Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: kMNrzip848ZLWBOle4xzGPeNrYWKM43ItI4YLsNEIqw=
Subject key identifier: 05:3C:AC:87:83:BC:AA:48:85:B3:E5:31:68:04:E9:04:7E:7B:7D:6F
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 01A0C5570865198E1622765DC9A7BBCBE473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 0B3D
Signing time: Mon 21 Sep 2026 19:00:10 +0000
Manifest this update: Mon 21 Sep 2026 19:00:10 +0000
Manifest next update: Tue 22 Sep 2026 19:00:10 +0000
Files and hashes: 1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: J9hQLCjf0X0k7RkcDf2ie6xlRpq4qNaHSpxEwjPLxGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:08:65:19:8e:16:22:76:5d:c9:a7:bb:cb:e4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Sep 21 19:00:10 2026 GMT
Not After : Sep 22 19:00:10 2026 GMT
Subject: CN=053cac8783bcaa4885b3e5316804e9047e7b7d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:b6:d7:94:46:98:cb:bb:f9:c0:56:b0:0d:
7a:2d:c0:7b:53:ac:f2:00:38:e6:73:8b:e6:f2:65:
cd:1a:e6:09:a9:a5:46:e2:df:95:bd:26:bf:a2:28:
d6:f9:99:ee:b7:18:49:fc:b7:7b:9d:e6:75:48:81:
a7:43:e6:18:de:19:f9:c8:ff:67:1e:a9:7a:5f:e4:
83:9c:ca:7d:0f:92:9c:f7:9e:71:10:49:db:11:32:
36:66:05:1f:c6:05:04:0a:d4:81:08:48:34:b7:15:
47:18:f6:5c:6f:17:51:a6:3d:9b:25:95:d8:22:53:
a5:8c:25:ff:b6:2d:fb:4c:07:48:35:bc:c6:da:3e:
a4:73:4c:52:6d:62:90:00:55:8d:a3:0a:aa:06:8a:
83:4f:67:9d:43:52:08:86:e3:81:e3:54:78:f5:87:
e9:55:ed:d0:71:71:0b:3a:1e:c4:1f:c5:4e:57:b0:
14:d6:d9:0b:96:86:26:a3:7e:ab:9d:ce:68:3c:05:
f0:51:cc:38:d8:89:20:b1:69:c4:db:30:d8:db:62:
d9:38:fd:fb:ad:71:72:1a:45:11:36:08:af:dc:60:
d0:85:55:fc:de:63:3d:92:69:84:c7:ed:73:0f:18:
19:29:74:4c:f3:2a:73:d3:03:70:61:16:4e:2c:dd:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:AC:87:83:BC:AA:48:85:B3:E5:31:68:04:E9:04:7E:7B:7D:6F
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ad:1f:a4:8a:98:ce:ee:da:bf:63:c1:92:90:72:c2:c0:77:
f4:9e:44:36:50:fc:b3:87:87:0c:49:91:e3:20:8c:ab:d8:23:
c5:cc:42:2c:c4:f1:c0:15:f6:c6:3d:a7:4b:ea:17:55:c6:f2:
ce:9d:9f:98:1e:f4:6d:52:17:b0:64:ec:51:cc:8a:d2:dd:bc:
f3:cb:62:99:16:ed:d0:d1:a9:ed:ec:08:63:31:8c:6a:96:f5:
23:aa:65:79:1d:e1:98:11:55:1f:1a:c0:cf:e2:3b:7d:d9:67:
c2:37:79:10:02:7e:0b:cb:4e:33:62:87:e3:1f:8c:a5:58:74:
20:f9:02:5a:7c:35:30:3b:71:68:41:e8:e8:8d:ae:51:a6:ba:
07:a4:7d:02:78:a3:2b:c3:27:a9:68:c2:78:d9:e3:21:6d:b6:
b2:f0:98:ef:c0:92:0e:9c:f2:fe:20:b0:1e:37:7c:4e:42:f0:
0e:7b:bf:7c:ae:ae:d2:35:08:87:9c:da:dd:e7:c3:83:84:fd:
89:d6:fb:4f:ba:26:89:d6:05:ec:6b:2e:9c:87:d9:d7:da:01:
7d:a4:38:f8:0b:a2:57:ff:3c:13:59:bc:01:d6:31:8c:44:be:
56:52:fd:82:78:ad:66:5a:36:62:70:70:d0:0c:39:c2:98:8c:
b7:55:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:12:32 2026 by rpki-client