Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier: QADmbb60INJxqOMZmFF52ZWpDRRBNhJTWjjzkWA1HAQ=
Subject key identifier: A9:E8:A4:2B:ED:FC:39:1F:41:87:B6:51:AF:87:DB:95:47:7D:53:AA
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 019CAB340D4EDA7132F8F8D4F25F9D681CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:41 +0000
Manifest this update: Sun 01 Mar 2026 21:00:41 +0000
Manifest next update: Mon 02 Mar 2026 21:00:41 +0000
Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: /WRkHmC5GymZI8JlcQbRMCDxBQJbZQ5kcKIBle5bN2g=)
2: O4J-NYIe9H0u52beSrp6KYfxSyM.roa (hash: 9cGF5R/YNUjncOYY/j5mBT3HsIQEUCIbaqGilj06Z9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:0d:4e:da:71:32:f8:f8:d4:f2:5f:9d:68:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Mar 1 21:00:41 2026 GMT
Not After : Mar 2 21:00:41 2026 GMT
Subject: CN=a9e8a42bedfc391f4187b651af87db95477d53aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:87:42:a5:15:9a:68:eb:42:04:69:d3:78:
b9:8a:9f:9b:81:93:da:0b:44:97:b5:f1:73:ae:22:
5a:9f:a0:dc:0a:58:20:9b:c8:de:21:4c:2a:39:75:
fd:04:19:20:5b:b8:07:43:94:2a:0c:a9:91:af:92:
78:e6:85:ae:17:b3:49:81:55:92:9b:28:7c:66:5c:
ec:68:c8:d4:01:0d:fb:a3:29:25:63:be:63:44:e0:
63:da:88:a0:ce:9e:68:21:44:cd:44:63:6e:2e:04:
b3:31:db:0e:0f:9b:d7:fd:c1:b8:65:3b:80:d4:89:
dd:51:51:11:7f:51:bb:3c:ed:7d:3a:3b:4a:65:bd:
84:82:13:55:bf:a4:bb:80:01:24:0e:94:00:59:55:
aa:02:78:4f:8b:76:7a:f3:c5:34:c2:b7:b8:ef:23:
ff:ed:70:77:cd:bd:5d:3d:c4:50:29:96:e4:d2:ee:
eb:e0:bc:e2:7b:f2:31:2f:53:0f:79:2b:fe:c6:e2:
e1:c2:71:89:9e:cb:b7:78:d7:f1:3c:fb:83:b5:87:
6e:9f:8b:58:0c:61:6c:a3:20:ad:f0:f4:2c:6a:b3:
21:3c:aa:ed:10:65:0c:d1:c2:7a:ee:d3:c1:65:7c:
a9:53:a8:c9:15:61:d0:ef:0b:e7:9a:a8:05:99:82:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:A4:2B:ED:FC:39:1F:41:87:B6:51:AF:87:DB:95:47:7D:53:AA
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:9a:b7:ee:24:2a:a3:fc:57:84:26:f4:06:05:32:b9:7c:
bb:11:46:68:e3:eb:fa:02:17:e4:f2:cb:3a:68:65:97:8a:1a:
b4:f3:ce:85:69:52:c3:8c:9e:40:55:99:79:19:ae:a5:38:a3:
b4:be:08:25:b5:f3:38:c6:99:a5:27:a6:96:8a:55:ce:dc:6d:
55:db:a7:de:1f:25:50:3b:78:db:24:91:c3:f2:c5:82:98:4a:
b5:2d:26:1f:e1:47:79:5c:c2:e5:24:fa:24:3d:f6:12:e6:15:
c9:cc:4d:8d:2e:4b:ef:eb:2e:bd:05:60:72:02:7e:dc:e0:58:
fb:d7:e2:0a:24:3d:ef:6d:2e:c7:aa:88:78:8d:33:ba:0d:9e:
d8:49:c0:09:e4:a9:47:fa:8d:a3:ad:8d:ad:8b:81:0c:cc:9e:
cd:e2:5d:d9:ef:0f:5e:2a:80:11:f5:11:f1:7c:06:d0:0d:eb:
eb:55:11:73:03:c6:69:bc:17:56:2c:da:07:08:f8:e1:0f:df:
c9:b4:cb:bc:9a:31:62:fa:c8:76:dc:6e:ab:fb:6d:93:82:25:
19:40:77:52:8f:05:10:d8:ef:4e:f4:21:f4:47:1a:e1:b2:2e:
8c:d8:bc:04:f1:bb:13:72:cb:80:35:8e:da:c0:c1:b0:bd:d3:
99:b2:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:49 2026 by rpki-client