Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: gsnhzKRVk3+qQD/+hP2s//oihxI6CYY+gEsNjpq9NLM=
Subject key identifier: 4B:57:EC:30:C3:50:42:B3:E5:3F:7D:CC:34:7B:59:37:DB:01:83:D4
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 01A0DFF3AAF708C0433C6766ACFB98D74350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 11C3
Signing time: Sat 26 Sep 2026 23:01:23 +0000
Manifest this update: Sat 26 Sep 2026 23:01:23 +0000
Manifest next update: Sun 27 Sep 2026 23:01:23 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: iBowMc3H7x7Vbx0v80XgwbcHzdSb7gys7gJfvyA6SGg=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:aa:f7:08:c0:43:3c:67:66:ac:fb:98:d7:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Sep 26 23:01:23 2026 GMT
Not After : Sep 27 23:01:23 2026 GMT
Subject: CN=4b57ec30c35042b3e53f7dcc347b5937db0183d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:89:46:bf:c3:c9:af:d6:71:20:5d:8f:fa:
9d:eb:a3:b4:9b:f7:3e:a7:86:60:06:73:ca:19:07:
3e:d1:18:5e:e5:fe:a6:3a:6f:cf:8a:0a:a3:63:33:
ae:51:5a:41:76:1f:da:60:2c:ec:ab:41:ed:24:22:
5e:94:b4:0c:29:4e:13:f2:2c:86:31:83:a8:d1:e9:
c2:0b:e3:97:af:33:b6:6e:bd:23:af:99:3e:13:82:
8d:f8:d8:ef:95:30:55:2f:50:f6:db:01:ab:c1:e8:
bf:39:d5:62:6b:35:38:ef:d0:bc:6d:88:89:be:82:
cd:63:bd:de:29:05:4f:a1:a1:e4:0d:e0:ee:7a:16:
c5:b0:ed:63:fe:45:24:69:14:98:37:55:5d:8a:ff:
50:14:2a:1f:73:d3:c0:d1:b7:e7:31:3b:fd:1f:02:
68:86:ed:64:2d:34:b6:b0:de:b0:31:fe:b0:45:c9:
1c:35:44:f4:a5:f0:61:a6:fc:35:89:70:77:3f:93:
db:af:08:ef:bd:0f:a5:09:01:ca:da:de:cc:95:90:
10:b7:7f:19:3e:55:6d:e9:8b:d5:a4:18:07:12:d8:
68:40:99:81:3f:3b:6e:a6:08:ca:3f:d3:d3:7b:c4:
b8:cd:5e:03:3b:c6:9b:70:05:a3:ac:7b:b3:e9:2f:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:EC:30:C3:50:42:B3:E5:3F:7D:CC:34:7B:59:37:DB:01:83:D4
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:cc:d4:fd:cc:b4:a2:fa:cc:40:1e:3d:5f:de:41:8b:13:b9:
75:91:c8:6d:03:98:d8:e3:2e:e0:37:d7:3a:80:41:78:5a:ee:
c2:73:4c:1d:b2:7b:04:90:93:b8:59:34:1b:b8:65:05:30:dd:
77:6d:f3:b0:45:1b:17:9b:10:96:b8:e0:8c:3f:1d:f4:6c:52:
15:00:4b:e7:d0:57:77:10:9f:9c:f1:74:c7:61:32:15:f9:ce:
4b:1c:7f:89:0a:b8:ca:ae:a0:4b:1e:29:66:34:ad:c6:7a:84:
3e:8c:6d:11:40:45:01:63:a9:2b:6d:5b:d6:1e:ff:6f:e6:05:
f8:72:e8:81:b5:df:82:24:43:01:1b:cc:c7:a1:a8:f9:fe:02:
1a:40:0c:0c:0f:bd:5f:39:4a:a6:20:1d:c9:d3:d5:74:fc:1e:
fd:8e:a6:66:5e:8c:72:03:f0:c6:a1:d0:eb:d7:73:c0:c1:6c:
b3:d9:d6:90:ee:a2:59:32:c6:2c:b0:a6:b6:dd:e1:db:3e:d3:
c7:87:fa:40:dc:41:4a:8e:79:cf:ea:f6:2e:4c:53:1f:ac:a1:
97:d4:43:4b:74:e6:36:f6:e5:09:28:ae:8c:d0:d0:e6:5c:80:
0d:94:f7:35:d8:25:4d:53:15:f4:45:07:39:40:2f:4a:86:e8:
aa:05:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:51:07 2026 by rpki-client