Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: b2t88NGHOw243t+fjYlzRaat207rNppLHfeoanXAzIM=
Subject key identifier: 0D:FD:5A:90:62:43:4D:A8:86:60:27:F0:C8:01:DE:BB:1E:3E:D7:7A
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019E1CEB5C3DF4749404F17CC0B19F10A91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 16:00:47 +0000
Manifest this update: Tue 12 May 2026 16:00:47 +0000
Manifest next update: Wed 13 May 2026 16:00:47 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: f2XyVm4emqUCqCOwV4vjQwlw80ecfunz/pwcF/I/NLI=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:5c:3d:f4:74:94:04:f1:7c:c0:b1:9f:10:a9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: May 12 16:00:47 2026 GMT
Not After : May 13 16:00:47 2026 GMT
Subject: CN=0dfd5a9062434da8866027f0c801debb1e3ed77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:6c:e4:e6:72:c6:18:7d:37:b9:20:f3:a4:
14:b3:49:c0:5f:b4:a0:b3:21:38:92:39:25:7f:84:
37:b8:6c:9b:e0:5f:d8:ec:53:d2:6f:88:ac:5b:2b:
d8:5f:d1:1c:da:ce:25:22:27:b8:c4:c1:3c:72:ff:
01:1a:8d:be:8d:fa:4e:29:02:3d:7c:f5:ce:a6:6d:
c1:41:af:e6:16:90:fc:34:b8:11:eb:57:3e:c0:81:
b6:cc:f9:9b:df:6b:bc:25:52:4d:dd:c3:1b:94:7c:
01:a8:ad:e7:1a:62:9a:22:0f:20:e0:0b:86:04:1d:
eb:a5:c5:ec:a1:c3:5a:ce:b5:b3:3c:dd:3d:48:37:
b3:4f:83:87:f2:2e:8e:34:2e:3e:2c:2f:3d:1f:21:
4b:6d:f7:89:f1:e9:12:44:1b:57:ce:84:c1:e2:c6:
aa:ce:6f:5d:3b:e2:6a:8f:a6:65:39:fa:0e:e8:77:
db:43:e7:c2:a7:b6:c8:8a:ae:b3:00:a6:aa:71:30:
33:4d:34:ab:8f:3b:18:ff:e5:0e:4a:fe:a7:7e:5b:
dc:0f:e6:c2:d3:31:84:b5:53:a9:24:ec:42:34:af:
74:25:84:b1:75:2e:11:b7:74:f4:c2:ff:75:a5:10:
37:a7:dc:85:9a:b2:0b:a6:3c:eb:3d:02:59:fd:98:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:5A:90:62:43:4D:A8:86:60:27:F0:C8:01:DE:BB:1E:3E:D7:7A
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ad:10:62:67:4d:d0:79:47:86:96:53:60:c0:58:ea:b8:00:
67:5f:1c:3b:6b:92:32:9b:9b:ce:af:7c:35:ab:95:e5:fa:99:
47:c8:73:6a:bc:16:05:a5:59:73:9c:36:19:77:14:2f:23:68:
d8:bc:f8:07:1f:47:64:76:d7:a9:e4:53:d1:b8:58:cf:b2:61:
6a:45:e4:96:f7:69:7c:e3:5e:dc:89:33:6b:b1:68:dc:9d:c9:
b8:ba:02:13:5c:4e:a6:52:9d:c6:4e:5b:6d:84:fb:ac:7d:4b:
02:13:3d:12:ca:7e:36:60:fc:a1:be:9f:88:29:48:74:19:24:
e3:77:f6:35:8e:b2:a8:ec:be:70:e0:1f:78:db:4e:63:8a:9f:
b6:88:f7:9c:52:46:21:e3:b6:06:5e:03:4d:11:1f:dd:45:4d:
2f:b4:9b:a0:80:5d:91:f8:a6:f4:fb:11:66:27:43:0b:ba:ed:
36:70:a5:c3:e3:d5:78:96:6f:6c:3a:77:55:96:d4:14:51:d1:
e1:8f:20:1a:8c:26:13:c1:21:ae:69:b3:52:d5:79:14:81:75:
e9:f3:4c:72:bb:ba:80:a4:68:c6:02:96:1b:69:35:ab:51:a9:
ea:9d:eb:8d:5b:d8:c1:22:37:94:9b:09:bb:ab:0c:20:28:d1:
1b:5a:64:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:12 2026 by rpki-client