Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: Ey3sbxEPRoPQcf7a+XGK42VUNcX9pop1lBKPirun1zk=
Subject key identifier: 79:8C:D6:6F:96:1D:FC:0B:24:C4:4F:5E:0F:77:74:9E:BD:6E:9C:F5
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 019E307238DB75E88AEAF372AB82244FCAD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 11:00:52 +0000
Manifest this update: Sat 16 May 2026 11:00:52 +0000
Manifest next update: Sun 17 May 2026 11:00:52 +0000
Files and hashes: 1: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (hash: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y=)
2: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: XIsKdwGODP6hNTbjsGu0mI4ZQA/Gqmnc4hNwldT7io0=)
3: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (hash: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:38:db:75:e8:8a:ea:f3:72:ab:82:24:4f:ca:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: May 16 11:00:52 2026 GMT
Not After : May 17 11:00:52 2026 GMT
Subject: CN=798cd66f961dfc0b24c44f5e0f77749ebd6e9cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:88:59:02:a3:84:4f:89:6b:de:71:00:91:
22:0c:b2:74:92:e2:b0:40:be:42:25:15:76:1a:cb:
f3:06:e7:a7:3a:a0:6a:c3:eb:3a:a1:9f:dc:09:3e:
c7:ac:f0:38:69:78:48:3f:20:23:8c:c2:da:a3:f1:
77:6e:a4:20:6e:76:7c:0e:62:bd:57:ef:7d:3a:e9:
64:59:26:bc:89:e3:af:36:a8:a2:9b:59:ef:ed:1b:
f1:46:b2:d3:d5:7b:f4:ce:81:26:8b:13:8e:b1:fb:
73:12:d1:56:74:ed:68:39:72:b6:91:da:4b:a0:d9:
75:25:6a:cb:cd:09:d5:fc:2f:41:c8:b6:62:ff:ae:
7a:95:60:79:af:ef:99:20:21:f4:67:4f:f6:19:65:
9f:67:9c:b9:4b:e2:6b:8b:39:47:43:82:c5:fe:18:
03:c2:b1:c9:d7:cb:99:d2:50:b2:d2:51:ef:4e:8b:
dc:0c:d2:37:9f:14:96:9b:12:eb:5c:c8:2f:c0:6f:
69:84:3b:35:2f:e9:90:42:c1:29:dc:cb:53:b4:8d:
e7:5c:08:52:69:c8:87:7d:1d:c8:a5:ab:3b:93:f8:
9d:83:d4:11:24:82:58:b9:be:e8:0e:76:15:0e:ce:
ac:74:94:f2:f7:ac:c6:fd:94:c7:d8:15:e2:bd:e7:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8C:D6:6F:96:1D:FC:0B:24:C4:4F:5E:0F:77:74:9E:BD:6E:9C:F5
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ea:c0:79:f1:df:cd:2e:e4:16:54:ef:79:92:0c:53:6c:bd:
3c:30:7b:6c:0c:93:6c:6a:30:b1:11:32:6e:85:d5:ac:e0:19:
a6:1c:98:8f:35:37:f3:67:32:8a:27:ca:16:1d:bd:89:0d:e8:
70:87:2b:5b:be:fd:c4:b7:5d:37:c1:52:14:31:3d:90:6a:01:
45:0a:04:64:d4:d3:f7:d9:ed:c9:10:90:ba:9a:da:c2:7e:e3:
ab:5a:1e:b2:d2:fb:1b:b1:74:99:f7:12:fa:3a:47:b7:34:4b:
2f:e5:ed:db:14:fb:2d:63:04:83:46:ce:e2:f4:ef:24:3a:9e:
73:53:69:46:0a:5d:ef:f7:8b:e8:0f:3b:e4:c4:3a:e3:c5:d1:
44:1e:88:01:53:2a:b5:ca:1c:83:a9:8b:74:79:74:29:09:0d:
87:c7:b1:9c:36:ac:91:3e:58:c4:ec:3b:77:89:01:4d:70:49:
3c:24:85:97:6c:f9:fc:cf:7a:a0:de:c4:26:98:94:10:92:ee:
66:13:6b:33:87:3e:70:a8:1f:85:a7:24:37:77:57:1f:05:d6:
bb:04:c3:5b:7a:7f:14:70:5a:93:14:4f:a2:fa:c3:0a:78:ee:
0b:be:9a:cd:4f:78:54:02:27:8e:d0:a0:59:70:7a:64:16:0b:
e5:71:88:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:25 2026 by rpki-client