61:71:a2:a2:4e:7c:ee:
de:74:91:b3:9f:a8:b4:b7:01:ad:12:c1:9f:fa:73:
fd:41:3e:ed:ac:4d:59:04:f9:6d:1e:a1:88:07:5f:
79:ef:4e:cf:dc:bc:fe:d1:b6:4d:96:50:b3:7f:78:
2d:3b:56:27:65:83:3b:4e:5a:e2:ac:4c:ef:84:82:
fd:68:47:f8:0a:c8:a5:ab:10:db:76:7e:0a:a1:62:
4b:0d:6a:0d:f9:d8:6f:7d:5f:0f:c2:da:0e:be:e0:
fb:e8:fb:3a:af:f8:29:b1:bc:ec:b1:2d:53:bb:c0:
4c:fb:cf:92:e0:ba:d0:81:b4:6b:25:b3:43:ed:f7:
c9:cb:ff:8a:ce:f2:41:c0:00:1e:01:cd:a3:f0:9c:
e9:74:d4:38:65:ba:5e:00:0f:3a:a8:49:53:3f:9d:
50:28:e5:d9:6e:fc:69:81:0a:c2:7f:02:99:d1:4d:
b4:20:fd:cd:89:1d:4e:9d:50:58:a7:02:67:1e:36:
38:c3:90:33:ba:09:8e:be:65:33:ac:73:20:d9:82:
b8:d9:95:ac:d9:dc:77:ad:54:b7:9a:d1:71:92:ac:
ae:0e:56:88:00:9c:6c:1c:d2:69:27:dd:c9:3d:0d:
5c:c7:47:cd:cf:28:56:c3:68:c3:8d:4f:51:67:27:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:0E:0E:D7:75:6D:5E:02:AD:6E:B9:BC:FA:03:EA:2D:17:2D:2D
X509v3 Authority Key Identifier:
keyid:E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:09:23:2a:e4:ea:80:2c:be:be:65:df:73:f4:ff:1d:a3:d3:
ee:13:58:c5:c4:12:ed:47:0b:d3:31:2f:16:5a:07:b1:08:e8:
90:ad:9b:8c:71:f4:58:e6:7a:f1:ec:92:ca:2f:9a:d9:f4:26:
19:63:3d:31:bb:9e:7f:9f:56:fe:3d:36:01:f0:1f:cd:a2:2f:
2f:02:d3:03:b6:d8:1c:c4:48:08:a4:01:f0:73:83:a2:ad:0f:
06:a9:08:68:2b:bd:a0:2d:07:e7:0c:cb:47:a3:e0:cd:93:e9:
2e:c2:fa:25:db:c4:ea:e1:07:d2:15:54:af:c6:24:14:cc:68:
a8:82:a0:88:51:e4:bf:0f:60:6a:e0:29:4d:41:3b:d8:5e:96:
a4:6c:2c:8f:6a:61:7f:f9:e2:ba:5b:d5:45:dd:65:5e:3d:c8:
92:09:7d:d9:50:bb:2a:62:59:24:13:e2:0b:77:49:83:65:87:
48:c7:8a:0d:b5:3d:9b:b4:21:b4:77:14:99:5b:7f:7e:20:23:
2c:31:b3:c0:67:b9:be:23:3c:a0:aa:74:5e:f6:d8:67:41:79:
24:bd:ac:de:2e:94:e0:45:31:7e:35:ed:78:ce:36:5f:4e:d5:
54:ce:84:37:f6:e8:38:36:44:a4:0f:ce:99:5f:2d:c8:bf:e2:
42:76:9d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:51 2026 by rpki-client