Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: WId/HuhKbybMW3sK+OsySLGNICLYR+h7cX4qJoCkAYE=
Subject key identifier: C3:3D:1A:D7:2D:CE:F4:B6:3B:F7:25:79:A4:EA:98:29:9B:F9:B1:03
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019EBF5AFFDC52BF76FEB5A2F9632E161F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 10A9
Signing time: Sat 13 Jun 2026 05:01:12 +0000
Manifest this update: Sat 13 Jun 2026 05:01:12 +0000
Manifest next update: Sun 14 Jun 2026 05:01:12 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: CdLomu8IGgHj2SewWjNxHy1BKH0ECTOpOAnHgQp/Phs=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:ff:dc:52:bf:76:fe:b5:a2:f9:63:2e:16:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Jun 13 05:01:12 2026 GMT
Not After : Jun 14 05:01:12 2026 GMT
Subject: CN=c33d1ad72dcef4b63bf72579a4ea98299bf9b103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:3c:d9:b3:95:00:36:51:d0:a9:67:fd:16:
fb:2a:ea:5e:96:c9:e6:59:92:1a:41:0c:07:16:95:
22:9e:6c:c5:4e:12:c0:41:7a:c9:1b:74:81:34:94:
05:50:f0:79:7f:50:22:b0:18:2b:4b:b3:84:99:6a:
78:e8:5a:26:8a:fd:7d:fc:9b:a2:13:cf:6d:bc:a6:
c7:3a:39:1b:c0:52:b7:b3:dc:71:da:0b:85:3b:97:
df:35:6b:f6:83:be:07:a1:0a:3a:1e:10:a0:67:a9:
91:4a:d9:67:42:14:66:b5:ce:01:2d:96:2a:49:55:
7f:8d:a0:53:32:0a:6c:7d:b2:de:9f:5f:ad:74:7a:
7d:a2:5d:5d:fb:7f:1b:48:1d:08:94:d6:d7:d0:ca:
f6:2f:1d:f7:31:f5:61:b9:04:d7:ce:e3:fd:05:d7:
42:66:28:7c:e7:31:6c:da:19:d8:d9:3e:e0:80:0d:
42:ef:54:f0:a0:25:e1:84:43:77:77:d9:e5:00:dc:
a6:1e:b1:1d:b9:a2:4f:8b:b4:4b:66:ff:34:db:40:
54:7a:ec:b6:bc:e1:d9:50:2d:ea:36:1b:d9:62:ac:
d5:10:8a:28:f9:6a:c5:0f:69:d2:54:51:c6:fe:4a:
69:47:d5:f3:e3:8b:c1:31:ce:9c:a8:91:85:3e:9e:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:1A:D7:2D:CE:F4:B6:3B:F7:25:79:A4:EA:98:29:9B:F9:B1:03
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:86:36:ba:8f:7b:2e:c9:05:ed:7c:60:63:5a:75:8c:e7:76:
da:be:69:6c:83:b0:ff:1c:66:b1:de:06:ae:f4:cb:b2:59:d6:
50:34:93:aa:1f:24:3f:ed:ae:f4:b9:e2:82:be:da:4d:13:a1:
e3:e4:4e:42:f6:63:28:ee:b6:bd:9a:83:95:27:13:df:79:d3:
41:a3:36:1e:28:b4:f8:e3:d4:3c:84:fe:45:15:75:ec:29:90:
51:fc:9b:f8:39:a5:14:bc:32:00:35:b3:ee:79:26:b4:40:93:
95:c9:b7:67:98:22:8f:5c:53:92:20:35:fa:14:45:95:18:b0:
5a:8b:e6:ee:3f:f1:da:4c:dd:cf:7c:db:27:06:f6:30:d1:72:
08:f4:2c:ac:d3:f2:6b:0e:d2:07:ef:58:61:7c:41:f5:9e:c5:
6b:9e:67:a0:f5:90:b1:68:d3:32:42:eb:ea:89:25:a6:bf:5e:
85:73:0a:92:b7:00:b6:51:54:65:5c:4f:90:ac:d6:a2:99:1e:
f3:0b:6e:70:0e:e7:49:80:c9:99:6c:cd:9b:17:53:d8:0f:4c:
ce:f4:00:28:cf:60:4a:8e:02:91:12:45:05:8a:a4:5f:c8:70:
1a:d7:52:62:9b:26:60:0d:4b:a0:98:4a:4f:3d:b1:8f:7f:e8:
88:bd:2c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:21 2026 by rpki-client