Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: 6yNlU+eFNBX+jGJjyAAgYs7lnP9odFHa0GL+saOgaCk=
Subject key identifier: BA:C1:C3:6C:0B:23:85:79:A9:B2:01:37:EC:D7:14:13:56:E6:A6:07
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 01A0CA7E04067A75BDB21660124FA3770489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 19:00:51 +0000
Manifest this update: Tue 22 Sep 2026 19:00:51 +0000
Manifest next update: Wed 23 Sep 2026 19:00:51 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: CY+dpVSw+B+BV3CE1YbTWMPK1CM39lffjEcG/nGgolU=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:04:06:7a:75:bd:b2:16:60:12:4f:a3:77:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Sep 22 19:00:51 2026 GMT
Not After : Sep 23 19:00:51 2026 GMT
Subject: CN=bac1c36c0b238579a9b20137ecd7141356e6a607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:3b:3f:1b:e5:42:e1:47:3f:6c:bc:8f:9d:
01:f1:62:90:fa:01:53:81:04:da:52:3b:e3:b1:08:
e9:ac:47:a0:7f:c4:d9:58:25:16:c4:72:3f:3c:51:
e0:91:31:58:ca:e9:1f:96:8d:46:e2:49:f5:c3:03:
b2:e6:a0:10:d6:f1:c0:6a:91:fb:80:eb:0a:49:12:
1c:e3:68:73:8a:41:10:d6:96:08:f6:f7:69:b8:ee:
3c:5e:cd:bb:77:f9:56:10:8b:b9:7f:fc:8d:25:63:
af:e3:ac:8d:d4:d6:a0:c5:f1:a5:a8:9e:38:af:23:
d8:d4:78:28:93:ba:27:1a:d1:a4:d7:c8:ee:66:a9:
8d:14:2c:43:83:98:cb:02:e7:35:b5:c0:d9:4f:e7:
15:0a:3d:10:9c:c6:a5:1e:e4:ca:16:db:21:26:d2:
78:06:48:6d:d8:4d:10:a0:07:16:2d:18:0b:f1:d8:
e2:13:7a:6a:37:4b:79:83:7c:81:f3:df:cb:4e:b0:
f6:de:83:fb:31:38:d1:2a:9f:58:76:ee:13:e9:d1:
94:30:ef:f3:95:9d:8f:d1:21:36:7e:ca:40:fd:09:
e4:11:ee:f1:52:97:0c:b6:78:72:2d:8d:ef:c0:b3:
4c:fa:60:7c:ad:32:aa:06:37:9e:8a:c6:ba:c8:de:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:C3:6C:0B:23:85:79:A9:B2:01:37:EC:D7:14:13:56:E6:A6:07
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:72:e4:a2:a3:e7:ae:8b:2a:30:8d:78:4f:21:f2:02:a4:b4:
24:c4:3b:04:ba:d6:d3:99:5e:9d:9f:bc:ff:65:21:c8:98:4f:
da:a6:e4:ab:cc:a4:53:6e:fd:ce:82:80:8c:d6:cc:00:76:96:
bb:97:3d:f5:85:55:27:8f:91:b1:19:42:b7:d8:c9:36:6a:af:
6b:54:9a:a5:4f:bc:3e:52:24:82:e4:88:bb:51:f7:cf:5e:b2:
6e:ee:df:b0:44:62:65:68:16:9f:b7:66:ce:d5:74:80:aa:8a:
c4:82:3d:cf:a8:40:b0:b6:4a:92:ad:1f:c1:1a:bd:3e:ed:06:
87:7e:61:9a:e9:42:81:cb:94:82:a6:5d:15:d7:3f:f4:39:05:
90:62:15:d7:6a:a1:7c:06:0a:4d:6d:73:c3:bf:08:3e:85:ae:
d4:6e:7a:30:a4:01:65:08:45:c5:e3:47:04:8d:f3:5d:9d:80:
19:23:90:a1:d1:7f:a2:89:eb:78:09:cb:8f:f9:4f:a6:80:7c:
cb:1c:f1:16:d5:6b:e7:af:4c:9c:1f:ca:5b:b6:35:09:c5:1c:
9f:3d:c5:6c:ae:06:de:b7:7b:20:c5:7f:12:0c:71:bf:b8:11:
39:2b:f1:65:23:75:aa:1e:7b:e2:22:c1:0b:bb:5a:91:b7:42:
49:a3:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:18:28 2026 by rpki-client