Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier: VscidvL9GYtuB7a4+dOpZVlJHi0wi3sAir5IpcZ9LQ0=
Subject key identifier: BA:E8:4D:34:E2:B3:DD:31:60:D4:C1:73:9F:C5:8D:39:EF:CE:4D:A7
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer: /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial: 019CAAFD0ABC942F23905A3639A42B478FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number: 030F
Signing time: Sun 01 Mar 2026 20:00:35 +0000
Manifest this update: Sun 01 Mar 2026 20:00:35 +0000
Manifest next update: Mon 02 Mar 2026 20:00:35 +0000
Files and hashes: 1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: F9Heb5Y5lIVKR3YF34Ki31kZeOXERZBUK1A2oXWj+OA=)
2: awgqkgGX_ig7PjNu4vRdAOgtI2U.asa (hash: b434gNNF/SxyiRmdCXUXk2aJNFNsH7QKL281MnwCsF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:0a:bc:94:2f:23:90:5a:36:39:a4:2b:47:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Validity
Not Before: Mar 1 20:00:35 2026 GMT
Not After : Mar 2 20:00:35 2026 GMT
Subject: CN=bae84d34e2b3dd3160d4c1739fc58d39efce4da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:ee:f7:27:0d:5b:c0:d4:cc:ee:e9:f9:f5:
d8:6c:1e:df:b4:fa:1b:93:75:ed:43:7f:e7:c4:02:
14:e6:e4:bb:90:53:92:03:7e:1a:c3:06:79:3b:96:
07:01:77:69:e1:33:03:e7:a8:ce:ef:09:e7:6e:17:
e5:f9:53:77:ad:b1:7b:b6:89:6d:df:9e:3f:9e:6e:
c7:15:14:ee:8d:c8:ac:60:23:98:d1:31:47:8c:97:
9b:fb:8f:c8:01:d8:11:76:50:36:1b:6a:c6:56:00:
bc:4f:8a:a4:d9:d5:fa:1b:26:8e:d7:04:85:5a:6d:
ea:1c:cb:80:b4:60:76:6f:e6:c1:ab:e9:08:6e:7a:
eb:d4:ca:86:49:4e:25:c1:a0:3b:4c:07:c3:52:41:
d8:a4:b5:c1:4d:66:b0:55:ac:6e:a4:2b:8b:55:74:
03:4d:cf:c8:4f:53:4e:51:46:b7:ad:39:da:6d:bb:
5c:68:5a:01:3d:f2:b8:3e:d7:87:99:30:42:bd:c3:
b8:20:74:a6:7f:9d:6e:2b:7a:ae:ab:47:67:91:d1:
93:b0:66:26:51:4d:39:6f:9f:7f:4e:ea:19:74:cd:
71:a6:d2:d0:69:31:8e:2c:a6:fa:0e:b4:ba:44:86:
75:90:d7:33:bc:8e:3f:19:69:58:17:7f:79:53:3b:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E8:4D:34:E2:B3:DD:31:60:D4:C1:73:9F:C5:8D:39:EF:CE:4D:A7
X509v3 Authority Key Identifier:
keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c9:33:72:09:4f:49:db:75:d1:8f:76:ec:94:ae:87:19:73:
56:bf:fb:85:ae:3a:b7:22:3e:62:09:6f:54:fe:c8:b4:5d:be:
14:d0:63:11:e0:74:e9:18:4d:65:7f:ce:eb:39:01:37:96:11:
5e:0f:49:36:23:6f:8b:b7:2d:09:48:26:77:72:0b:7f:45:62:
58:64:36:d2:dd:12:62:b1:db:61:03:66:56:17:aa:94:62:23:
98:cd:66:fa:7c:db:33:c3:a9:9b:94:26:40:bf:1a:c1:28:09:
23:ca:9e:fa:bb:94:e5:b1:ca:be:1a:8d:d9:42:2d:62:c2:a8:
a0:24:52:ae:fb:a2:85:8f:c2:37:ab:c4:2f:5d:83:7e:bb:40:
92:60:09:86:2b:82:ff:e7:b7:b9:e9:1a:29:9f:d3:48:43:8f:
d0:7a:92:6c:d4:e8:94:80:dd:66:c9:5a:84:f7:66:7a:da:f1:
c6:51:3c:b7:17:ed:89:6e:04:08:ab:e0:21:9d:87:35:9a:96:
b7:c6:66:1e:fb:e0:80:2e:8a:d4:bc:60:26:e3:7e:87:1d:4f:
ed:92:7c:44:62:9e:2d:4b:36:72:42:7c:3f:aa:c7:d7:ee:6e:
7b:b0:b9:46:51:8b:0b:ae:5f:5f:11:c3:58:e2:bc:9f:2a:c9:
97:90:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:39 2026 by rpki-client