Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
File: BSL3Drmq76srTsTh4CLsBrVEeqg.mft (raw, json)
Hash identifier: kwwVsWUD2JrQNoXlqtEq58Wtitcb2Kb6+nYjX2l6YYg=
Subject key identifier: A3:01:1F:05:43:CC:DA:7A:F2:10:ED:68:C7:60:F3:13:02:63:F7:D5
Authority key identifier: 05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
Certificate issuer: /CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Certificate serial: 01A17439AD82B1187EC7252B99B167DCA7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
Manifest number: E9
Signing time: Sun 25 Oct 2026 18:01:39 +0000
Manifest this update: Sun 25 Oct 2026 18:01:39 +0000
Manifest next update: Mon 26 Oct 2026 18:01:39 +0000
Files and hashes: 1: BSL3Drmq76srTsTh4CLsBrVEeqg.crl (hash: T5CYOi8ud9fzdXTVuKs5nor+a12uxyvtwq7psJvJ57M=)
2: WA_ut0USwXJap-5nUQJ8KuZlhZ8.roa (hash: RswQlJLr5XOk/2t0RRal0mPaooe1UtDVQeW1q2GorOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:ad:82:b1:18:7e:c7:25:2b:99:b1:67:dc:a7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0522f70eb9aaefab2b4ec4e1e022ec06b5447aa8
Validity
Not Before: Oct 25 18:01:39 2026 GMT
Not After : Oct 26 18:01:39 2026 GMT
Subject: CN=a3011f0543ccda7af210ed68c760f3130263f7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:3a:f9:94:c5:d0:44:15:b9:68:c6:06:65:
6a:6c:48:20:ba:bd:1d:4b:b0:56:4f:1b:b1:5b:b8:
60:ee:81:21:ea:ac:74:c2:60:c7:28:28:df:24:29:
4c:2f:f9:87:76:91:bf:66:0c:3e:e2:5f:cc:99:cd:
dc:b4:84:07:e4:0c:30:dc:b9:84:37:1c:95:22:0e:
4e:a2:f9:1f:9b:03:53:61:af:3d:32:79:5d:da:b7:
e5:88:8f:5f:84:61:e0:e9:4c:34:ce:fe:c8:a6:db:
a6:d5:5f:ca:e5:91:d5:9b:81:5c:3e:84:f8:45:c0:
7f:eb:b7:bd:3e:9b:4b:e9:8a:a5:f3:06:a5:be:7b:
4e:7a:de:56:89:2d:08:1a:fb:88:01:28:1d:ba:bf:
92:41:6a:32:d6:90:12:3f:c2:e4:6c:eb:fc:46:5a:
3a:9e:cb:05:70:ad:4b:be:c3:40:f2:d7:08:88:9a:
38:21:8a:ea:66:fe:c8:76:33:e1:59:0d:06:3e:c7:
90:1f:f0:24:f3:a0:11:3a:a4:aa:e5:80:be:58:57:
7f:49:f6:54:dc:e0:78:66:06:3b:84:8d:dc:3f:14:
da:07:ff:d2:d1:8e:8e:91:90:31:a8:36:b5:c9:58:
1f:08:f4:90:a5:2c:bb:ad:9c:5c:bf:ef:36:28:51:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:1F:05:43:CC:DA:7A:F2:10:ED:68:C7:60:F3:13:02:63:F7:D5
X509v3 Authority Key Identifier:
keyid:05:22:F7:0E:B9:AA:EF:AB:2B:4E:C4:E1:E0:22:EC:06:B5:44:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSL3Drmq76srTsTh4CLsBrVEeqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3cdb67-11e9-406a-8d32-ebebefc96ccb/1/BSL3Drmq76srTsTh4CLsBrVEeqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:06:94:99:cd:64:7e:bb:05:63:96:b2:e4:7b:43:ea:b2:9f:
de:f4:df:22:52:7c:b2:16:e0:8e:c1:c8:fc:19:e3:6f:44:2f:
48:d6:3c:2a:2a:5b:49:19:b1:28:bb:07:1a:0e:57:9f:06:a9:
90:7d:69:00:b0:13:90:39:b9:1f:e9:99:4d:84:6c:ef:3e:2f:
d4:d9:c1:a0:26:93:61:5f:47:06:26:50:0c:0c:2d:af:73:ae:
17:cc:37:58:f0:28:a3:cf:e7:2a:9e:d8:a0:ba:63:7e:50:7e:
15:1d:38:f2:13:da:6d:58:84:14:8a:a0:28:d7:ee:4c:93:82:
da:7f:84:78:d1:fe:b1:62:f0:dd:8b:90:62:21:18:fe:7c:8f:
18:8c:f0:85:cf:31:4b:33:92:d8:8b:44:90:75:50:34:b6:8d:
5b:75:6f:29:cc:c9:06:24:0e:37:4d:a4:44:d3:18:a4:9e:a6:
d8:15:1b:0b:c2:68:b4:84:f9:49:fd:95:fd:a1:43:88:44:2d:
2f:a8:6f:92:f8:3b:37:12:1f:aa:b3:d8:35:f0:c5:ec:01:c3:
fb:1b:c6:0b:66:56:86:3e:80:d9:15:d5:79:b2:e7:06:ab:7b:
a3:86:75:3e:67:7a:d9:70:33:6d:39:95:d5:ed:db:23:44:01:
68:6f:86:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:02:22 2026 by rpki-client