Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: Ugk+Ac8Sa5YlTToih7HjQKnsILKrk1UL3Mw0Qac2eAo=
Subject key identifier: 75:BB:9C:30:A5:D2:B5:16:F6:B0:73:CA:FD:43:2B:88:BC:BC:A9:A6
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019CAE34F492C523EC581C9110222EE63C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 1645
Signing time: Mon 02 Mar 2026 11:00:31 +0000
Manifest this update: Mon 02 Mar 2026 11:00:31 +0000
Manifest next update: Tue 03 Mar 2026 11:00:31 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: vkavdn6ZjEe8pHBoJhi6A90VH2tAS/zKmA37lEd/Lbw=)
2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f4:92:c5:23:ec:58:1c:91:10:22:2e:e6:3c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Mar 2 11:00:31 2026 GMT
Not After : Mar 3 11:00:31 2026 GMT
Subject: CN=75bb9c30a5d2b516f6b073cafd432b88bcbca9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:8a:e1:22:b0:23:a1:6c:05:5a:3c:fc:f4:
17:0a:04:14:c3:ce:50:9e:a4:ac:b1:16:ad:4d:7d:
2b:f6:ca:a0:ac:81:f0:56:00:ea:2d:a6:83:57:e5:
03:61:70:93:79:a6:4b:fe:07:72:4c:dc:13:14:35:
5f:61:9a:f2:1e:6b:83:72:25:bf:d4:ce:6a:2f:76:
18:6f:ee:67:4f:cd:99:c0:6f:f9:72:f1:4c:e6:46:
b7:78:6b:df:c0:1d:4d:94:89:72:d2:66:2c:2e:f5:
c3:2a:90:ca:13:3c:f8:bc:e4:82:d3:9e:ba:70:37:
c7:8c:77:21:a7:d3:ef:d3:d9:aa:a6:71:0f:32:15:
2f:42:e8:33:ca:f0:12:54:2a:9b:bf:db:9b:d3:10:
13:bd:5d:ef:3e:9c:14:4e:f1:f5:a1:8b:26:8b:ff:
80:02:42:21:42:68:31:b5:2c:41:3b:f6:94:92:0a:
a3:6c:c2:b2:2b:b8:d8:14:f0:8a:78:ba:1d:86:a3:
83:7a:b9:47:9f:0c:73:9b:79:b4:35:50:89:5a:d2:
d5:c4:18:f9:77:0f:b2:68:56:45:6f:6d:fc:b8:7a:
6d:91:15:ea:3f:4d:1c:c4:98:98:36:1a:18:a0:17:
df:02:3a:6b:11:d8:e2:df:4b:91:d4:ad:8d:46:d5:
84:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:9C:30:A5:D2:B5:16:F6:B0:73:CA:FD:43:2B:88:BC:BC:A9:A6
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d1:56:a5:c6:b5:ba:17:31:f0:66:f1:01:b1:64:f6:13:d5:
07:d1:0b:ce:ee:d6:8f:98:13:12:21:d3:30:68:50:48:05:46:
1f:bb:c1:d9:6b:2b:32:54:ba:c3:5b:78:97:72:01:b7:c3:71:
72:9c:f2:5c:c6:9b:5b:0d:c8:c0:8b:be:dd:ab:de:0c:28:93:
53:17:76:3d:87:1f:8d:dc:96:82:89:43:3c:18:57:81:ff:ae:
db:38:a0:ac:94:77:41:5a:b0:f6:bb:40:a9:6c:86:76:11:44:
3b:30:b1:23:ce:8e:d4:dd:b5:91:52:71:3a:99:c8:14:d8:7e:
31:d3:88:bd:e7:31:71:5d:79:b8:5d:4b:c6:43:19:0b:95:ed:
9e:43:38:9f:ce:41:3c:1a:97:d2:fe:ca:16:a5:1b:8e:63:a6:
e5:8a:74:61:e0:e5:6a:b7:ac:01:41:c4:76:5e:a9:14:b9:a1:
5f:ae:d3:1f:8e:8c:f8:ef:61:76:74:99:9f:c2:2f:00:6c:e3:
34:9a:3a:be:3e:29:c9:5d:35:04:8d:86:62:b0:08:6b:57:d9:
ce:b0:43:6f:a9:68:a4:6e:3b:0f:e7:36:5c:6d:4d:75:1a:96:
7e:4f:e3:da:5c:b4:7b:64:34:40:40:e3:68:cf:db:dd:17:f6:
f7:2d:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:48 2026 by rpki-client