Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: 7fNpgs037lJCP1974ab/GjR8jJhpHc3mxgmx7H5RTlo=
Subject key identifier: E1:3C:CB:06:D1:4A:4C:D9:2F:E1:F3:3B:43:FF:BA:B8:B7:C5:07:FF
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 019CACB53443A4F583853DBBA7DE74077E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 091E
Signing time: Mon 02 Mar 2026 04:01:22 +0000
Manifest this update: Mon 02 Mar 2026 04:01:22 +0000
Manifest next update: Tue 03 Mar 2026 04:01:22 +0000
Files and hashes: 1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: 2FwuAY1mzyTEyVfUKxqnBQKKMu51wqYacWokAuEziQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:34:43:a4:f5:83:85:3d:bb:a7:de:74:07:7e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Mar 2 04:01:22 2026 GMT
Not After : Mar 3 04:01:22 2026 GMT
Subject: CN=e13ccb06d14a4cd92fe1f33b43ffbab8b7c507ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:c6:5b:c1:58:0a:3f:ea:82:74:9b:75:7b:
c8:4b:0c:f2:1a:33:37:64:37:32:14:26:65:92:c2:
2c:29:bc:33:3e:be:e0:bb:d7:e3:51:e0:a9:44:e5:
45:da:fd:74:aa:94:6e:13:8d:59:3e:e2:76:42:59:
6e:b0:7f:84:72:6c:43:ff:f4:8e:7d:2b:ee:a4:22:
31:1d:bc:e1:e3:62:49:1f:7a:9e:c3:06:72:a9:06:
46:34:23:84:ee:24:b8:43:41:6a:34:4a:36:da:a1:
f8:41:30:28:d4:40:3c:74:3c:8d:6b:32:af:34:a5:
ed:a9:84:79:01:dc:e7:37:34:3f:aa:85:d4:5b:1b:
f7:80:ac:89:d1:25:c2:1b:3d:04:11:7c:4d:a1:cb:
b7:10:2f:4d:21:f4:9d:fa:34:8e:8b:34:09:d3:2f:
0b:62:4a:0e:84:a4:33:cd:54:6d:48:43:44:d6:d2:
48:20:01:be:bc:c0:11:73:f4:48:c5:f5:33:05:dd:
be:4c:9b:8c:a8:8a:07:bc:b6:9e:b3:f1:56:fe:12:
54:06:d8:56:0b:24:3d:3b:96:b6:c6:2a:35:f2:30:
df:68:31:ee:74:e6:ef:ec:e6:9c:0a:88:a8:9c:3f:
c0:1e:de:1a:3b:88:d7:0f:61:e4:1d:cd:26:ac:c4:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:CB:06:D1:4A:4C:D9:2F:E1:F3:3B:43:FF:BA:B8:B7:C5:07:FF
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:1f:77:67:5c:44:9c:06:4d:c4:39:1a:47:a9:c1:3c:df:
8a:0f:69:5d:80:78:cb:72:3f:02:fc:a7:85:c1:d0:24:7c:1d:
24:e1:f2:10:59:21:d8:cd:96:3f:39:b8:61:d7:0d:2a:b1:b9:
e5:c3:a6:9b:f7:05:f4:8f:ce:34:ea:34:ec:db:62:7a:05:33:
56:8d:83:cc:54:74:81:d1:0c:91:95:d6:7a:b6:76:05:a2:f9:
3f:64:8a:c0:05:18:a6:5b:f2:e5:e4:a5:e1:44:ca:58:77:72:
24:a8:16:4d:a8:a6:54:0c:6a:92:1b:18:9e:4c:25:99:c7:c3:
78:1a:81:1f:c6:2e:68:8f:93:97:6a:a1:9f:37:68:aa:c6:a8:
a5:68:30:c9:a9:d7:90:e7:93:ef:4c:cd:dd:43:b9:57:79:da:
da:e6:ab:3b:41:be:07:da:f4:d3:53:88:b3:0c:5d:05:ff:28:
33:e5:32:46:fd:02:23:1d:52:ef:de:58:47:0d:2e:4e:66:40:
35:aa:9f:18:06:d3:73:ac:a6:4e:3a:49:2e:89:30:0d:2a:b2:
fa:67:0f:4f:ef:d5:2a:fb:c2:ad:aa:c0:b9:12:f5:54:90:e6:
e0:e3:dc:0a:53:eb:af:4d:54:b1:14:29:dd:41:b7:f4:18:3f:
4c:ef:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:14:55 2026 by rpki-client