Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: K5SI4coxU33LrmdvVQhMPhYdbfmf9/YNVJpjF36YDok=
Subject key identifier: FC:B7:2D:39:22:A1:B7:27:E3:9F:AF:4D:15:12:74:D9:A0:41:6F:87
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 019D27DFF8F965EA621DDD6692A0A0D7F57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 0F47
Signing time: Thu 26 Mar 2026 02:01:22 +0000
Manifest this update: Thu 26 Mar 2026 02:01:22 +0000
Manifest next update: Fri 27 Mar 2026 02:01:22 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: KvzowaOd7MKhalNEpUjk2s8gtlzTfhlBwpzE37cNfkY=)
2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f8:f9:65:ea:62:1d:dd:66:92:a0:a0:d7:f5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Mar 26 02:01:22 2026 GMT
Not After : Mar 27 02:01:22 2026 GMT
Subject: CN=fcb72d3922a1b727e39faf4d151274d9a0416f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:c8:d8:81:cf:10:4e:56:33:97:57:ed:5d:
da:24:05:6d:c9:64:95:04:db:21:e2:09:29:a9:45:
33:4f:ea:35:2b:c8:37:0e:10:fb:e2:3a:91:b9:30:
4b:4d:b3:6b:ba:12:81:23:a2:63:be:72:5a:3d:ef:
32:d7:ea:c9:8a:36:33:f2:67:30:d2:c1:3a:60:cc:
c3:7b:5a:6f:3c:72:fb:f4:98:5e:50:d0:87:2a:c1:
23:5e:42:a5:65:a0:f7:af:91:c3:fb:56:77:c6:8b:
aa:e7:50:c6:9c:68:4e:e8:bc:50:37:6a:57:9f:50:
56:35:5e:ad:f6:4a:ef:3b:20:70:b7:11:bb:1d:b3:
f4:48:cb:91:2c:70:11:bc:96:b1:54:e3:b9:db:63:
8c:89:bf:78:76:db:bd:a4:3c:cb:a6:94:96:29:af:
db:ba:cb:41:26:1e:28:82:94:0a:a4:a2:4a:f2:54:
22:b9:89:33:e0:d8:a8:72:06:17:7d:c8:c6:d8:bf:
da:0f:e0:ff:0a:48:4c:63:4f:be:3e:9a:49:9c:79:
18:de:df:b5:19:76:bf:2e:94:16:0e:71:9f:08:14:
97:18:bc:fd:43:01:c9:73:30:e3:88:ad:d2:1b:85:
cb:b6:4b:92:d7:18:56:05:6f:be:88:71:88:82:40:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B7:2D:39:22:A1:B7:27:E3:9F:AF:4D:15:12:74:D9:A0:41:6F:87
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b1:95:c6:61:6b:f7:ff:f5:40:8b:d4:36:54:34:ad:25:ea:
5e:95:9b:70:f5:ba:c5:8f:5b:5c:80:44:57:e5:80:67:f7:7f:
93:3d:50:3c:cc:4c:47:97:55:ec:19:58:1e:c5:95:42:be:49:
83:a2:fb:1c:b1:af:40:04:d4:39:0d:a3:a7:2a:96:70:2a:a1:
26:67:ce:4f:6d:3f:87:68:a4:45:b9:24:86:fc:5b:21:32:79:
40:7b:cf:9b:ca:f3:e1:c6:34:cf:9b:70:de:04:00:bb:33:1c:
d4:bf:4a:cb:9e:5c:8e:19:42:5a:4b:83:21:0c:e6:16:da:09:
d6:15:d0:cb:02:0d:7e:28:65:7d:fa:18:5b:47:98:3c:87:8b:
54:70:7d:ce:59:77:9f:55:26:5c:4e:56:63:71:5a:0b:51:16:
8a:0a:ee:da:b0:b0:d8:c7:2b:e3:28:f2:cd:18:dc:2d:5d:e1:
0c:5f:83:82:6a:67:d4:af:0f:b4:1d:89:59:64:82:8f:bf:f7:
42:9c:75:ed:e6:33:66:0f:0a:8b:bc:86:dd:43:50:8d:19:f8:
70:30:1f:74:35:2a:f3:d9:55:b9:84:b3:68:a8:83:44:2f:78:
d2:22:0d:07:f6:63:a7:a9:61:ba:a3:a4:fc:03:90:1c:f0:d1:
f2:83:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:13 2026 by rpki-client