Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: HBqteslCvhHhAJLeHdbcYbSMmlpQeqIvL1JlKIKDZjo=
Subject key identifier: 1C:5E:9A:1B:29:0B:53:D4:D9:A2:AC:96:C4:CA:2F:8A:6D:F2:B3:25
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 019D265FD0424C20291D681704978B5AB69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 095D
Signing time: Wed 25 Mar 2026 19:01:46 +0000
Manifest this update: Wed 25 Mar 2026 19:01:46 +0000
Manifest next update: Thu 26 Mar 2026 19:01:46 +0000
Files and hashes: 1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: nYb2A/je3hHr0mCAUEEWvvGYloEENpjqplN3yURwe2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:d0:42:4c:20:29:1d:68:17:04:97:8b:5a:b6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Mar 25 19:01:46 2026 GMT
Not After : Mar 26 19:01:46 2026 GMT
Subject: CN=1c5e9a1b290b53d4d9a2ac96c4ca2f8a6df2b325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:7d:aa:e7:a4:82:71:5a:55:06:08:46:a0:
87:e5:85:1a:27:a0:22:f8:b8:a6:9b:90:a0:40:78:
bd:48:4a:ab:27:62:f6:79:f0:25:8d:ca:20:d0:d2:
32:24:69:b6:73:5e:90:69:06:e9:47:39:1a:2d:4c:
71:88:4a:ef:78:32:82:56:5b:61:df:08:45:5d:21:
56:79:20:11:c3:e9:d2:d9:b6:16:25:7c:24:d7:bb:
c4:42:bc:7e:51:de:5a:bb:c7:b7:bc:89:84:07:d3:
59:3c:88:b8:ef:19:36:84:73:40:a1:19:7a:65:19:
7b:7c:a4:3b:21:d8:e4:84:02:bc:37:2b:3d:3d:ed:
18:a7:f0:cb:04:ab:16:e8:2e:87:45:5c:c9:66:9f:
1a:cb:29:59:41:7b:e1:b6:5f:cc:d6:37:22:01:e9:
7e:6b:ec:15:69:3e:38:75:86:31:a2:a6:d8:ef:a4:
b2:ec:6e:1b:75:1f:b3:3b:79:46:4f:7b:52:72:7a:
26:1d:25:90:ef:f2:4e:ea:03:f4:4e:bf:c5:b2:a1:
f2:b6:6b:d0:a0:d6:28:43:c8:d5:13:4a:fa:fb:6e:
d7:6a:28:bf:aa:a2:bc:78:f1:f8:59:28:6f:3e:69:
85:23:67:8a:ce:68:9f:70:8e:a9:87:ef:41:4e:8d:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5E:9A:1B:29:0B:53:D4:D9:A2:AC:96:C4:CA:2F:8A:6D:F2:B3:25
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ec:67:52:a7:2e:bf:09:7f:65:81:ae:83:cd:0c:03:3c:7f:
0d:a2:7a:bc:3c:a9:43:b0:60:cc:78:75:99:09:1a:7c:85:a4:
6f:46:09:e7:65:c6:5f:ef:e5:b0:c6:68:9c:a6:ac:39:f5:42:
8b:9e:c5:61:b6:06:15:ae:fb:b9:8b:6e:44:d0:7d:3f:4f:3b:
3e:b0:94:b6:d1:e1:8f:f7:53:86:9e:c3:c4:c7:ae:29:9c:34:
7e:0a:a7:ef:d8:38:2e:46:df:23:51:e3:dd:d8:b1:b8:67:4c:
eb:57:61:73:9c:df:03:ff:69:e8:60:3a:2e:4f:dc:bb:81:f5:
4e:2d:a2:5d:f1:ab:b6:93:45:81:ca:de:9f:18:ca:0f:b1:aa:
8a:13:9e:6c:da:6a:77:e7:59:b5:ae:e1:92:a6:39:77:89:a8:
d5:bd:0a:84:3b:95:33:87:b8:dd:82:03:4d:d5:4f:9a:fc:1c:
4b:97:7d:b1:93:bf:25:06:c5:de:9c:5c:e5:a8:3b:59:22:49:
70:11:0d:03:c4:b3:d9:47:e9:6d:4a:58:9c:86:c4:6a:d3:a3:
7e:f6:d7:80:b1:fd:0d:0f:86:e1:0b:03:de:0c:73:3c:77:c9:
38:db:1d:da:de:8d:dc:dd:0a:b5:de:de:dd:87:3f:5c:0b:c4:
1a:34:f5:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX9BCTCApHWgXBJeLWraeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl
ZmE1MGYwHhcNMjYwMzI1MTkwMTQ2WhcNMjYwMzI2MTkwMTQ2WjAzMTEwLwYDVQQD
EygxYzVlOWExYjI5MGI1M2Q0ZDlhMmFjOTZjNGNhMmY4YTZkZjJiMzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxB9quekgnFaVQYIRqCH5YUaJ6Ai
+Limm5CgQHi9SEqrJ2L2efAljcog0NIyJGm2c16QaQbpRzkaLUxxiErveDKCVlth
3whFXSFWeSARw+nS2bYWJXwk17vEQrx+Ud5au8e3vImEB9NZPIi47xk2hHNAoRl6
ZRl7fKQ7IdjkhAK8Nys9Pe0Yp/DLBKsW6C6HRVzJZp8ayylZQXvhtl/M1jciAel+
a+wVaT44dYYxoqbY76Sy7G4bdR+zO3lGT3tScnomHSWQ7/JO6gP0Tr/FsqHytmvQ
oNYoQ8jVE0r6+27Xaii/qqK8ePH4WShvPmmFI2eKzmifcI6ph+9BTo0RiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxemhspC1PU2aKslsTKL4pt8rMlMB8GA1UdIwQY
MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt
MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi
LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuxnUqcu
vwl/ZYGug80MAzx/DaJ6vDypQ7BgzHh1mQkafIWkb0YJ52XGX+/lsMZonKasOfVC
i57FYbYGFa77uYtuRNB9P087PrCUttHhj/dThp7DxMeuKZw0fgqn79g4LkbfI1Hj
3dixuGdM61dhc5zfA/9p6GA6Lk/cu4H1Ti2iXfGrtpNFgcrenxjKD7GqihOebNpq
d+dZta7hkqY5d4mo1b0KhDuVM4e43YIDTdVPmvwcS5d9sZO/JQbF3pxc5ag7WSJJ
cBENA8Sz2UfpbUpYnIbEatOjfvbXgLH9DQ+G4QsD3gxzPHfJONsd2t6N3N0Ktd7e
3Yc/XAvEGjT1fA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:42 2026 by rpki-client