Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: 3Gyd51ObQwT9sBOxCUZ+KtX+lU6wyLyCDqjUw+az8ec=
Subject key identifier: 50:69:1C:8E:E7:F6:35:F0:21:E6:43:5C:C8:2D:A6:45:93:A3:63:07
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 019CAA218E792BC17CD10588924F5A7B5C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 068A
Signing time: Sun 01 Mar 2026 16:00:51 +0000
Manifest this update: Sun 01 Mar 2026 16:00:51 +0000
Manifest next update: Mon 02 Mar 2026 16:00:51 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: MuOxYwTc07ZfwbT093r2vQewmSCChs3oY8tEIT3rM/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:8e:79:2b:c1:7c:d1:05:88:92:4f:5a:7b:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Mar 1 16:00:51 2026 GMT
Not After : Mar 2 16:00:51 2026 GMT
Subject: CN=50691c8ee7f635f021e6435cc82da64593a36307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:4a:cd:4a:5f:ee:16:63:c0:29:77:03:7a:
05:4f:d9:be:05:6b:fd:8a:b3:d0:07:3a:05:ce:73:
6f:56:d5:bd:24:d5:04:ef:0c:71:b1:dd:dc:d2:a7:
5f:fb:3e:16:3b:16:d1:31:d7:be:58:a2:0b:36:28:
0f:c2:df:fd:b1:cc:a1:1e:7e:da:6e:99:7f:21:52:
94:58:02:01:d0:65:10:d6:22:c9:3f:c7:5e:5a:de:
bd:fe:89:f7:73:78:eb:bf:48:c9:9c:da:d1:f9:a6:
87:21:3e:0b:db:11:f8:5d:1e:b7:28:fc:85:bb:89:
ec:dd:64:84:75:cd:c2:f1:21:f0:f0:96:13:c5:86:
28:23:86:ab:71:4a:e7:00:13:65:26:41:db:b2:6d:
5b:6a:d1:bb:16:a0:5d:a1:56:5d:2b:7f:db:3f:81:
96:e2:ca:43:e3:3e:40:5a:af:95:32:f9:6c:5f:8f:
a1:ea:42:70:69:1f:be:ec:2e:30:3e:42:f7:7b:5c:
a3:59:de:9d:ae:2c:22:a5:3b:48:1b:c0:89:99:a8:
90:3b:71:ce:bd:f1:9d:af:bc:ca:88:2f:28:00:8b:
a9:2f:82:d1:8a:16:84:31:2c:cb:54:7b:86:f5:74:
26:98:ce:bd:51:b3:50:c8:07:cb:bf:d8:d2:a4:9d:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:1C:8E:E7:F6:35:F0:21:E6:43:5C:C8:2D:A6:45:93:A3:63:07
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ea:ae:38:75:b6:09:f8:a4:29:93:30:4e:aa:1a:b2:d7:25:
17:fe:e4:94:30:0d:22:0a:22:65:38:4b:a1:0a:2e:80:7d:8e:
ca:d2:ce:a6:6e:50:1b:a0:04:7c:fe:57:14:89:06:a1:91:67:
a7:15:ec:7a:1d:9d:56:2b:f5:9a:ab:95:a1:84:9e:da:31:95:
b2:b2:a4:04:08:e5:3f:e3:55:c5:09:19:a8:99:cc:c4:e8:38:
7a:69:fc:ac:24:3f:51:bb:68:3a:24:da:a1:bc:9d:3c:d7:33:
df:ef:21:80:41:5d:2b:9f:a9:4a:91:57:f4:36:15:d2:20:d1:
10:16:0f:8e:48:b0:b0:65:13:2e:89:5e:50:db:81:a0:0b:bd:
aa:7f:29:6f:7f:30:14:1b:75:ae:e5:d0:60:61:02:48:94:e0:
5d:29:83:4a:41:1d:96:81:80:b7:1e:79:af:94:68:a4:1b:cc:
8e:ee:90:77:0c:43:63:05:3d:c2:84:c7:67:7e:5c:d2:70:d5:
86:07:8b:05:32:39:ce:01:00:49:26:19:8e:e8:23:32:3e:30:
c4:00:b7:ef:df:28:c8:ac:85:8d:90:11:98:34:b9:51:1b:65:
97:8d:5b:59:71:6f:c1:10:18:d7:43:56:d2:d6:25:fd:ca:69:
f5:e5:1e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:57 2026 by rpki-client