Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: 7Q7qVlf0LA3NfwuANfjIwV6bjwfPo1Qq01WgLWE/Ybw=
Subject key identifier: DA:54:93:8A:9D:A7:2B:78:10:05:15:FD:6B:62:5C:A4:4D:2F:F9:2D
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019D99997F2C2B1CDC38F6268B595364C606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: ssX+ie6vl9rvL5xUXx6jCjWNUbvnkUcfcsad4U722Q8=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7f:2c:2b:1c:dc:38:f6:26:8b:59:53:64:c6:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=da54938a9da72b78100515fd6b625ca44d2ff92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:d9:ed:7d:de:36:26:5b:61:9c:47:4b:27:
b3:da:85:d3:8d:4c:7d:d4:e1:9c:0a:cb:98:20:d9:
d1:4c:16:3e:d3:69:10:74:ec:09:0f:b7:42:58:fc:
78:a3:1d:f8:89:fb:ae:48:f7:b7:f7:b6:31:a2:b4:
a1:27:62:f8:b8:9a:ad:88:d3:82:9b:e6:fd:58:c2:
63:ea:bd:fd:6d:eb:65:2e:36:43:f7:3a:bd:a6:04:
f1:a3:be:11:bc:48:8d:e4:0f:ec:7e:50:ff:b1:1e:
ef:0b:36:54:4c:7f:d1:89:28:40:55:8a:c5:da:39:
c6:8a:42:4e:69:f8:79:61:0b:80:27:59:b6:dc:b5:
46:72:5f:50:ba:48:6c:11:40:05:bf:f3:c2:aa:32:
33:e3:24:39:ff:b1:5d:5d:38:c3:bf:b6:d6:23:14:
ce:08:b0:67:59:71:47:71:eb:e6:ba:c7:f5:fa:98:
88:f4:16:80:14:fc:e2:57:99:83:e2:ab:28:e3:2c:
3c:ff:d4:c6:1c:6f:70:34:cf:28:2c:eb:00:1b:b3:
4f:f7:51:b7:c7:06:4b:17:e2:de:79:0f:1b:a2:99:
0b:9b:d4:e4:8b:8b:a2:39:a3:9a:69:05:d3:0d:39:
58:87:2a:f7:d9:ae:16:2e:c0:3e:cf:fe:3a:0d:23:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:93:8A:9D:A7:2B:78:10:05:15:FD:6B:62:5C:A4:4D:2F:F9:2D
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d7:13:45:71:49:26:e7:25:38:a7:4e:76:80:37:9c:43:df:
cc:40:81:25:94:b4:3c:25:a0:f9:c2:86:30:ba:b2:0d:de:6b:
50:91:d3:bd:d9:38:d4:90:82:35:d6:f7:42:3a:10:51:cd:d4:
22:a2:d2:c2:29:4c:9d:6a:6a:ba:c5:09:78:37:8b:b4:75:d7:
40:f1:ba:93:7c:3f:f6:03:ac:59:d1:1d:f3:77:0a:87:97:3d:
83:0b:9a:2b:91:38:3a:79:8e:46:c3:a9:ad:61:e1:d7:9b:6a:
9b:f5:b0:42:ec:8a:7f:fc:b6:80:78:3f:73:19:29:4d:07:e5:
96:e1:71:e5:c0:3a:72:ea:cd:10:f9:a0:c9:72:37:e9:9f:a9:
cd:f2:16:dc:64:82:1f:ff:ad:aa:05:73:f9:54:7a:5b:a4:9f:
54:6d:64:9a:d9:98:b1:17:f3:89:52:de:d1:b0:1b:54:a3:57:
1f:24:9a:d0:90:61:6a:4f:77:98:f6:25:a7:9e:b1:d4:62:63:
5b:17:f8:b9:af:e4:32:11:e6:21:74:32:59:74:18:b9:41:d7:
c9:cd:dd:f3:45:ef:f0:ab:f0:84:ad:d3:c6:31:2a:8d:72:1c:
9d:9a:f3:0f:33:33:02:d2:9f:5c:ac:da:7a:41:a8:1d:10:4b:
26:02:3d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:15 2026 by rpki-client