Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier: rptTFOOBKzbk9h5kjnRe24mctIWJ7z+cgwyWDqojXG4=
Subject key identifier: 7A:A5:AD:59:31:21:7C:3A:54:E8:2C:39:46:9D:F0:D7:F8:9E:CA:AA
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial: 019CAB6BCC6622534FE2669766F6E34AB63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number: 11FC
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: 43xSEMw8PauekPmv3YrZLhYIvF7fzCnzuis/lavPqKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:cc:66:22:53:4f:e2:66:97:66:f6:e3:4a:b6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=7aa5ad5931217c3a54e82c39469df0d7f89ecaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:67:cb:85:35:96:c7:bf:52:a8:4a:4c:60:
ad:06:e2:f4:67:aa:2b:df:d2:01:50:1e:57:21:48:
32:f5:4d:d5:88:bc:d9:7d:94:f9:f1:f6:75:c5:48:
21:eb:ec:d5:da:b5:f5:a5:14:eb:6d:12:ca:92:37:
2c:e8:8c:de:e6:59:0c:e2:cb:9c:c5:a8:86:8a:77:
47:22:51:41:61:e8:f1:57:f2:0f:f4:56:8b:47:13:
5f:d9:57:06:95:ae:e5:a1:7f:78:da:e6:19:d9:8e:
f0:aa:bf:69:b6:85:3e:3f:84:2f:23:ef:7e:10:6e:
9b:17:f0:a9:a1:a5:0a:19:0f:7d:cf:be:83:c9:0b:
65:10:98:2a:07:ba:22:ec:96:08:b4:d3:b2:94:cb:
21:87:3f:3f:96:31:eb:2b:f3:63:51:c6:a1:a0:bb:
47:82:6b:96:1e:29:f2:b5:76:12:27:79:59:78:58:
4f:62:cc:0e:2e:ae:eb:21:64:4d:8b:d0:f8:7b:be:
5b:aa:00:04:7c:22:6d:6a:c1:a1:88:79:25:85:82:
7a:96:8d:d2:02:2f:94:02:67:b2:aa:c2:d6:ed:dc:
7d:e7:c2:93:79:3f:0e:0c:aa:0b:8c:e6:b3:8a:4c:
3b:c0:cc:d6:69:15:7c:9e:dc:3e:90:c2:c9:ee:13:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A5:AD:59:31:21:7C:3A:54:E8:2C:39:46:9D:F0:D7:F8:9E:CA:AA
X509v3 Authority Key Identifier:
keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4b:0a:8e:06:2a:95:98:92:80:97:2d:9f:90:ed:0e:e3:39:
88:44:74:31:ed:ea:6a:05:6f:95:4a:19:9d:0a:ff:e7:db:72:
8c:f1:94:5a:c9:2e:99:e2:9a:e2:d1:b4:04:ba:3a:06:f7:af:
81:20:e2:dd:bc:d9:41:bb:88:6a:b3:ec:70:84:f8:2b:46:28:
4a:51:5f:c2:34:c5:f2:b1:bb:3e:a5:e9:c0:4e:da:e1:73:79:
6b:92:53:fa:d5:16:17:b8:a2:89:72:14:1e:15:f4:c1:36:6d:
3c:dd:8f:76:a3:bb:45:2a:97:34:c1:b3:dd:1d:96:9a:5c:30:
a0:71:14:55:50:96:fd:7f:a0:91:72:bb:d0:8b:00:dc:25:cf:
bf:0d:f6:81:ca:4a:47:11:77:38:28:86:bd:aa:c6:aa:6f:57:
27:2b:2a:a4:0b:2f:a0:0a:6e:c8:d4:e3:18:34:74:da:77:c2:
98:03:30:d6:fa:66:20:e7:50:b8:98:e0:54:5d:f6:40:82:01:
91:c3:f5:ef:d7:d5:7d:c3:2a:0b:8f:e6:b4:2e:1d:b3:49:22:
52:4b:77:57:7d:cf:e8:6e:68:4e:5f:41:32:c9:c9:e3:29:d4:
13:9a:be:b9:4e:86:8d:16:21:e1:fc:02:c4:01:26:51:c5:e6:
5c:3c:2f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:58 2026 by rpki-client