Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: d10m131jNeeGXsHh+81kc8CfgAn5O7M7/QE7nQOlba8=
Subject key identifier: 78:50:25:5B:77:83:F8:C2:0B:D1:56:AE:14:C5:E2:5A:A2:5B:AD:04
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019D9DAD815F0EF8801A9C48AD4DF852BDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 16C1
Signing time: Fri 17 Apr 2026 23:01:26 +0000
Manifest this update: Fri 17 Apr 2026 23:01:26 +0000
Manifest next update: Sat 18 Apr 2026 23:01:26 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: rvfRiAtNQ1161icmayJD25IlnMAB9DZYdL6tPNv4Acs=)
2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 23:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:81:5f:0e:f8:80:1a:9c:48:ad:4d:f8:52:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Apr 17 23:01:26 2026 GMT
Not After : Apr 18 23:01:26 2026 GMT
Subject: CN=7850255b7783f8c20bd156ae14c5e25aa25bad04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:e4:40:48:e2:82:0d:4a:87:84:3d:cc:af:
7c:2e:8a:ca:b2:ef:7d:5f:d4:5d:27:66:3e:2c:17:
71:d8:2a:bf:1b:f5:ea:55:9f:6c:eb:bf:14:4c:bc:
43:92:07:ec:7e:8b:e4:60:ba:a3:41:51:d8:38:8f:
a9:2b:de:11:0f:99:68:08:60:e7:dc:f4:e3:0c:27:
bb:34:7e:83:12:ed:ce:bb:29:56:df:ce:15:41:76:
ac:7e:53:83:36:89:04:d4:ce:94:50:e5:ae:9b:9b:
8e:90:7d:e5:2e:b6:8a:d6:c5:74:6f:b6:d6:6f:65:
6f:19:02:c7:25:62:fc:d1:32:1a:c9:64:c2:00:52:
7d:45:b0:01:9a:b4:59:c8:35:41:02:db:35:ad:04:
13:16:02:d7:53:52:ff:47:66:65:2d:4e:01:c0:d8:
e3:dd:77:78:26:b7:0d:e0:2b:e7:06:b5:3a:8d:ab:
8c:eb:45:fe:be:e7:dc:25:ea:c1:6d:88:0d:05:80:
41:6e:e6:d0:2e:66:25:4d:44:24:bf:52:4e:80:80:
05:93:15:b5:fd:4c:8f:de:07:03:93:c1:eb:6b:6a:
9c:c7:68:ce:04:51:93:26:b5:15:85:73:07:4d:05:
14:58:db:c1:0d:ff:45:07:a3:65:48:54:c1:7f:38:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:25:5B:77:83:F8:C2:0B:D1:56:AE:14:C5:E2:5A:A2:5B:AD:04
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:ac:62:64:13:19:a1:1d:26:f5:e8:12:a0:f2:db:87:94:
1b:3c:75:e0:5a:29:ae:63:ee:8b:a6:40:59:25:93:48:e3:02:
7c:6a:86:c0:71:eb:77:84:74:cd:03:8c:d7:64:23:c0:7b:3a:
3e:59:ff:8e:0e:0d:36:f6:fd:59:73:d3:23:5d:f8:fa:22:6d:
11:7c:3e:11:b5:b2:ec:0e:4c:47:f4:ec:4d:db:8e:d9:fe:d7:
b0:7c:31:e1:f5:e6:e0:d4:b4:ca:31:7d:db:b7:93:44:10:27:
ad:cb:ff:58:1c:5c:c0:13:1c:3b:b6:08:da:57:15:57:00:00:
3b:00:d4:1f:7c:29:82:e3:be:ba:5d:a2:47:b6:d0:0c:66:fe:
b0:59:40:06:44:aa:b3:68:b9:b9:75:ac:4d:16:96:36:ee:e3:
9f:75:83:36:a4:34:c8:8a:40:59:05:67:fc:e2:eb:e1:63:8f:
3a:87:86:6b:cc:c6:c4:5d:3e:0c:79:ae:86:c3:b9:a3:ad:b2:
c3:82:ca:49:86:9d:95:47:00:16:9c:70:2c:fd:c7:e7:65:00:
ae:32:35:d7:15:72:be:b2:c8:6e:eb:ca:8b:e3:e5:b9:69:c6:
6c:5a:d6:7c:71:84:21:93:cf:c2:17:77:82:15:00:ee:a4:08:
84:81:2d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:07:12 2026 by rpki-client