Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: d3rbWPNfz+ZYfNtJeurMEERxVysJDdOJFN8PmnbwFo8=
Subject key identifier: 89:DE:CF:9E:B7:B7:91:E8:13:EC:77:09:14:62:DE:E0:AA:84:E9:7B
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 019F91DAC6ACE2EE861B9C4F771864585B91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 1087
Signing time: Fri 24 Jul 2026 02:01:01 +0000
Manifest this update: Fri 24 Jul 2026 02:01:01 +0000
Manifest next update: Sat 25 Jul 2026 02:01:01 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: leoYXZgTgShRnDnBgQiVaDcUltQbIdzR//HN1hllEXM=)
2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c6:ac:e2:ee:86:1b:9c:4f:77:18:64:58:5b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Jul 24 02:01:01 2026 GMT
Not After : Jul 25 02:01:01 2026 GMT
Subject: CN=89decf9eb7b791e813ec77091462dee0aa84e97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:48:61:22:e3:75:ab:16:f3:8e:e4:6a:6d:
0b:02:0d:dd:e0:01:97:af:4f:3a:db:27:f0:f7:2f:
3c:e7:b4:fb:0c:7c:f5:48:86:0b:c3:f7:ca:8d:d9:
62:3c:d6:54:c1:41:47:79:fb:40:9a:1f:4d:45:9b:
07:af:44:0e:cd:c1:e3:de:45:4b:2e:24:5c:9c:d5:
c5:17:65:94:a6:cb:41:1d:74:bf:ed:90:0e:6a:d7:
1b:7e:f1:ff:a7:4a:71:c8:b4:f9:d8:a4:9d:7f:84:
c0:ea:1a:02:4d:78:6a:d2:f0:4b:4f:27:e2:12:3f:
53:55:f9:19:e2:ad:a3:6b:19:41:b3:25:8e:64:36:
31:00:25:a0:fe:2d:4d:d0:66:a0:a1:7f:3c:ca:77:
65:e8:db:87:79:e2:b7:54:d8:16:e3:c0:d7:97:f7:
a7:cb:93:9d:71:58:48:43:38:f5:99:b1:12:75:b8:
46:9e:3e:15:53:39:36:53:49:39:db:da:f7:55:de:
02:6b:73:c1:4e:96:38:41:6e:d9:b2:f3:db:58:fd:
87:1a:ab:65:bb:01:6c:32:a3:2b:26:ba:0e:50:bc:
15:e1:83:56:4d:db:9e:a9:8d:9f:d7:b3:ed:bf:1c:
52:b0:b9:e5:94:58:4c:24:9f:87:06:55:b8:49:89:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DE:CF:9E:B7:B7:91:E8:13:EC:77:09:14:62:DE:E0:AA:84:E9:7B
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:72:10:73:c2:9a:f3:8c:d4:de:70:c6:2b:96:64:27:f7:0f:
29:d6:61:34:d8:0d:79:39:04:ac:2b:ba:42:b5:e6:4a:99:ac:
cc:65:11:60:55:04:88:2e:01:fa:64:4e:57:e2:8c:02:17:f8:
be:06:99:6c:96:34:f7:20:28:66:34:4f:01:bc:84:f6:b5:15:
9e:e5:76:bb:7f:0b:8e:7d:fb:ea:69:44:44:0f:90:27:e9:ee:
ef:71:f8:58:07:7a:01:14:0a:7a:6d:80:c3:af:0e:67:b1:c6:
13:31:80:33:15:d3:3a:8f:4f:a5:c6:a5:14:8e:a8:52:60:6e:
a0:fd:b2:f3:be:8b:d3:f1:54:ca:5c:db:c8:67:b7:da:c9:55:
21:17:b1:fc:f4:da:55:97:69:2b:7d:16:71:3d:26:48:89:60:
39:b0:c4:85:a2:f2:54:36:bd:3f:39:86:f7:ef:84:d4:3a:b8:
0c:ae:ae:77:46:37:60:2e:9e:38:0e:72:62:29:b3:0d:8a:48:
11:5e:fb:7f:5f:c2:5e:99:27:8a:dc:2a:9f:7b:a5:90:31:1a:
5f:77:95:f3:fc:ac:ee:6c:f2:dc:6f:6c:15:1f:7d:2e:10:ab:
cb:cf:7c:52:e1:8f:1c:90:b3:a3:77:70:8a:8e:a0:73:90:db:
c1:c7:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:59 2026 by rpki-client