Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
File: R3BGWvTHI2RwAFnnll08iepGPNc.mft (raw, json)
Hash identifier: RoE4HhihUci4L3jlRf1StX2EqZN5FHcbVBaKGg3cotg=
Subject key identifier: 4A:6E:80:8B:2E:7E:E6:A3:62:F2:EE:4C:7B:59:3C:A3:B3:4A:76:43
Authority key identifier: 47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
Certificate issuer: /CN=4770465af4c72364700059e7965d3c89ea463cd7
Certificate serial: 019D3865F5A582FE59B386362661A9A54E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
Manifest number: 1245
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: R3BGWvTHI2RwAFnnll08iepGPNc.crl (hash: HJrDd9NHdt8682556BRIWFHxO1w69AzosZ0sMjuwBSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:a5:82:fe:59:b3:86:36:26:61:a9:a5:4e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4770465af4c72364700059e7965d3c89ea463cd7
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=4a6e808b2e7ee6a362f2ee4c7b593ca3b34a7643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:66:23:a1:25:7f:13:da:fb:28:a1:a2:2c:
4d:2a:91:75:aa:fa:37:59:db:29:2a:c1:96:40:ec:
9b:d3:78:1b:51:a8:35:e9:5e:17:f9:51:9f:03:4a:
46:11:4f:7e:05:14:84:bf:49:6d:e2:8e:d7:ea:4d:
ed:f3:bc:a4:95:9a:93:17:b4:c3:7d:05:0c:45:4d:
b8:83:e6:0d:f1:9f:d6:ec:cc:37:3a:a0:a2:5b:b6:
c9:dc:42:98:37:1b:4f:c0:40:29:f2:d8:41:bd:bf:
92:f4:57:b9:45:82:32:24:ff:1a:b9:76:26:71:31:
3a:1e:1c:90:21:26:97:f3:14:46:6e:21:2d:13:67:
39:e3:ad:cd:3d:b1:8f:1a:d1:bd:93:50:4c:e5:40:
a8:e5:ea:c3:ed:7b:eb:b5:d3:d9:07:76:27:a0:0c:
14:61:ff:a7:a5:64:ab:23:8e:f2:c1:57:9c:3b:e8:
b8:71:53:a8:12:07:9b:9c:e8:8a:98:b5:fa:f3:6f:
fe:fa:b7:ba:ad:20:02:70:8e:78:a6:73:88:10:c1:
22:3e:9f:f4:bb:e0:62:1f:3a:33:3d:46:62:33:d6:
f8:11:4c:d9:74:df:17:90:ad:08:9b:75:38:25:31:
cf:d2:da:5b:03:d7:db:5f:30:ce:a2:e5:0d:2c:92:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:80:8B:2E:7E:E6:A3:62:F2:EE:4C:7B:59:3C:A3:B3:4A:76:43
X509v3 Authority Key Identifier:
keyid:47:70:46:5A:F4:C7:23:64:70:00:59:E7:96:5D:3C:89:EA:46:3C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3BGWvTHI2RwAFnnll08iepGPNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/97d09b-e5e1-47f8-b25f-8a92e09bfe1b/1/R3BGWvTHI2RwAFnnll08iepGPNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1a:88:3f:f6:3c:16:c5:d7:68:c5:2d:12:13:5c:ba:2f:b7:
1f:80:09:24:38:70:51:d6:5b:62:0b:a2:08:62:19:dd:6a:f8:
0d:2a:9e:42:85:c4:ab:e7:7e:7d:68:02:49:b9:3f:f0:35:50:
f5:0c:a5:88:b6:e4:2f:f0:8f:42:c6:a2:cd:f8:e8:10:26:61:
8a:98:80:fc:1e:07:1e:4d:60:7b:0e:b3:fb:c9:d6:4f:a1:b3:
6a:f9:e1:2b:37:0f:a7:6c:62:58:ee:13:59:b0:21:ef:21:6f:
65:b6:b4:52:52:5a:d4:e0:c6:dd:d9:7e:59:13:b8:c8:d2:68:
9d:e0:53:d6:25:34:8d:bc:d0:c0:6f:ab:3a:e6:1f:22:a9:3b:
37:36:a9:65:a6:9b:e9:2a:b1:bd:ed:80:4f:85:88:96:03:17:
ba:c1:87:64:05:d6:5b:98:06:f6:9a:a6:e0:79:5f:29:9a:a4:
7b:81:d6:5a:d3:03:84:99:c7:ed:0f:42:6f:04:69:80:24:c8:
59:d6:a2:88:9c:7a:d9:ba:ad:da:dd:ff:e0:44:ad:f0:7e:02:
e2:d4:17:07:f6:0a:9f:ae:17:25:5a:56:5e:52:22:31:46:04:
03:a1:b4:1b:bb:bc:60:91:ef:70:52:78:db:ce:6c:af:9f:bb:
28:14:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:30 2026 by rpki-client