Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File: t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier: ukdlfXXZiXZELeLHCFw0yAe9HjwN4s2WYva4WA8Hsa4=
Subject key identifier: BE:B7:F0:88:83:8E:58:FE:BB:2B:CC:0C:AB:74:5B:6D:E3:D5:DB:99
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer: /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial: 019D26CCCB48284223EF3E63156634104539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number: 02BB
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: Uh+9GOo7cmkXguRjHA1ONI86uQOafp5cpmdcz6MYVQ4=)
2: yJEIYX1X6Vn1mczBWtPbj6ipHiI.roa (hash: hXktUhExU5cvteEHn2uL2jVPgwS68C8aR5+E6IWS5PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cb:48:28:42:23:ef:3e:63:15:66:34:10:45:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=beb7f088838e58febb2bcc0cab745b6de3d5db99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:48:5e:99:08:eb:fd:f4:b9:7a:66:12:7c:
17:2d:87:e1:ed:00:5a:96:18:0b:7a:65:94:01:88:
e2:9e:65:b0:8e:cc:92:7d:fa:32:11:c1:ac:32:49:
3a:e2:50:70:a0:7c:2b:de:15:0c:a0:fe:2a:95:a8:
f6:34:21:c8:f6:7f:3e:72:f5:21:71:80:de:f5:ef:
26:3d:2f:ba:bf:f8:d5:c0:8e:ed:14:18:b3:33:70:
b1:7f:e2:5a:00:ca:af:98:66:69:ca:9a:02:3d:99:
66:51:d8:40:f5:57:76:1d:97:8b:90:20:1c:c2:2d:
d2:6e:75:c2:7a:02:69:13:eb:41:c3:6b:37:79:e2:
fc:6f:bb:11:64:ae:01:ae:c1:1c:db:15:8c:f7:b0:
49:60:2b:eb:24:73:c7:a8:1f:b1:58:d4:76:16:53:
80:3e:de:bf:da:7f:84:52:fc:5e:0b:cd:63:4b:6c:
4f:8d:55:7a:54:1b:fb:60:6f:4a:81:42:6e:6a:1f:
c9:a0:17:8b:2d:c8:ea:85:b2:70:d7:13:bb:4b:47:
59:52:81:bf:b9:41:35:4e:13:0d:70:20:30:6a:d3:
b3:78:62:70:05:25:ab:12:42:1a:e3:8f:1d:d5:7e:
f4:37:06:35:d0:a2:59:4d:d4:4f:4c:3f:f2:88:bd:
eb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:F0:88:83:8E:58:FE:BB:2B:CC:0C:AB:74:5B:6D:E3:D5:DB:99
X509v3 Authority Key Identifier:
keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:37:91:4f:5b:cb:18:c5:0d:60:4c:a2:ae:73:36:6a:4e:20:
16:08:42:9c:62:81:ca:a3:ee:80:ce:67:e5:0b:05:86:9a:fd:
c3:b1:0e:ca:6e:74:1a:cf:65:3a:2b:11:b6:4e:56:fb:8b:15:
19:01:0c:60:3d:2d:27:0f:2c:04:4a:54:ff:00:21:92:94:ff:
fe:ee:9b:d0:63:1f:57:62:2c:cd:28:98:90:c3:cd:a9:26:18:
8e:8d:cf:a7:62:d9:81:d8:3c:cc:d7:96:e6:48:88:ee:04:7f:
f5:1e:33:a0:3e:a2:d4:4f:96:a7:21:09:53:00:51:06:d8:d7:
e1:18:86:54:e6:8c:c9:7d:ed:37:60:d9:6f:6a:93:a2:9d:87:
3f:78:70:3e:15:87:0f:6c:a4:90:75:e3:6a:10:64:51:ed:56:
f5:5d:ef:3d:16:9e:b8:4f:b4:6f:e2:66:40:7b:23:03:2f:1d:
c7:8d:65:7b:1b:21:e7:0a:4e:b5:97:4d:66:24:51:72:1f:fa:
77:41:9d:16:7f:10:85:fd:63:46:45:13:e5:9e:82:7c:90:6b:
b5:e9:b4:db:e0:52:e4:cc:fd:90:ac:a1:1a:b9:cf:43:ca:f9:
a9:6b:55:67:10:5b:c4:e7:d7:1f:bc:2e:8f:5b:c6:54:10:53:
eb:e9:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:35 2026 by rpki-client