Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
File: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft (raw, json)
Hash identifier: MzRIJtu0PyKhcha8ZwpXNOnwfrZ+/7cbfffuv0LRVU0=
Subject key identifier: B1:F5:B9:E0:73:34:19:19:E9:B7:4A:FE:56:E7:21:0A:C1:6E:9F:32
Authority key identifier: 32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
Certificate issuer: /CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Certificate serial: 01A06F830ED87D56B94E88DE95FDCE87EC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:00:55 +0000
Manifest this update: Sat 05 Sep 2026 03:00:55 +0000
Manifest next update: Sun 06 Sep 2026 03:00:55 +0000
Files and hashes: 1: LGwzUxcjbq9-wb2ocqMqu3uyOjM.roa (hash: cDH6YJZW5QqvmFNmhrhTy7ZODICEHh2BK7oCwwTt9+E=)
2: Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl (hash: z94954+iOjmnTM2rqB2nbOry+7+65s7HBcR+JKZNuPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:0e:d8:7d:56:b9:4e:88:de:95:fd:ce:87:ec:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321fc56a7c1627d7dfc430fa1d612919b501455f
Validity
Not Before: Sep 5 03:00:55 2026 GMT
Not After : Sep 6 03:00:55 2026 GMT
Subject: CN=b1f5b9e073341919e9b74afe56e7210ac16e9f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:a9:5c:4f:ce:8c:56:18:43:de:fa:df:df:
23:5b:13:70:30:d5:90:0d:c4:04:27:1d:58:e8:72:
3d:fd:02:6b:e7:0e:ad:e5:29:dd:f9:6a:35:2f:ee:
06:82:94:20:5a:df:96:6c:68:f5:4a:9a:01:7f:cc:
b8:dd:75:04:6b:96:7d:a4:ec:47:9a:53:42:e3:11:
40:b2:17:9e:25:ec:3d:77:72:64:ba:25:7e:c2:da:
55:62:e6:bf:b2:de:f6:52:89:4e:50:74:d9:9d:53:
b6:c3:6e:f3:f8:03:91:67:11:14:9a:8c:ed:84:a2:
74:c5:1b:e3:cc:b4:d0:d1:5f:86:89:08:ff:28:03:
b9:27:dc:0b:7a:e5:44:42:7e:5d:53:26:7f:1a:df:
1e:d0:b8:f3:ec:e4:d1:09:80:ac:57:0e:15:57:62:
0d:81:c3:dd:24:b9:4d:79:54:03:12:11:7a:25:88:
c1:42:de:e0:7f:27:d2:e0:9a:33:f5:b8:6c:37:81:
44:f0:80:5f:32:e4:cf:98:3e:e9:97:56:aa:d5:5f:
55:60:cb:0c:4e:38:74:49:88:9e:f3:f2:cc:16:63:
e6:b0:26:9a:c6:0c:3c:05:27:11:76:b0:39:6a:25:
8c:d7:f1:59:2a:79:a7:67:45:f9:07:2f:17:53:c0:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F5:B9:E0:73:34:19:19:E9:B7:4A:FE:56:E7:21:0A:C1:6E:9F:32
X509v3 Authority Key Identifier:
keyid:32:1F:C5:6A:7C:16:27:D7:DF:C4:30:FA:1D:61:29:19:B5:01:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/42c1bf-89ff-482f-9f14-498dd1d307d0/1/Mh_FanwWJ9ffxDD6HWEpGbUBRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:cb:c3:8b:f8:cd:d2:96:99:42:aa:a0:e8:1c:f2:28:a0:
c5:b3:76:c2:ff:b6:f7:9e:61:9c:c9:fe:ee:cb:12:f9:1e:8f:
54:ca:0a:65:83:0c:5a:89:97:da:db:9b:af:69:6b:dc:92:8c:
be:43:f5:9f:76:1a:bf:e5:0c:7f:5b:04:54:b7:91:d3:a7:fc:
47:d7:38:70:6c:7b:02:58:fe:91:10:3a:4e:62:95:48:47:16:
02:be:a8:9b:b8:1c:66:59:e4:16:05:ae:d0:93:f4:0d:3c:ae:
c8:ea:40:39:f6:8d:e2:69:db:ee:cf:5f:9c:52:50:6c:2c:a6:
e4:e3:ce:0d:77:86:39:7e:17:2b:dc:97:c9:53:c3:56:7a:71:
98:2e:22:9e:53:9b:4f:32:be:92:c7:c8:42:bf:7e:9b:04:e3:
78:7b:d1:54:0d:46:72:15:72:4c:c0:8d:ba:8e:e0:97:3e:85:
49:15:17:7b:3f:14:42:77:c9:2a:25:e0:6a:73:23:7e:cc:eb:
e8:ba:2d:6b:53:68:3c:4f:40:e3:ca:41:71:a7:a5:e6:0a:10:
75:be:2d:3d:bd:52:7f:8c:55:67:10:9e:5a:fe:31:22:62:dc:
2c:50:9f:48:18:e3:f7:ec:39:13:c8:e7:51:e9:ef:af:09:7b:
4c:80:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:46:26 2026 by rpki-client