Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: E91nWk4xD+b3YAgwC/vpdAc6BuMFLjkU2E8dDA+nL+4=
Subject key identifier: 03:26:21:DF:95:6B:AE:EA:3E:50:77:C7:06:5B:80:6B:87:B6:91:86
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 01A1DEA75800A77EC217F96E6CCA88739D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 10:01:11 +0000
Manifest this update: Sun 15 Nov 2026 10:01:11 +0000
Manifest next update: Mon 16 Nov 2026 10:01:11 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: T4pHXJVE+quaKBQvXzUFnD7TSkzIRitkKzje7DuTQSo=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:58:00:a7:7e:c2:17:f9:6e:6c:ca:88:73:9d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Nov 15 10:01:11 2026 GMT
Not After : Nov 16 10:01:11 2026 GMT
Subject: CN=032621df956baeea3e5077c7065b806b87b69186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:77:8c:3e:1a:ff:64:8a:6f:23:7e:41:7f:
42:f5:df:71:27:f0:5d:b3:71:ae:b1:ac:8f:13:0c:
97:b9:63:d0:d4:24:e2:be:45:15:12:df:08:66:c7:
48:8d:13:b5:92:29:0c:c9:79:9b:25:a5:c3:66:50:
24:c0:55:e9:56:b1:5f:a5:99:02:ba:69:31:40:19:
1f:6d:b3:fb:be:23:3e:02:c8:ff:97:14:91:b5:24:
86:ae:ac:d5:d9:e8:05:70:ec:70:5a:b1:4d:54:79:
c8:b7:fa:10:7c:34:3f:3c:88:bd:a7:03:6f:6b:0c:
8f:df:ca:96:dc:4c:cc:08:6c:3b:f0:ec:2e:07:df:
c4:60:9b:4f:c6:80:0e:1e:24:18:c7:96:9a:9a:65:
ba:da:cb:43:81:17:3f:fe:53:89:09:3c:14:39:ed:
c6:78:20:2d:08:9b:c8:aa:6d:85:db:39:02:f6:c5:
43:2f:ad:d3:d9:8e:1d:63:8a:a5:14:3e:3d:2e:e1:
fa:fa:99:94:88:fe:61:a7:ba:22:80:02:56:f8:6b:
76:49:21:79:2e:96:ad:e3:8c:ab:ca:2e:65:45:85:
94:67:51:36:60:14:c0:3a:e5:d8:ed:7b:f4:75:c1:
3b:1d:be:ce:66:c6:24:1c:06:b4:e0:c3:9b:9b:ce:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:26:21:DF:95:6B:AE:EA:3E:50:77:C7:06:5B:80:6B:87:B6:91:86
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ef:7e:01:b5:66:5b:e7:7e:77:6a:47:61:1e:63:3c:3e:0a:
4b:d0:e5:ab:27:b9:fd:6d:b4:70:3a:87:bf:8b:ac:4f:7a:4e:
07:ed:56:9e:97:85:a3:e6:6b:5e:ab:92:93:89:42:43:42:e0:
3a:c2:b8:3f:73:33:2e:0f:ba:3a:94:10:e2:7d:f8:a0:1a:e5:
7d:31:49:fc:29:82:27:ca:ac:03:42:52:c0:4c:58:52:9b:25:
1a:40:6d:77:dc:ad:79:ca:16:86:fd:c3:64:a3:cf:5d:6f:a9:
c3:cc:fc:3e:6d:90:96:94:7b:ec:ba:11:cf:cc:34:33:87:c9:
ca:56:d1:d5:b0:ee:7b:5e:fd:32:fb:cf:17:e2:60:fd:75:9a:
14:eb:53:18:a7:dc:6e:fb:24:39:4b:20:df:85:30:06:40:ab:
51:15:3a:b8:c3:5d:1f:7a:b9:f2:04:90:a7:ba:14:e3:99:ea:
0a:69:84:b5:7e:78:11:2b:93:f2:0d:66:ae:2d:8b:2e:06:f4:
8b:14:8f:c9:2a:57:42:18:a9:78:98:b2:45:91:4d:d1:18:20:
86:1f:42:61:69:80:00:26:86:99:21:81:9a:86:2a:f7:c0:18:
6a:03:30:9a:2c:dd:eb:09:77:be:30:f3:84:dc:7c:1c:ba:75:
ca:c6:4a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:04 2026 by rpki-client