Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: zBekVOvsxrs0+js8TvL+df0C+BB0dKOvPlqdPJL1UXc=
Subject key identifier: EE:74:E2:A5:AE:F8:2A:71:C8:DF:89:1E:73:35:33:F1:EA:0E:07:AF
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 01A0CDB559AD17C3CE6D02D6575C30933017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 10:00:08 +0000
Manifest this update: Wed 23 Sep 2026 10:00:08 +0000
Manifest next update: Thu 24 Sep 2026 10:00:08 +0000
Files and hashes: 1: 3JCprLbCd_JV3m7EK4otwaRJ6FI.asa (hash: C7m74US1J4rnzhzyN9c9AXYlLYYU1lK9Uvvic8/k1+0=)
2: 5EKQPrPNwyvCBR3SFmiV77L19bE.roa (hash: 7kjfjqomqFD/efQnWdT+7ek8PZzhOejx7JJd6FEa/kA=)
3: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: yXSjMv/+2ZP5C7zY0J45q5bvWF3gG53RhzR1pZo+wcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:59:ad:17:c3:ce:6d:02:d6:57:5c:30:93:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Sep 23 10:00:08 2026 GMT
Not After : Sep 24 10:00:08 2026 GMT
Subject: CN=ee74e2a5aef82a71c8df891e733533f1ea0e07af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:01:68:af:69:13:93:81:b7:f6:2b:1e:d4:
13:99:a5:49:33:c3:5a:b3:49:ef:1a:e1:3f:ba:b6:
55:6d:e4:cb:2a:74:39:05:fa:0f:2e:12:6c:5b:79:
42:72:7f:79:d8:6f:ca:c9:a5:62:d4:d5:a2:ee:af:
18:00:96:c7:d4:52:d3:77:61:6c:0d:3b:55:73:cc:
54:2f:98:de:66:2e:0d:3d:87:b6:58:dc:35:a4:7b:
85:ad:3e:24:36:88:e8:b6:c8:07:a9:ea:6c:c5:b7:
e1:0c:db:dd:2a:fe:2f:2f:7b:c2:b9:8c:58:8b:02:
0a:3c:81:78:10:a1:b6:09:09:40:d7:36:8c:ad:35:
01:a1:01:33:cc:87:cc:1e:55:6b:bc:db:6d:85:53:
5d:d5:7d:49:79:ab:6a:d1:b8:b6:92:47:a0:f6:74:
22:9e:cc:4d:53:45:37:ee:b0:15:66:8d:46:0b:33:
da:7c:aa:1b:c7:24:23:f3:e3:f2:76:24:0d:51:fc:
5a:20:6b:6f:5a:7a:5e:04:d9:8b:fc:ac:87:f8:48:
f2:87:eb:d3:07:74:14:4e:59:a7:7e:4d:9e:b0:58:
a6:5d:91:21:b8:63:2f:fd:90:d1:7f:f9:08:9c:c7:
e4:c1:75:9d:1e:42:c2:85:e0:10:7d:c6:cf:7f:a8:
72:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:E2:A5:AE:F8:2A:71:C8:DF:89:1E:73:35:33:F1:EA:0E:07:AF
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1b:79:c9:86:12:b4:3c:4e:62:a5:b5:c6:77:90:e8:da:05:
ee:3f:75:fa:8c:c0:23:ec:8d:c3:af:94:01:99:f9:d6:c5:95:
7f:4c:49:40:36:06:32:f5:69:ad:e6:f1:7d:33:58:67:ec:ff:
59:e0:8e:94:2e:03:c5:c2:00:ea:8c:70:9f:6c:5b:04:b3:ea:
93:52:60:a7:f7:00:e3:f0:a2:76:b9:19:9c:4b:40:1f:aa:09:
c5:38:7c:17:af:33:f6:bf:ac:05:da:4d:8a:22:6a:0a:01:e6:
62:c3:07:80:50:b0:5b:ab:00:f0:44:40:49:bf:8c:ee:e3:b2:
07:3a:5e:b0:c9:c1:83:63:f3:32:d8:71:4f:6f:05:5b:52:31:
d9:b4:b3:37:61:eb:8f:da:d9:83:22:4d:9b:7a:c0:71:70:30:
30:f1:06:0e:3c:88:2a:1a:02:5f:d6:2c:c2:5d:ff:c0:ed:49:
21:0d:79:10:db:86:8b:98:74:e7:97:02:22:95:e6:6e:26:fd:
0a:09:3f:5a:26:ed:c2:f1:4f:7a:1f:8d:83:27:fb:51:d8:15:
54:ba:8f:f3:10:b0:0c:c9:c5:4f:cf:92:10:27:2f:2b:de:91:
35:c7:1e:76:08:06:b2:7a:ca:53:cc:3f:70:de:c9:0a:fc:e2:
f6:a6:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:11:43 2026 by rpki-client