Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: aNvyCD7OIUNA9rNkXj7VLssG3GxdTJgwiG7ytF0PrsE=
Subject key identifier: ED:CB:A7:49:E6:91:75:D0:34:D6:81:EB:E9:66:98:F3:C8:AB:1D:98
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 01A12955B4AF00D9A4AD78289094DDB9B20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 1897
Signing time: Sun 11 Oct 2026 05:00:44 +0000
Manifest this update: Sun 11 Oct 2026 05:00:44 +0000
Manifest next update: Mon 12 Oct 2026 05:00:44 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: De6VFch36WPeWeRLDHy1ft8muGaOqst7UXS5dS3Gtsw=)
2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:b4:af:00:d9:a4:ad:78:28:90:94:dd:b9:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Oct 11 05:00:44 2026 GMT
Not After : Oct 12 05:00:44 2026 GMT
Subject: CN=edcba749e69175d034d681ebe96698f3c8ab1d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:4b:cc:9f:92:bb:29:d3:6e:fd:2f:a6:b6:
0d:b2:89:12:52:21:2c:16:58:ae:b6:8d:0b:ec:61:
5f:52:f3:90:8d:19:fa:2e:61:0d:61:7d:c0:d6:08:
67:fa:12:67:f8:96:48:3c:a3:9e:a4:c9:f4:61:1a:
36:68:14:a1:b6:47:e2:8b:11:7e:a7:bb:5e:5b:17:
84:44:8c:12:c1:82:f8:e2:2a:fe:8d:02:a2:87:44:
9c:37:f6:79:c0:88:fa:c4:36:44:96:91:3e:74:69:
24:3f:fc:28:82:62:b6:98:d1:12:09:d9:f0:57:1e:
c8:27:f4:ea:a6:a6:0e:e7:8d:35:10:80:dc:6a:bf:
78:e9:68:14:21:c9:f2:24:e3:dd:13:d4:b8:ce:e9:
49:36:9d:33:4a:9d:2f:29:e7:4c:db:6c:29:8d:47:
08:4e:90:96:af:03:a7:69:53:4b:73:a6:36:24:c5:
20:22:08:7f:2c:bf:81:2f:e8:68:d3:40:f1:08:6e:
a1:7a:48:ee:2b:a0:e0:3b:b5:2b:3c:6a:46:fc:0c:
9f:3a:46:5a:b5:8a:81:57:58:63:d3:49:15:a7:89:
bd:67:e7:36:08:d8:12:eb:3a:ce:00:bd:74:6e:07:
29:b9:3a:e3:c1:10:91:6f:62:38:17:a9:bb:1c:1f:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:A7:49:E6:91:75:D0:34:D6:81:EB:E9:66:98:F3:C8:AB:1D:98
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:da:00:df:31:4a:dc:65:6b:31:01:0b:1a:26:7d:67:0a:
06:33:a2:3e:b6:02:8f:47:74:d0:f0:3d:a2:b6:5e:33:93:a6:
d3:87:e0:ec:30:f2:05:82:ba:bd:f3:74:a2:73:3f:03:ad:e7:
8b:88:99:79:6a:85:a6:98:55:d4:1c:40:3f:b5:c3:f3:6d:52:
be:f1:bf:60:84:42:16:c5:94:2b:29:23:65:a3:3e:7a:01:ef:
e5:b5:e7:7e:63:e1:87:45:ec:4d:f2:a7:d9:16:02:82:a9:ef:
c6:6f:73:33:c7:1c:ad:eb:ca:e2:9e:bf:40:2a:4d:a9:f5:eb:
6d:84:cb:20:a8:74:c8:94:c4:36:da:56:71:c8:cd:85:02:82:
98:d6:56:ce:4f:8c:c9:3c:aa:6f:d0:1a:7f:50:7a:61:09:ae:
f2:95:c5:f9:c5:d3:3f:38:85:ff:f3:2a:62:63:4f:a5:9b:94:
9b:6f:e4:cf:58:ca:07:8a:73:b1:fa:48:0a:0c:a3:25:6c:5b:
ee:b9:f1:9a:91:6a:eb:66:87:4f:f0:61:c7:c9:f8:06:7d:0e:
b1:94:ac:1d:3a:9f:10:5d:8e:f1:ea:3d:ff:f9:39:64:bd:2a:
13:8f:97:a4:f8:80:50:7d:e8:6d:dc:58:07:6b:e0:51:f3:98:
8a:7e:5b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:58:50 2026 by rpki-client