Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: xsezqoQtteKofh/wyKWOGRswsYgD4CGjcZVwmm9CgXM=
Subject key identifier: 3B:94:9A:E5:7E:B5:C7:7F:83:35:C8:4E:93:8C:E3:23:BB:03:CD:51
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019D27A9433854D38BB79AAF728EB77B123D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 11F3
Signing time: Thu 26 Mar 2026 01:01:37 +0000
Manifest this update: Thu 26 Mar 2026 01:01:37 +0000
Manifest next update: Fri 27 Mar 2026 01:01:37 +0000
Files and hashes: 1: FT6hKDdOscZGglIPmnTSBT_NdEw.roa (hash: XuMv35p4+01j1k8oQho1O4/aKo7qUhSStQREoa1ANMI=)
2: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: vTx1a2Wz6x03ZoWOldvLQFhiK6Qzpc88WEv1AzcjnMk=)
3: saGe65xuOQseP3c8kU3JX4FXHXE.roa (hash: /UkorSrGGemFtdnd/VIVCcjbVQGt7/xFaIltioMhlUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:43:38:54:d3:8b:b7:9a:af:72:8e:b7:7b:12:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Mar 26 01:01:37 2026 GMT
Not After : Mar 27 01:01:37 2026 GMT
Subject: CN=3b949ae57eb5c77f8335c84e938ce323bb03cd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:1f:b3:6d:e7:73:40:ea:81:61:25:71:f5:
5a:0a:d8:d8:69:aa:c6:52:4c:03:81:34:e1:e6:33:
fe:df:86:46:33:2b:35:36:f5:56:5b:13:55:e1:5c:
b9:8b:c1:32:0f:07:fb:1d:0f:09:e2:fd:c3:be:cc:
95:4c:af:74:cb:b9:f5:c9:6a:7d:98:f5:87:47:73:
6e:31:2d:40:f6:55:74:23:1f:7f:14:fe:a2:44:24:
c3:ec:e4:d4:4b:7d:0d:97:1f:8f:20:37:8a:a0:a1:
18:8f:f4:a7:fe:bf:e0:02:9d:54:26:e1:00:10:74:
cd:cf:c1:11:d4:6e:f5:ba:55:d6:56:ee:78:bc:48:
35:6b:41:71:dc:04:21:87:e7:fd:40:43:f3:72:f6:
00:52:cf:5f:d2:86:69:fa:3f:35:fd:bf:7e:a2:16:
a6:8f:3b:19:a8:88:56:b3:f5:dd:07:fa:74:1c:e0:
c0:7e:65:15:df:38:59:a5:9b:03:12:8c:61:ba:cf:
f1:9c:54:c1:aa:27:35:ae:66:ee:e1:1c:6c:a0:c0:
8b:e4:eb:ef:8a:ef:2a:89:d5:c1:2d:6f:2e:7b:b6:
c4:8e:e5:39:5e:e4:cb:69:ab:86:7e:a0:9a:6a:de:
a5:43:4a:d9:4c:d4:61:e1:00:dc:63:c9:ce:f5:db:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:94:9A:E5:7E:B5:C7:7F:83:35:C8:4E:93:8C:E3:23:BB:03:CD:51
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:14:5f:8c:51:1a:e1:f6:01:71:bf:41:96:2d:8d:2e:fa:64:
d7:b5:51:47:d0:a7:1a:6d:4b:36:b0:54:0a:db:34:79:35:07:
ba:09:36:39:ff:d7:b6:48:5f:d9:d1:3d:9f:61:5c:37:ba:53:
99:06:b0:6a:91:7a:40:b3:f4:45:b9:19:94:4e:0a:b4:ec:9d:
cc:36:f0:e7:b2:7e:6c:1c:b0:73:55:e3:8f:99:ae:44:bb:dc:
30:d1:af:bc:05:30:26:80:8c:5a:0b:c9:93:9b:4c:6e:8a:77:
08:c9:e2:0a:c3:e8:96:b2:73:8a:15:6d:94:4c:f2:69:71:a6:
0b:b5:1f:d2:ec:6f:c0:a1:9a:9f:37:81:c9:2c:ac:6d:75:f7:
bb:a7:bb:be:34:a7:d3:a9:fe:be:b9:71:f4:0d:4c:8b:e1:f9:
fb:f9:fb:65:ff:71:c4:9e:9c:29:62:25:e9:dc:8c:2b:5a:c4:
3e:d5:a8:90:1f:b6:e0:d6:1a:17:9e:4f:c6:2e:19:d3:59:57:
fc:25:3c:7c:85:19:5a:32:67:24:37:dd:3e:f7:7f:e1:ad:89:
8a:8a:46:4d:25:da:3c:0f:de:0b:76:af:a8:8d:93:59:c9:3e:
57:2d:ea:54:bb:0e:f5:52:30:db:18:92:aa:ca:2a:05:5c:c3:
22:d8:6c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:46 2026 by rpki-client