Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: tVWOLQYCslSdC5R9vyI2EmwZ2ZG7nXVcHOHsDEq+w7o=
Subject key identifier: 99:9D:30:E9:28:85:E6:48:D7:3C:05:44:D9:F2:FB:23:3B:7C:08:FC
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 019D25F1DAFBBBB4C86233CAF7250B7E5833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 17:01:40 +0000
Manifest this update: Wed 25 Mar 2026 17:01:40 +0000
Manifest next update: Thu 26 Mar 2026 17:01:40 +0000
Files and hashes: 1: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (hash: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y=)
2: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: 1dKsaHUn2NfNHlUJRsR7M8oeWC80bnKKJWCMrhMThqg=)
3: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (hash: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:da:fb:bb:b4:c8:62:33:ca:f7:25:0b:7e:58:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Mar 25 17:01:40 2026 GMT
Not After : Mar 26 17:01:40 2026 GMT
Subject: CN=999d30e92885e648d73c0544d9f2fb233b7c08fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:91:76:7d:91:c2:ea:a3:8e:8f:34:74:ac:
12:36:55:19:df:09:86:84:8d:35:14:0f:02:49:08:
51:c0:fb:a9:e9:97:dc:c9:03:48:22:d0:b2:10:a1:
23:5d:28:b3:8c:08:6a:d2:48:8f:a0:86:27:c6:0f:
25:ef:ed:55:bf:45:66:31:bf:46:3b:4b:41:66:30:
50:ba:e0:51:d4:c6:c3:5e:b4:54:69:d2:be:b5:90:
db:8d:4e:03:a4:70:88:c5:dd:a6:af:cc:53:44:5b:
59:54:7c:37:f2:0a:a5:db:5e:ea:91:03:e9:98:87:
90:20:3e:73:51:2e:08:bc:b2:03:19:26:51:b7:a8:
f1:fd:cb:27:67:7c:ca:2d:29:3e:7e:e2:20:e7:c4:
2d:cf:49:8d:b5:6c:ef:f9:39:26:b1:56:64:e6:bc:
43:89:28:71:1e:8e:52:5b:43:e6:e8:95:0c:ab:6d:
1e:19:a3:8b:0a:f7:72:65:07:27:7a:fe:12:5e:c9:
14:ce:67:d2:a6:89:ac:67:24:fa:65:14:74:24:cb:
c9:ba:a4:af:ba:58:25:4c:21:ae:70:d1:94:f5:3e:
06:b8:3c:d3:b1:c1:df:f8:01:c0:a7:07:8d:9b:e9:
98:84:94:7a:c1:5a:de:ae:d4:2e:5f:d1:86:a5:38:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9D:30:E9:28:85:E6:48:D7:3C:05:44:D9:F2:FB:23:3B:7C:08:FC
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d4:02:e9:2e:a9:64:9d:33:b0:0e:74:5c:c6:69:10:1e:07:
54:d2:b3:90:a4:ad:c1:f3:c7:f1:9e:02:88:e5:2d:49:02:bb:
07:90:e5:42:1c:7c:d1:36:e2:ac:ad:89:4c:2d:dd:b8:ef:5a:
f1:5f:a6:37:5c:5b:a7:ce:d7:14:9b:25:db:4b:3b:85:be:0c:
e2:0a:06:4c:7a:b8:73:c9:bd:84:7c:c4:a6:3b:22:ad:eb:0b:
e0:fb:a1:d1:67:9a:fa:6e:29:e3:ed:ec:0b:09:9d:d4:79:69:
31:56:46:5a:ab:9d:56:78:62:36:01:cd:a1:24:33:73:9e:8c:
71:c9:32:52:c1:e3:1b:e7:72:96:73:57:89:d0:87:9f:43:ca:
4e:8f:76:54:37:4d:9c:f0:b5:45:b7:d2:2a:60:e2:69:3b:20:
3d:f2:4a:d7:74:0f:a1:bd:d3:ed:99:0c:fb:c5:9d:43:78:e2:
ef:38:02:d5:e0:7e:82:e9:8c:e3:4a:4c:87:72:79:51:fe:e1:
0e:e8:27:94:3a:13:a7:c6:7e:28:6e:9e:11:3a:81:16:f0:1f:
9e:b6:36:23:bf:02:23:f3:d0:76:38:9a:ef:6f:35:33:ed:17:
d8:59:dc:4d:fd:04:06:35:a4:bb:23:68:31:30:d9:4a:ea:95:
bc:f7:f0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:49 2026 by rpki-client