Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: kE2jDf/ADeQLYNO9ixXASIj0ear4EN89CHYd5WGVvxM=
Subject key identifier: 4B:1C:64:DA:5B:0A:EE:6A:1D:F5:02:AB:8D:96:EB:5B:A9:4A:D9:4C
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019E1D2299521BFF797924B62956EB2EFA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 1703
Signing time: Tue 12 May 2026 17:01:07 +0000
Manifest this update: Tue 12 May 2026 17:01:07 +0000
Manifest next update: Wed 13 May 2026 17:01:07 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: Dm46yM9bT1Yk+e9U6w6iuENUaYwQATY55v8wWFTbjNo=)
2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:99:52:1b:ff:79:79:24:b6:29:56:eb:2e:fa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: May 12 17:01:07 2026 GMT
Not After : May 13 17:01:07 2026 GMT
Subject: CN=4b1c64da5b0aee6a1df502ab8d96eb5ba94ad94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:a0:91:0f:95:e5:dd:d0:cf:73:2d:cf:ba:
d6:62:de:9a:7d:87:31:e1:54:10:8b:ba:dc:be:d5:
a3:ea:18:e8:1f:24:37:bc:57:28:6f:88:39:67:7a:
88:22:ef:be:41:04:8a:92:29:7b:c2:9e:f6:10:da:
a5:2a:49:5c:ad:ce:db:a3:85:fb:75:91:3d:b8:78:
eb:e1:b5:5d:1c:34:06:3d:25:37:a1:44:c6:d8:d6:
87:58:2d:69:d3:66:4a:4d:bd:26:2c:cd:f3:e3:2e:
79:d8:28:06:ab:af:8c:37:f0:41:44:93:db:b7:35:
92:d8:5f:f3:65:fa:26:f5:f6:da:92:20:c5:e2:13:
c7:a2:b3:e8:6e:6c:04:9a:97:cf:85:80:b6:43:23:
e1:e7:02:17:e2:1f:5d:f0:f5:0d:e7:6a:70:c8:c9:
79:c3:db:c3:27:89:ba:25:f0:c9:01:fe:b5:24:0e:
40:e7:88:3b:3d:18:cd:a1:64:6f:26:ca:bc:3a:87:
86:bb:f1:b0:42:57:5e:7f:b8:7c:f8:75:9d:57:d7:
b8:3a:a5:4d:2e:af:df:00:33:b2:22:b5:bb:77:a3:
ed:bd:41:3c:14:d9:54:d2:3f:3a:80:a0:04:23:cc:
30:01:e4:15:1e:76:02:10:78:4e:e4:34:8d:cd:b0:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:64:DA:5B:0A:EE:6A:1D:F5:02:AB:8D:96:EB:5B:A9:4A:D9:4C
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:62:8f:a1:47:95:0b:e3:3b:1c:43:30:c8:61:af:2e:e7:25:
07:4d:72:4a:49:1c:97:b7:2e:69:ac:a5:b1:3b:cf:4b:c7:32:
31:14:9e:35:e5:70:05:e3:0a:f1:e8:1b:56:4f:ab:6f:3d:08:
67:04:66:d1:df:8c:4e:ae:67:ec:c6:04:9f:8b:16:99:b1:dd:
9e:cc:56:72:02:16:93:69:0f:61:78:38:ea:5c:da:7f:a4:a3:
cf:9c:c1:e5:e5:18:71:38:ab:e7:63:70:44:a4:ea:1a:08:73:
72:ee:71:46:5a:45:51:5e:2c:56:33:97:9e:bf:e3:6d:9a:bd:
e3:bb:c5:43:cb:91:46:61:b6:d0:2c:03:cb:e6:bc:ee:96:06:
d5:e2:b9:53:f2:12:c2:7b:e1:a3:0b:da:a4:0c:c7:62:49:71:
ea:03:9a:3c:12:82:b1:82:35:d7:9b:d4:c0:70:ee:74:97:15:
2a:2f:66:79:37:54:af:07:21:7f:0b:01:25:f9:35:49:01:81:
af:0a:94:68:5d:d7:c9:31:b0:6c:74:eb:f3:60:ec:8e:9d:b1:
5a:8a:fc:c0:67:c4:b9:31:b9:c6:a0:37:1c:e6:ab:a0:a6:15:
1c:b5:cc:c7:89:d8:bd:d8:bf:6e:50:6d:75:5f:bb:d0:8c:fc:
9c:ee:09:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:43 2026 by rpki-client