Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: sMOvpNo0/k7LoIs3qzxS4u0qLVCHEgyNA6iO0nC1x3A=
Subject key identifier: 64:62:1B:58:1E:DC:6A:FB:39:A8:03:BA:39:78:74:A4:D5:C8:20:8C
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 01A181501697DE363ECCFD794E928F3D5BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 07:01:11 +0000
Manifest this update: Wed 28 Oct 2026 07:01:11 +0000
Manifest next update: Thu 29 Oct 2026 07:01:11 +0000
Files and hashes: 1: 3JCprLbCd_JV3m7EK4otwaRJ6FI.asa (hash: C7m74US1J4rnzhzyN9c9AXYlLYYU1lK9Uvvic8/k1+0=)
2: 5EKQPrPNwyvCBR3SFmiV77L19bE.roa (hash: 7kjfjqomqFD/efQnWdT+7ek8PZzhOejx7JJd6FEa/kA=)
3: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: nnEwpUSrtepR1eQWiJfQiDZ0DElZA1+7GHvsNZJ0rTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:16:97:de:36:3e:cc:fd:79:4e:92:8f:3d:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Oct 28 07:01:11 2026 GMT
Not After : Oct 29 07:01:11 2026 GMT
Subject: CN=64621b581edc6afb39a803ba397874a4d5c8208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:fc:d2:ab:a7:3a:84:9c:2e:a8:0d:8e:3d:
5a:50:33:aa:2f:36:7a:09:f8:32:d0:31:0a:5d:76:
a2:53:51:3c:58:b9:8e:5a:bd:23:11:5e:8f:f9:75:
79:8f:02:c5:b9:3b:27:94:ae:f9:34:c9:b5:19:52:
d0:2e:cc:f5:0f:7e:c3:ab:db:4f:23:cb:62:df:08:
0a:f9:e8:40:33:fb:54:d3:de:fe:07:27:8c:90:5b:
6d:96:9e:a0:33:e2:96:a1:5a:6e:be:4b:06:51:a7:
d2:bb:55:ff:20:33:bb:fb:48:0c:b1:95:e3:cf:51:
5b:7f:00:74:e4:44:3e:9f:d2:90:42:59:b0:63:97:
cc:2d:de:54:82:21:a4:f7:83:67:56:a7:13:07:10:
65:18:2f:29:85:f6:b0:2c:37:49:73:e1:78:90:b4:
a8:0b:fb:ab:c1:9e:8e:d7:62:9b:96:d7:45:de:46:
23:d3:19:f5:95:2c:4f:6e:78:07:93:e9:5d:e4:6c:
57:2c:cf:7e:e1:27:25:96:0a:a0:e6:92:a5:eb:93:
13:6e:6d:6f:57:1a:9b:64:bc:77:01:5d:2b:5d:a5:
a4:8e:cf:f2:22:25:9d:c7:15:7c:58:c1:c9:34:2f:
f9:7c:f2:3f:e3:b3:23:e4:11:53:ee:1a:b9:5e:b0:
e4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:1B:58:1E:DC:6A:FB:39:A8:03:BA:39:78:74:A4:D5:C8:20:8C
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:a6:d3:d3:da:8d:1e:42:e3:95:9b:64:4e:f8:4d:f5:36:
f3:3d:96:34:a6:a3:d1:38:b8:dd:aa:20:2d:ae:e3:07:02:c6:
6f:d3:39:25:42:40:14:31:be:39:5c:90:41:62:30:3a:75:4d:
f3:9e:af:85:3a:fe:8d:51:18:ac:af:14:51:5e:e7:de:80:11:
c6:97:a8:3f:ef:05:08:9c:51:d0:d8:a1:21:20:07:98:23:a7:
00:16:6b:47:0d:4c:d3:8e:70:c3:b8:a9:d2:12:bf:88:19:2b:
e3:f9:eb:df:bc:87:a2:5d:ae:ef:d3:2a:ba:a2:cf:9c:2c:0c:
87:2d:39:27:59:10:66:71:0e:92:ac:18:cd:b7:c3:1d:1c:43:
e5:ca:b2:78:6c:86:f3:2a:c7:60:cf:7d:05:36:cf:8b:73:58:
6b:78:56:7c:5a:55:25:0c:d0:ce:5c:55:bd:6c:10:e8:50:9b:
01:0d:d0:74:0a:21:f3:42:22:c0:72:5d:86:78:02:c0:1e:10:
71:fd:8d:af:83:d5:cf:c6:ce:b9:90:7f:a8:2f:09:ec:00:5d:
6f:d2:af:56:46:3a:ed:2a:0a:0c:21:12:49:98:77:ba:fa:cd:
5e:ec:b0:e0:2f:82:df:b8:c7:69:13:7c:52:81:9a:18:01:51:
27:89:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:18:08 2026 by rpki-client