Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json)
Hash identifier: ITanjpcuxiBnvRLKzSHYVgdv0AyJlCq/KmcBBosWj60=
Subject key identifier: 64:05:9C:38:EB:31:2A:7B:BD:68:51:12:87:74:93:07:3F:03:05:0B
Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Certificate serial: 019D39AF71D4EDBE7C477588AC99A4CCFE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
Manifest number: 0967
Signing time: Sun 29 Mar 2026 13:01:32 +0000
Manifest this update: Sun 29 Mar 2026 13:01:32 +0000
Manifest next update: Mon 30 Mar 2026 13:01:32 +0000
Files and hashes: 1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=)
2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: T5XY1Jua9TW+Ccnrdv3BY197oZDtYANZiWCWxt0xH2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:71:d4:ed:be:7c:47:75:88:ac:99:a4:cc:fe:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f
Validity
Not Before: Mar 29 13:01:32 2026 GMT
Not After : Mar 30 13:01:32 2026 GMT
Subject: CN=64059c38eb312a7bbd685112877493073f03050b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:51:31:44:6f:a6:bc:71:6e:aa:4a:fa:a4:
b8:df:2a:dd:c5:45:4f:36:f1:75:70:33:8a:9f:43:
ab:53:e3:13:18:6a:7a:e9:38:9f:33:e0:5c:2c:18:
42:ad:a5:e7:71:77:da:0b:71:17:8d:e5:5c:9e:bf:
d2:c2:da:60:6f:e8:3d:02:63:7e:c3:19:6e:d1:25:
ab:a5:a2:f3:c8:69:ec:de:34:8c:1a:01:da:03:0e:
f8:3f:05:7c:69:b9:96:61:b9:45:cc:b1:31:7b:6b:
09:ea:73:ab:71:7a:72:35:fc:84:76:dc:20:4c:40:
18:ec:07:50:e2:7c:ec:b3:12:47:af:b0:e1:79:bf:
39:11:72:88:5a:52:12:f9:4f:cf:24:4e:38:a2:7f:
72:58:0d:a0:bd:40:c9:68:6c:13:2a:04:9c:37:56:
b9:d1:45:b7:d6:cd:6b:9c:e8:bd:02:b5:33:13:ea:
a4:ba:35:63:75:eb:5b:01:71:73:5f:7a:57:02:36:
68:3e:92:2c:28:42:3a:f9:07:f5:c4:6c:b9:45:d8:
38:63:2f:6b:53:52:df:51:9e:7b:8c:f6:95:ef:98:
12:17:2f:54:00:c3:c7:a4:d1:03:cc:92:27:5f:ae:
53:5b:89:52:28:78:28:3c:cd:a3:8f:32:29:9e:09:
e9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:9C:38:EB:31:2A:7B:BD:68:51:12:87:74:93:07:3F:03:05:0B
X509v3 Authority Key Identifier:
keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:e7:ca:6c:5f:19:d1:a6:8d:95:67:b5:5b:f4:d6:e0:4c:
fe:d6:44:55:46:2e:b4:96:5d:69:05:45:25:82:32:4d:75:3b:
64:01:30:7a:73:c1:5f:35:b5:2f:7a:60:c3:3d:09:58:46:78:
13:de:07:0c:8c:3b:78:27:93:d8:70:25:5b:17:53:42:ab:02:
b6:9b:73:31:34:88:50:61:e1:b6:12:7a:fe:3f:aa:d1:5b:13:
8e:31:25:62:1c:98:30:d2:d1:3f:fd:89:bc:b7:66:52:b8:00:
63:44:fb:4b:99:2b:9e:19:79:2e:a5:3d:4c:8d:f5:92:b5:cf:
eb:00:12:ab:55:ad:c8:13:49:6e:95:0a:7f:77:f0:15:52:0b:
66:71:20:a0:d9:7e:d6:62:31:95:38:cf:90:6a:38:0e:c8:e5:
17:ee:8e:2d:83:7b:7f:cf:95:c5:9a:97:4e:ca:bc:1e:df:1a:
1e:be:8f:4a:a9:e9:04:ae:87:77:d8:27:5f:58:45:7e:87:65:
eb:47:cf:82:f7:9d:8e:34:04:87:ba:e8:dd:9a:7c:13:30:4b:
6b:af:66:a6:e6:69:61:15:2f:79:e1:3b:42:4e:28:81:43:1e:
5b:e4:05:3c:33:5d:6d:c2:09:d2:0a:d2:36:9b:a7:39:52:f3:
d8:55:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:56:06 2026 by rpki-client