Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
File: b9O3_1LTsZJWeqzKTZuGInQbf3o.mft (raw, json)
Hash identifier: M0a9X7qTUiXTKqnQWOKiOjZawH8iuCtGQT/xXbOWyGk=
Subject key identifier: 1D:7D:3A:2C:41:97:4E:A3:34:D9:5C:31:8B:BA:9E:31:8C:D2:ED:04
Authority key identifier: 6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
Certificate issuer: /CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Certificate serial: 019FA89A05ED07F64D3A0EE1D2D365515596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:34 +0000
Manifest this update: Tue 28 Jul 2026 12:01:34 +0000
Manifest next update: Wed 29 Jul 2026 12:01:34 +0000
Files and hashes: 1: b9O3_1LTsZJWeqzKTZuGInQbf3o.crl (hash: +tJOCdv0pYB5o2hbIiwtIE86cUZX855Ei0GTRDqcr7c=)
2: oezyOEn59V6mni3H8CQ5vs1bQnw.roa (hash: q4IZ+VG661pUAowCN5QrAWUUig5pgHw4H2UhgQ/noNs=)
3: s6GU5a1jn8Ou-UOGgyrZBXIMUto.asa (hash: 9PM53IuTV6JPTHt2d4Dv4yh3Dx6FAU5utGwfVFOGN9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:05:ed:07:f6:4d:3a:0e:e1:d2:d3:65:51:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fd3b7ff52d3b192567aacca4d9b8622741b7f7a
Validity
Not Before: Jul 28 12:01:34 2026 GMT
Not After : Jul 29 12:01:34 2026 GMT
Subject: CN=1d7d3a2c41974ea334d95c318bba9e318cd2ed04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:b5:80:41:1c:3a:fd:88:9a:dd:52:18:a8:
de:7d:2d:95:86:45:94:b1:6a:3d:67:34:4b:fc:fd:
d8:c5:29:29:ed:39:d3:3c:34:a4:c3:13:f6:ea:bd:
fd:e5:0a:3d:84:52:fb:04:6e:5c:7e:d7:8e:b5:09:
b0:74:05:24:93:d2:16:59:82:02:21:ce:26:ab:47:
e7:d6:5e:eb:eb:5e:dc:a6:fb:b4:39:62:c8:5e:f7:
16:f4:83:2e:6f:69:d7:af:96:73:66:6f:01:ef:61:
47:da:55:a6:59:ca:7c:50:c6:2e:ed:b4:23:19:d1:
5d:18:74:f3:7d:62:06:53:6b:33:2b:08:fb:a3:cd:
36:8a:70:fe:41:e1:12:32:44:9d:5d:3b:fc:f8:05:
da:f4:76:37:9b:8f:e5:ac:70:5a:cb:b4:a3:6c:42:
b4:38:d6:b6:b5:54:99:8f:b5:16:01:2d:22:38:19:
b0:b0:fa:36:be:bf:ca:06:91:db:41:99:2b:28:46:
74:3e:23:80:6a:71:d7:97:5c:03:99:1f:0f:0e:ba:
ab:b2:4f:87:35:70:9d:0d:da:53:61:7a:b6:f0:96:
19:3d:d0:93:99:53:1e:9b:50:d2:7d:1f:44:f1:d0:
8e:bd:b8:60:74:c4:5f:24:e2:2a:aa:d4:d0:40:e8:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7D:3A:2C:41:97:4E:A3:34:D9:5C:31:8B:BA:9E:31:8C:D2:ED:04
X509v3 Authority Key Identifier:
keyid:6F:D3:B7:FF:52:D3:B1:92:56:7A:AC:CA:4D:9B:86:22:74:1B:7F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9O3_1LTsZJWeqzKTZuGInQbf3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/b9O3_1LTsZJWeqzKTZuGInQbf3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:63:fb:36:e7:dc:e4:9b:c8:2e:97:36:37:16:55:85:01:
04:42:2d:64:01:95:84:b8:1e:43:5c:5f:fa:ed:3a:9c:f2:70:
03:a1:ef:d1:0e:de:b8:b2:53:f5:55:06:36:a8:87:1c:30:51:
05:5b:76:0d:ef:43:1e:ef:9e:8d:fa:66:67:59:2e:6e:f9:15:
ad:21:c5:ca:de:22:39:18:96:5c:d0:51:92:98:e1:1a:6e:bd:
9e:98:78:b3:0a:c9:4e:99:58:db:7c:b7:28:de:5a:5b:b0:19:
64:ef:00:ee:c5:c3:01:7a:b1:2f:e7:7c:2c:1d:a5:7d:d3:52:
b2:94:98:10:17:c5:d9:06:a3:db:11:ac:cb:cd:f2:64:60:9c:
3f:c7:9e:4b:95:c9:ee:21:c7:51:56:3a:24:ab:9f:69:a7:40:
11:fe:f1:2e:67:23:a9:e8:4c:a9:a0:0b:a6:41:97:63:5a:f2:
68:8a:72:52:a8:b4:44:ac:a3:cb:36:ee:d7:00:05:9b:b1:2d:
17:59:1b:de:4c:25:0f:b0:d8:81:04:7e:da:a0:2d:6a:56:63:
8f:f9:72:c1:ea:0c:bc:fd:2c:3e:a7:05:ac:86:75:af:8d:9a:
cb:07:a8:de:30:44:53:51:aa:29:47:7c:35:33:d3:87:29:34:
c0:20:6e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:52 2026 by rpki-client