Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: NnDQHGftuV/7c4iYpg3VfGy7tFHBqeJaTmPmTd/SBvU=
Subject key identifier: 99:93:F7:6F:7E:59:64:5B:FA:8D:64:0F:CB:9F:30:74:05:5E:C9:B0
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019CAC0FB06338D80C6E7D1B720A798D3A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:00:35 +0000
Manifest this update: Mon 02 Mar 2026 01:00:35 +0000
Manifest next update: Tue 03 Mar 2026 01:00:35 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: N0NxOvAtodKz8ozfLWDFSdSMKlTmACRNh466w7qVoRU=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b0:63:38:d8:0c:6e:7d:1b:72:0a:79:8d:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Mar 2 01:00:35 2026 GMT
Not After : Mar 3 01:00:35 2026 GMT
Subject: CN=9993f76f7e59645bfa8d640fcb9f3074055ec9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:ef:e4:15:84:65:85:0b:f3:d8:53:b8:ee:
15:64:a1:f8:b2:c3:1f:0d:1c:e4:24:1d:dd:c6:36:
89:15:59:ba:f9:c6:e1:5f:1b:bb:37:1a:fd:38:6e:
52:08:d7:8e:a2:aa:c4:09:fa:c5:7a:e3:33:d2:43:
21:6a:57:a2:e2:ee:bf:52:da:b2:b6:b6:ab:fd:fe:
c8:84:e8:b1:ab:c6:02:09:e0:38:53:aa:3c:45:c5:
32:f0:eb:0d:10:6f:6c:e3:c7:49:de:45:3c:02:63:
09:0f:ea:05:a4:3a:c2:eb:3c:9b:a7:65:bc:64:01:
37:b1:4f:a9:09:c5:fc:26:85:63:c2:3b:c1:c9:9f:
90:03:30:85:34:59:dc:89:56:e7:6b:bd:5f:07:d4:
3a:3a:f6:1d:73:04:80:73:45:6e:a0:47:8c:5b:f4:
ac:a3:8b:62:88:05:21:1d:3e:bb:e1:d7:d6:23:15:
80:07:0a:f9:ff:37:2d:88:4d:5a:cc:72:9e:5d:2f:
3d:13:72:cb:0e:1b:c8:a8:42:fe:92:ec:ee:ac:3f:
22:ce:65:0f:c9:ed:a7:64:37:75:1b:de:4a:0d:78:
ca:32:71:4a:c9:3e:de:c5:39:94:80:0a:15:9f:c9:
89:68:35:48:f9:a5:37:e2:dc:f4:90:6b:d7:63:09:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:F7:6F:7E:59:64:5B:FA:8D:64:0F:CB:9F:30:74:05:5E:C9:B0
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a2:21:3f:b1:a3:ae:81:45:e8:23:c0:a3:28:33:53:e9:6c:
32:c3:a2:ad:41:91:9d:a3:2b:a8:3c:0e:88:e6:01:ba:4b:b1:
ea:4e:16:21:b2:1e:13:f0:eb:8d:1f:2e:b6:08:3f:cc:4b:30:
b5:7c:e7:56:5a:61:df:7f:c8:85:6d:13:fc:48:48:48:d3:a2:
b2:3c:4d:f9:73:cb:12:7d:b4:3d:4d:85:01:4e:ef:b7:5d:4b:
5d:74:8d:a7:62:a1:0e:ae:7b:51:7c:23:9b:29:f0:86:c5:d5:
ef:bf:3e:98:c0:6b:1a:56:6b:94:3e:94:33:41:23:f5:6a:61:
88:4f:e2:2f:1a:64:59:20:a2:1e:7a:54:bb:69:b0:48:5b:0c:
7d:d5:3b:5b:86:e1:bd:88:40:40:03:17:34:fa:c3:69:01:ef:
69:4c:da:a1:5a:69:40:df:81:59:0e:17:52:9f:90:47:ad:24:
fe:0d:67:1b:15:62:bc:58:98:cd:6b:98:27:00:ed:15:45:bb:
75:c9:1a:0e:8f:41:76:f9:42:bd:f6:1a:f2:8c:1a:a6:34:14:
8a:54:70:43:6b:7b:b8:8e:0a:24:b6:ce:4b:fe:a3:00:c5:ee:
fe:29:01:cf:78:bd:19:75:f7:3e:f4:e4:84:d3:ab:65:03:db:
e2:7a:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:25 2026 by rpki-client