Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: vvoj2iYqjvcKYh8bgfdfEKQP41ySf0u6qQu2omVGKLA=
Subject key identifier: 77:C6:08:FB:01:59:DB:69:51:69:5C:48:CA:24:65:21:C7:F5:AB:13
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 01A0C8C66566F1951DE6523266F8CC863351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 11B7
Signing time: Tue 22 Sep 2026 11:00:40 +0000
Manifest this update: Tue 22 Sep 2026 11:00:40 +0000
Manifest next update: Wed 23 Sep 2026 11:00:40 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: 2Xh7Gcz0K3SNxPCva41Yv7my/EtJbNrelUpiWeV2TKI=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:65:66:f1:95:1d:e6:52:32:66:f8:cc:86:33:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Sep 22 11:00:40 2026 GMT
Not After : Sep 23 11:00:40 2026 GMT
Subject: CN=77c608fb0159db6951695c48ca246521c7f5ab13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:85:54:3d:ab:0d:0e:0c:45:43:89:79:c1:
1b:b7:f8:ad:f0:d5:7d:2a:92:3e:27:8d:a8:30:ac:
a0:34:42:ce:b6:38:a8:0b:1d:64:40:d5:2c:1f:eb:
47:ca:e3:ad:67:d0:1e:75:3e:15:cd:c4:f3:49:e0:
9a:ed:0c:69:f1:75:81:53:5d:dd:82:79:e8:2e:50:
d4:32:4b:b3:8a:43:e3:09:d3:31:31:3e:0d:7d:f9:
f7:f5:6d:64:5b:c3:db:6b:ee:cb:ee:6f:6f:d9:a1:
4d:7c:a7:51:f8:4e:6c:4e:fe:46:87:3d:e4:ac:dc:
be:db:44:87:57:86:02:0c:84:1f:ef:fa:d8:5c:d5:
c9:0b:c2:3d:dc:32:77:18:06:cc:1d:f3:98:85:a7:
9e:3c:5a:2a:4f:96:a9:e9:4d:2e:82:ea:5e:a3:13:
78:a6:00:70:15:ac:32:b7:1e:65:db:5f:a7:1d:b7:
01:7f:41:25:18:1d:c8:32:44:4d:04:f6:31:68:71:
65:0e:44:78:87:f4:26:43:fd:aa:83:e9:a0:11:3b:
72:2c:d1:27:d5:ac:af:30:ec:4b:d2:6a:db:d8:8a:
34:70:c5:06:1d:fc:85:e7:da:43:91:d0:8e:91:82:
95:9c:22:a1:c4:5b:57:b2:d5:48:5f:74:e3:1e:21:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:08:FB:01:59:DB:69:51:69:5C:48:CA:24:65:21:C7:F5:AB:13
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f6:7b:09:7a:72:b8:b4:07:57:78:43:cb:bb:c9:3e:66:c1:
d0:ec:ca:8f:e2:95:61:b9:5d:7a:c6:96:40:5b:94:fc:2a:5b:
bc:ff:bb:82:74:e5:f8:fc:3d:dc:f8:41:89:b3:0a:60:2e:6a:
d4:f6:c9:b6:d1:1b:fc:f5:f2:f0:ae:22:99:c5:77:46:f6:07:
b4:c0:24:21:66:68:59:9c:b7:f3:72:e9:48:b4:5a:01:75:f8:
c3:60:41:12:b6:df:02:6c:8c:98:02:92:34:ab:a2:33:78:b9:
48:88:71:99:d7:fa:89:8e:18:71:a4:be:83:98:90:d9:80:dc:
45:d9:a1:89:78:62:c1:7b:46:bc:20:bb:84:65:7b:72:20:9d:
23:1c:b2:0b:76:6f:d8:72:45:0c:aa:70:f8:3a:17:bb:9d:91:
55:f0:f8:f3:1d:bb:45:66:d1:ca:c7:b1:ed:40:ac:2b:a2:76:
54:78:01:13:df:55:01:42:0b:93:51:63:58:19:85:1a:cc:54:
87:9d:aa:9a:c9:c3:87:ce:50:49:44:2d:cc:15:76:c9:38:3a:
c9:44:4c:81:b1:b7:3c:df:62:00:e9:69:5c:5e:0e:d5:59:67:
dc:fa:ea:d7:75:d9:19:b8:f1:7a:76:dc:61:5e:95:60:88:1c:
7d:8d:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:41:01 2026 by rpki-client