Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier: yO05NidJ7zYfS/VSxjymQh6F4XLIiQGbwFBqKEjMmes=
Subject key identifier: AC:26:B0:83:DC:E3:12:49:17:9F:42:49:B2:26:85:14:27:01:D7:4E
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 019D9AABD8D411FDE721A1E368E345E8D0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:46 +0000
Manifest this update: Fri 17 Apr 2026 09:00:46 +0000
Manifest next update: Sat 18 Apr 2026 09:00:46 +0000
Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: KIwJYC0GiQx6o0XN0m/RiHSN16kFZ1cGWpOs5XHxSA0=)
2: O4J-NYIe9H0u52beSrp6KYfxSyM.roa (hash: 9cGF5R/YNUjncOYY/j5mBT3HsIQEUCIbaqGilj06Z9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:d8:d4:11:fd:e7:21:a1:e3:68:e3:45:e8:d0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Apr 17 09:00:46 2026 GMT
Not After : Apr 18 09:00:46 2026 GMT
Subject: CN=ac26b083dce31249179f4249b22685142701d74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:eb:1e:56:62:69:97:8e:4f:3f:a9:e3:67:
58:dc:d5:ab:49:b3:9b:c2:58:34:0e:10:c1:66:b6:
e5:11:3f:62:fa:97:38:12:c5:e8:27:d1:4f:9d:d3:
56:e9:0e:23:62:94:75:d8:40:9b:e9:89:1f:7d:db:
79:4b:5f:cc:df:4e:86:02:7c:74:0d:ab:b9:6e:45:
cd:a6:65:d2:16:f3:04:ec:f7:f8:fb:81:64:81:1e:
ac:63:73:a6:57:d9:9b:89:b2:d8:6c:00:2f:51:98:
69:82:9c:8b:49:5e:e9:76:aa:ef:8c:38:c8:dc:05:
77:3a:d3:55:26:6b:80:fa:0d:6d:b6:70:ed:73:55:
6d:df:c8:a1:74:99:d5:55:8c:0d:c0:5f:65:e6:07:
d9:3f:27:a1:27:c6:c6:5a:29:2e:ac:38:66:f4:1a:
1f:47:21:24:d1:3d:72:32:af:cf:14:13:97:ba:35:
7f:04:72:1c:b6:04:69:7b:c3:9a:d1:67:57:28:35:
06:1e:da:af:b4:d3:8a:22:dc:c8:61:f3:96:ce:4a:
72:d6:62:2e:cc:c3:24:fc:7a:2d:4b:c0:fd:81:eb:
e2:ed:66:a0:53:28:24:ae:81:19:34:0f:b7:37:d7:
e0:be:b9:e0:35:96:cd:71:41:97:41:2f:6e:2c:1b:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:26:B0:83:DC:E3:12:49:17:9F:42:49:B2:26:85:14:27:01:D7:4E
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:bc:1a:a6:d8:43:a4:d5:be:5a:98:51:73:c0:5b:45:0c:
b4:42:0e:27:45:d5:24:9a:e4:20:9b:2f:5b:86:ac:57:b8:97:
e9:b5:b0:18:2a:42:5a:f4:87:58:f6:a7:f1:b3:03:4c:56:d9:
ed:a1:a9:2e:a9:6a:f5:bd:0b:45:3f:5f:d6:4a:05:6e:4a:7c:
d4:04:ed:76:75:c6:5b:26:c0:44:19:29:64:df:67:c1:5a:da:
b2:69:c1:8c:75:1c:66:b3:57:4e:7c:14:8b:95:d3:d7:31:f9:
f2:f6:fd:7b:d2:08:02:16:ff:2a:64:e7:e0:0f:05:6e:2b:92:
1e:23:c9:d3:8f:a4:99:b0:c0:1b:b4:bc:8f:6c:79:91:f7:6a:
c3:d1:7b:db:0c:a8:d7:df:e4:61:9c:00:be:8d:52:d9:1d:3f:
70:2c:57:af:65:db:9e:d0:9a:51:bd:59:af:bc:3f:82:bf:7a:
15:7b:1e:74:e6:bf:ef:02:54:de:10:4b:80:ff:73:2e:cc:8b:
eb:ac:6c:85:8d:b5:46:ae:f0:47:f1:6e:32:02:3a:b4:eb:10:
1e:85:29:40:b5:ac:c3:68:3d:48:74:31:da:28:47:ec:18:7d:
60:71:99:1e:cf:b7:ba:d3:29:be:b4:c2:5f:90:89:de:21:d1:
0b:fa:96:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:45 2026 by rpki-client