Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: JhwEJUsFQsyN5p+VnHftIoNNs+jOY55rzH55W3LF6Ts=
Subject key identifier: 3F:90:1F:8E:19:C0:67:ED:A4:50:E2:37:BC:DB:D2:D2:32:34:20:2E
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 01A13DEF31E8D7B48735DB2E59C20ECF268A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 15A3
Signing time: Thu 15 Oct 2026 05:00:48 +0000
Manifest this update: Thu 15 Oct 2026 05:00:48 +0000
Manifest next update: Fri 16 Oct 2026 05:00:48 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: RhO2kHIeeK24Klyw6fliYajRI6cxmt6duwryyzYT+zI=)
2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:31:e8:d7:b4:87:35:db:2e:59:c2:0e:cf:26:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Oct 15 05:00:48 2026 GMT
Not After : Oct 16 05:00:48 2026 GMT
Subject: CN=3f901f8e19c067eda450e237bcdbd2d23234202e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:95:c0:24:9d:7e:a1:1b:32:43:18:17:c0:
6f:cc:fd:79:b0:6e:4a:8a:cc:4c:28:65:2c:70:6c:
2a:48:ab:e4:c9:b6:9b:73:e4:02:6f:ea:94:cc:cc:
e1:da:b0:f2:6b:99:5a:26:c5:ae:aa:1a:73:0e:d0:
ed:f8:67:8c:d3:c8:ef:11:ae:2f:46:df:c8:d7:de:
a5:2f:51:01:06:ac:1c:9a:e9:cb:e8:d6:fd:a5:1b:
22:d1:86:34:29:9f:aa:6a:58:43:9b:47:aa:1f:27:
29:2b:ed:d3:37:6b:1e:99:2e:57:3c:6b:6d:1f:66:
f1:6e:92:fa:76:8b:c1:e8:fa:80:c7:41:17:71:9d:
35:cc:71:a9:6f:40:f3:d2:c0:35:7a:5e:74:7d:7f:
a6:3e:79:fb:77:d3:e6:3a:46:9a:45:40:e8:f5:b9:
17:65:2c:ad:5f:f3:99:8b:6e:3b:a4:4c:ac:53:1d:
3d:82:18:24:4d:7e:42:83:10:d2:d4:10:27:7c:0c:
1f:bf:ab:0c:58:2c:75:f4:69:ff:be:cb:5a:46:54:
ee:4a:0c:1d:b1:db:2a:7d:21:42:f5:28:40:bb:dc:
3e:98:b9:77:08:eb:dd:35:af:61:80:e3:49:73:af:
08:3c:b1:fe:fa:08:8b:ec:61:51:8b:e8:17:4a:4d:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:90:1F:8E:19:C0:67:ED:A4:50:E2:37:BC:DB:D2:D2:32:34:20:2E
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:90:f2:9e:a1:08:d5:e1:ee:79:d2:3c:4f:55:32:fb:0b:45:
d2:03:ea:92:61:ea:7a:b5:60:ee:5f:07:5a:6f:21:9a:60:40:
dc:38:c9:3e:13:94:c5:f4:64:6e:b6:6f:84:02:dd:85:d5:0d:
a4:33:85:92:7f:8d:f7:7f:6e:10:eb:9c:fe:ad:c6:62:74:e3:
89:fe:a3:66:8f:57:2a:1d:b5:84:49:57:1e:48:f0:80:e1:6a:
f5:db:e7:74:2d:f6:7c:be:e8:e5:f5:f0:cb:93:bd:c6:ca:12:
18:9e:70:4f:8d:b1:97:5f:49:3c:86:63:d4:11:dc:65:f0:b7:
fe:79:73:87:0d:dc:b0:88:b4:dd:77:f3:50:99:2f:22:2a:8a:
b5:8f:89:26:ef:bc:a6:67:b8:c5:d3:67:72:b8:33:c0:5b:10:
2b:0c:78:8f:e2:d7:ea:68:07:33:16:c1:b2:2c:78:7f:f8:ba:
bd:23:dc:fc:be:b5:db:47:7f:2d:01:a8:06:50:7a:9e:3c:16:
da:c7:81:5d:31:ad:4e:0c:7d:29:4c:2a:d5:19:28:23:f0:ea:
c1:59:7f:77:1d:ef:78:15:38:cd:a7:38:df:5b:be:2d:b1:40:
c9:a6:25:6f:36:76:9e:ab:39:e0:8d:0b:cf:ab:2d:19:44:ce:
32:77:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:03 2026 by rpki-client