Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: oqj7rFL0K1tDmHLI5ZzogcPSiT0ubvznaLiROpMSRxo=
Subject key identifier: DB:37:08:20:1A:D7:EB:0F:00:EE:4C:24:E6:53:FC:FE:7A:76:6C:C1
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019D38D35B117FAD2405AC00BC3F61A01964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 15B3
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: L3w30VGTPp+n7OOxNREscey8o8nAsDkRJXYeIXn/+s4=)
3: zeWDjXMa5d0w5AALex0oOqBNvc4.asa (hash: HCrT/rSODMrRMJuTFQic3exBhgbdh+nyEk9+AkA7lQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5b:11:7f:ad:24:05:ac:00:bc:3f:61:a0:19:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=db3708201ad7eb0f00ee4c24e653fcfe7a766cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:34:0e:48:59:e8:e9:2a:4e:dd:c5:f3:8c:
6e:c6:2a:b7:69:67:e5:08:fb:7c:88:5b:f9:13:ab:
65:1e:17:32:25:d6:c5:25:eb:58:7f:89:3f:d0:98:
39:35:f7:bb:92:76:39:9c:31:7d:18:2f:fc:df:60:
ae:fb:87:84:09:5b:5d:cc:2b:d1:12:b8:40:00:40:
fb:03:ef:6b:08:67:8e:30:75:96:76:6e:59:f7:b5:
fc:dd:be:37:fc:97:23:34:39:f7:25:44:71:e8:5b:
2a:be:89:71:a6:11:65:81:fd:74:a2:f0:72:42:95:
fa:70:eb:94:bc:1b:f9:e4:b1:bf:d8:64:90:79:7a:
1b:f0:6a:ab:c9:23:6d:90:bd:23:79:e7:36:0f:59:
10:c7:70:a0:0c:81:87:5b:3a:d4:19:b1:ef:d8:83:
ea:a1:e9:7b:f3:4a:ba:a9:50:99:da:01:e0:dc:0e:
71:0a:be:5a:0b:38:77:7d:58:ed:a7:5e:1d:ee:30:
20:72:35:a7:56:9d:00:63:43:04:61:b9:22:67:f2:
64:44:f7:57:21:df:d1:40:0f:88:6c:38:41:e5:42:
15:d6:6c:bc:ab:d8:b4:0a:56:20:c7:fd:a0:21:17:
8f:3f:08:24:7a:52:ad:c0:2a:d1:67:dc:13:19:5b:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:08:20:1A:D7:EB:0F:00:EE:4C:24:E6:53:FC:FE:7A:76:6C:C1
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2d:92:66:9b:af:9f:76:47:12:8b:b8:24:e6:c5:96:a6:1a:
a9:22:3c:38:89:b6:27:d6:8a:fe:53:cb:cc:1e:9e:71:9c:e2:
7b:f0:01:6d:35:83:3b:f5:5a:98:2d:d6:ba:0b:9e:62:80:c1:
76:28:c3:5d:96:a8:36:e9:eb:e3:ec:00:17:f6:0c:57:54:cc:
72:1f:31:2b:49:93:9f:53:0e:83:46:46:f9:45:62:51:5f:5e:
3b:3f:b6:06:4a:14:9b:22:45:53:cf:4e:c6:d0:75:63:03:5e:
c9:6b:30:59:f3:86:1e:7f:c7:88:ce:7b:be:c0:02:65:57:5b:
f2:90:78:86:89:fe:01:f0:50:49:37:f8:cd:55:3a:53:f1:14:
62:b0:f4:b2:59:14:05:e6:27:d6:8e:c6:e3:7f:e3:a8:1a:68:
fc:83:21:17:97:b6:96:aa:cd:60:33:ad:16:e6:5f:c2:be:91:
d4:97:3c:e3:bd:b5:03:1e:fa:31:06:8a:2c:59:35:a3:05:1a:
9d:f8:1f:70:93:16:53:a4:b0:5f:91:33:eb:05:4b:8c:a2:c4:
f0:70:17:93:88:08:b9:17:85:99:7c:e3:6b:96:d4:36:1c:23:
54:3f:43:bd:df:4f:f7:50:7d:7f:b7:6c:23:aa:f0:32:9d:0b:
04:cd:4c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:05 2026 by rpki-client