Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: CdwFbEjM3cw3yC0xxb9ltr3La5ZqyMpSZA4I1Mr08tk=
Subject key identifier: CC:F1:8E:F3:B9:09:0A:34:D4:FD:63:85:A9:22:F8:C6:3F:60:69:8D
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019CAA58AC8DD32793814B7EEE5704E3AB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0F95
Signing time: Sun 01 Mar 2026 17:01:03 +0000
Manifest this update: Sun 01 Mar 2026 17:01:03 +0000
Manifest next update: Mon 02 Mar 2026 17:01:03 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: CokfLu4iwefV0D37vGj1u/DgzOj3O3fwrcjprfvziJs=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ac:8d:d3:27:93:81:4b:7e:ee:57:04:e3:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Mar 1 17:01:03 2026 GMT
Not After : Mar 2 17:01:03 2026 GMT
Subject: CN=ccf18ef3b9090a34d4fd6385a922f8c63f60698d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:36:35:e2:7d:51:d5:72:f0:a6:63:bc:fe:
2f:52:b3:6d:83:38:61:25:83:95:11:79:5c:bb:f5:
ab:d3:ad:9e:6c:de:03:07:d4:98:3b:e4:d7:a6:13:
fb:23:23:23:43:14:5c:52:c3:8a:4e:3f:48:7a:e7:
44:7a:6f:38:75:aa:31:dd:4c:65:42:14:fd:31:c1:
ff:0b:c6:01:9f:0d:b2:88:33:8c:81:a5:74:66:ee:
95:c1:34:9d:e9:33:b6:46:f7:df:eb:c4:30:cf:19:
b3:30:03:97:0f:0c:0d:e1:b9:8c:91:a7:9d:ab:15:
d2:bd:81:f8:d3:62:85:49:0c:57:d2:db:a4:f7:64:
e2:02:c1:47:c7:80:22:ea:ed:ed:66:6d:c5:68:39:
10:e2:15:38:c5:d1:fb:8c:d8:c7:47:ac:d0:b7:7c:
d8:3c:7f:26:b4:16:36:18:24:07:36:54:3a:f3:1c:
4b:50:9d:89:a6:18:85:c4:e7:4b:fd:52:98:fc:c9:
fc:6c:3b:b1:82:b7:47:ae:76:90:bd:be:8b:87:b5:
12:34:cd:fb:6c:41:0c:7b:20:53:c5:b7:eb:e4:57:
83:b3:44:48:54:04:5a:4b:12:35:84:a9:02:57:3b:
0b:3a:05:17:fb:f6:66:ef:6c:c0:db:82:96:97:2d:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:8E:F3:B9:09:0A:34:D4:FD:63:85:A9:22:F8:C6:3F:60:69:8D
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8c:49:bc:30:d8:51:38:f0:db:50:2c:70:b2:66:3b:d3:12:
7b:b1:db:bb:19:71:d5:b1:be:f6:53:fb:fd:75:c8:a9:07:7d:
9b:75:43:23:d5:a8:e9:dc:22:54:0f:f1:59:e3:a8:f2:98:2b:
f3:7f:46:24:cf:09:8a:20:38:c3:f6:1d:58:dd:42:5a:bf:54:
f8:ac:98:15:89:e2:31:5d:07:b5:ef:c7:a7:2e:85:57:ee:d6:
f8:d9:6b:a4:78:c3:c8:85:26:e5:97:ba:c4:49:1c:77:01:84:
4a:8c:24:e7:b4:23:32:67:06:70:de:65:cc:3c:2b:46:93:58:
5e:e5:94:78:aa:92:40:49:f3:5e:08:04:e1:3c:4a:71:15:d9:
c5:5f:39:96:a5:77:b5:5a:18:ab:06:d9:0f:58:91:ce:49:b3:
dd:09:e2:f4:94:70:79:f5:d1:88:a2:2d:d2:2b:c3:12:76:fe:
c5:2d:36:51:11:4b:a9:10:2f:f8:d6:6c:29:b2:90:e7:f4:81:
76:be:0f:27:7f:0f:73:45:8b:9f:38:b6:1a:d1:4e:ac:0e:bf:
09:17:e3:8c:ab:5c:b9:d0:2d:e8:af:88:a3:36:e8:2d:84:76:
46:48:e9:8e:4b:d7:2d:25:00:b4:c7:24:46:97:db:b7:65:51:
42:a7:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:05 2026 by rpki-client