Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: Kbz3fHb6ApoiuzrzUhAk+w0WDORCr0O77dd/E3nAxMY=
Subject key identifier: 22:B7:9E:43:BC:B7:0E:37:09:45:41:B6:53:D9:92:CA:99:29:FA:D8
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 01A0C4E9CF076BB4C3627BE3F04C1545A714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 1126
Signing time: Mon 21 Sep 2026 17:00:51 +0000
Manifest this update: Mon 21 Sep 2026 17:00:51 +0000
Manifest next update: Tue 22 Sep 2026 17:00:51 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: +1/1PynRMVPejEXdtm4nu/kqiyWi6WWpBAWClsg3yOI=)
2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:cf:07:6b:b4:c3:62:7b:e3:f0:4c:15:45:a7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Sep 21 17:00:51 2026 GMT
Not After : Sep 22 17:00:51 2026 GMT
Subject: CN=22b79e43bcb70e37094541b653d992ca9929fad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:9d:54:ce:04:5f:84:e6:bd:15:4b:0c:70:
5c:22:67:a9:15:e2:46:d4:f8:71:eb:8c:49:1f:35:
44:b6:1b:c4:ed:90:d4:d5:19:92:93:e4:48:48:c2:
02:1b:0f:b3:43:c5:f1:17:ed:79:fe:78:c0:ac:6a:
2a:c9:96:6a:55:21:82:a0:e6:ea:0a:75:a6:a6:c6:
99:39:b1:8f:56:01:fa:20:02:97:eb:66:0c:5b:9a:
4e:af:47:df:82:3a:93:dc:8a:9b:a1:56:42:62:a8:
a2:2b:6b:02:dd:0d:f3:c4:2e:e1:80:ec:cd:d0:8d:
ba:ae:dc:4f:51:1e:0a:54:24:d6:59:20:04:31:b4:
a2:50:ab:7b:6a:1e:52:e5:2e:17:d4:e8:6e:b3:7a:
68:5d:58:7b:82:0b:a9:57:dc:9e:e6:c8:74:48:27:
61:9f:ca:60:b1:14:18:ce:d5:56:37:46:cc:bb:fb:
f5:40:dd:d0:31:9d:a6:66:3c:c9:22:88:a9:e8:29:
c0:07:1f:56:79:96:25:03:dd:8e:08:07:24:9e:b9:
eb:2b:ce:59:04:c6:5d:81:c6:96:6d:5f:76:c8:9f:
50:80:fb:5d:8d:2a:ab:45:6c:69:3d:69:01:4d:14:
ba:e1:86:d9:7c:0c:0e:e6:a6:68:fb:44:cf:90:a9:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B7:9E:43:BC:B7:0E:37:09:45:41:B6:53:D9:92:CA:99:29:FA:D8
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:5a:a9:f5:2a:c5:4f:d3:1e:31:7a:83:24:a2:69:f5:fb:
20:2d:43:cb:6a:c5:4f:4d:82:94:2a:90:a9:27:b8:bb:a8:09:
fd:c3:7a:bf:a4:53:a6:ed:76:ec:8c:18:1e:8c:39:40:f7:d7:
a3:02:88:7d:e3:ed:d6:46:f6:96:d2:fd:39:82:e0:ac:60:df:
88:be:71:bd:ce:a1:92:7d:3b:d0:a9:b3:ee:4a:1e:f6:ea:b1:
65:52:41:5d:c4:b9:46:38:65:48:23:e9:ae:82:84:54:e4:9b:
3b:96:83:9b:db:57:3e:3d:7c:8a:e9:a6:4b:e1:92:8d:0c:ef:
7b:11:8b:56:16:7d:95:76:b5:a9:b1:a7:3c:70:ff:d6:2e:98:
63:58:3f:93:0f:8b:db:3b:d1:1d:63:f6:67:54:1a:ac:ae:77:
1d:b9:46:30:6c:c3:97:ae:70:f5:1e:7f:da:de:76:ca:38:53:
5d:f5:54:fd:38:84:c6:49:15:e6:35:f0:bc:28:5e:af:a8:6c:
da:aa:af:17:03:a8:83:cf:3f:67:10:0b:32:4a:f1:ea:b3:6d:
80:d7:a3:d2:dd:88:4c:f5:25:fe:fe:0f:2d:28:4b:64:28:bb:
8f:fd:18:bd:d2:a4:ec:51:2e:28:73:a1:f0:24:ae:31:58:45:
fc:81:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:46 2026 by rpki-client