Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: AwhBx6ahhIdREvJLmpxBuaEeGh9fa/9SEFkcnHUSg/0=
Subject key identifier: E7:5F:94:33:B6:28:6B:3F:1C:7D:67:F2:68:5B:20:71:B2:04:B2:D7
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019D27A8C870EEC23FBA74B32F6314F4BDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: O80thVyFrtVGGmW2Or4A805T8XA4oDfaHvRdKUIVYdE=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c8:70:ee:c2:3f:ba:74:b3:2f:63:14:f4:bd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=e75f9433b6286b3f1c7d67f2685b2071b204b2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:9b:44:e7:b3:01:5f:1d:03:be:ef:c1:ce:
97:13:bd:f8:b9:60:e8:05:45:88:0a:91:89:21:20:
a8:1e:af:3d:93:33:5d:48:a7:72:9b:f6:7e:06:f7:
50:95:05:55:fd:5e:e5:79:2d:3c:72:45:8c:f9:25:
07:14:a2:1c:97:8e:e4:b9:9f:45:8d:a2:e4:cf:a9:
d2:bc:ba:12:09:cd:a9:75:68:0f:ac:a3:44:1c:35:
6c:55:20:88:83:8c:0c:5c:e9:54:fe:5a:1e:33:d1:
ca:fa:8c:e0:e9:d1:01:48:bd:ed:e7:54:2b:73:5c:
3b:cf:8a:d2:0c:0a:e7:5d:74:c5:67:5e:3a:bf:a4:
a5:2f:d8:22:f7:83:e0:87:37:f9:2c:0e:db:c7:9f:
d3:54:0a:4e:1c:67:ef:d7:8e:a9:11:bc:69:3b:7b:
f9:67:ab:06:28:e7:4e:0e:60:8f:98:69:f9:c0:e2:
9d:c7:19:26:84:a2:a6:9a:1d:8c:28:48:e6:fe:e3:
9a:71:33:73:f9:3b:4b:6f:9f:4c:63:aa:ba:ca:2d:
c5:8e:88:46:2f:38:86:a9:e9:98:a1:00:03:8c:bb:
37:7d:30:70:a9:58:d6:4b:4b:59:5a:cc:76:ff:9f:
67:53:6a:46:73:a9:0a:e3:d9:ca:13:1a:75:77:d7:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:94:33:B6:28:6B:3F:1C:7D:67:F2:68:5B:20:71:B2:04:B2:D7
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:89:5a:3e:a3:df:c0:46:e9:98:01:f3:5e:16:e1:5f:ab:2d:
a3:43:e8:68:e1:b0:25:89:67:51:2c:e6:57:95:4b:12:86:b2:
e5:a5:00:65:92:3e:e7:32:2e:51:42:a1:ed:2e:15:87:56:20:
d4:d1:f9:fa:37:9a:21:a4:61:57:cd:df:80:45:69:34:b1:3e:
66:9d:53:85:af:c6:f4:91:7b:5a:f7:bf:10:c5:18:95:e9:b4:
4f:fc:df:71:4c:3c:19:24:60:ff:09:fe:38:3a:80:31:92:7e:
cd:46:7c:7a:74:00:99:0f:79:1c:16:39:59:d7:eb:91:c6:c0:
e6:e9:ae:8e:f3:47:b1:cf:72:ab:1c:74:03:c1:97:d7:85:04:
39:a4:c2:75:ed:38:10:fa:de:c8:8e:38:be:ab:93:4e:4e:1f:
76:4c:f8:e8:77:b1:b2:2a:8d:32:5a:1c:73:79:60:27:44:a1:
db:8d:18:9f:a0:30:b8:40:b4:38:91:a6:4c:f3:38:c2:e2:ee:
d9:22:47:a0:17:ae:85:17:05:4c:b0:c5:e5:95:92:f2:fd:c7:
e1:7f:1f:fb:49:95:99:85:36:19:f5:45:b1:89:33:f3:84:ec:
ca:90:1b:76:d3:41:51:a8:9a:66:97:70:2a:dc:8d:e8:cb:f6:
d7:6e:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:46 2026 by rpki-client