Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
File: T3zlnkdBgWbSD1FkhW-HkzmRidA.mft (raw, json)
Hash identifier: m+XZKm0dC6eihjyu3AJICBig4Rz5Sf49gDxL+ijC6ng=
Subject key identifier: 1B:6D:5C:EB:6A:77:E3:7B:9B:DC:4B:42:45:E5:D2:F7:6C:24:FC:AE
Authority key identifier: 4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
Certificate issuer: /CN=4f7ce59e47418166d20f5164856f8793399189d0
Certificate serial: 01A06F841518F8D39BA8B826CD48B1882F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:02:02 +0000
Manifest this update: Sat 05 Sep 2026 03:02:02 +0000
Manifest next update: Sun 06 Sep 2026 03:02:02 +0000
Files and hashes: 1: T3zlnkdBgWbSD1FkhW-HkzmRidA.crl (hash: bXM4z5FoZ/z0CeupMaaPJADdCvurhQT4EcpcZn2wwss=)
2: hzeHFDX7-fXakvbRNzVIimetgT0.roa (hash: TTVPslSxsu3A4z0fsBCY/2+kt2uSPjNyxRVnr/wiATk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:84:15:18:f8:d3:9b:a8:b8:26:cd:48:b1:88:2f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f7ce59e47418166d20f5164856f8793399189d0
Validity
Not Before: Sep 5 03:02:02 2026 GMT
Not After : Sep 6 03:02:02 2026 GMT
Subject: CN=1b6d5ceb6a77e37b9bdc4b4245e5d2f76c24fcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:2a:83:a2:8c:a0:a9:d9:4f:ee:c4:c2:71:
85:0b:36:0b:4e:37:0d:a8:2a:bc:49:e8:1a:9b:03:
90:7c:a0:2e:9a:d9:26:c2:85:fd:be:9f:5a:af:60:
2a:df:df:5f:9a:10:d2:20:c8:f9:a0:47:a6:9e:9a:
8a:2a:ed:e5:df:57:95:e9:8a:20:7e:46:cd:26:32:
2b:a6:ce:8b:58:7b:d5:d1:6b:d2:e7:56:67:b6:57:
a5:4b:1d:9c:70:9b:e5:1a:ab:e0:96:97:d3:8e:2d:
eb:31:b3:43:55:84:e6:46:65:a2:c5:10:bc:b9:75:
67:bd:45:e6:b5:ba:3b:68:e2:48:36:af:5c:11:9e:
e2:42:82:c0:1d:39:54:c4:43:57:db:71:f9:84:dd:
ea:74:19:7a:96:30:a8:2b:19:e3:25:e8:05:d2:98:
dd:87:02:b5:a8:82:8a:7f:e6:5f:f4:1b:db:8a:07:
1f:23:d2:d0:9c:ea:1a:cf:f3:39:38:f3:44:42:a8:
ff:e8:c5:de:49:ee:90:7e:be:31:97:0f:d8:89:08:
44:4b:5b:15:5f:8c:12:17:4d:0a:d0:6f:5b:f6:82:
17:53:f6:90:88:15:97:50:66:c6:8a:ed:6b:a7:5a:
67:af:9d:71:cb:5a:2e:6c:48:7f:ac:a1:f5:d1:d9:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:5C:EB:6A:77:E3:7B:9B:DC:4B:42:45:E5:D2:F7:6C:24:FC:AE
X509v3 Authority Key Identifier:
keyid:4F:7C:E5:9E:47:41:81:66:D2:0F:51:64:85:6F:87:93:39:91:89:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3zlnkdBgWbSD1FkhW-HkzmRidA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/T3zlnkdBgWbSD1FkhW-HkzmRidA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:05:fd:b0:f9:35:7f:2d:c6:fb:32:8d:59:f1:da:f1:b9:82:
8b:c3:6d:11:20:64:9e:fc:ba:0a:32:9e:04:84:4a:38:ce:2d:
f8:31:05:43:09:12:fc:f9:f0:9d:29:38:59:eb:86:5b:ad:fd:
7f:62:8c:12:a7:f5:d0:6b:f3:bd:95:f7:9c:7a:94:88:37:9a:
7d:dc:50:f5:32:d1:80:f8:37:48:85:a8:0b:c6:8e:bf:41:bb:
cf:67:66:95:6a:61:83:ef:72:9f:b1:10:44:dd:43:83:ed:f8:
36:c4:dd:29:81:1a:61:d1:2e:b1:93:18:cb:e6:a4:a3:46:e8:
e7:69:f1:d2:66:0f:bf:c6:af:b0:9d:75:7a:d2:93:24:e5:95:
b2:1a:70:8a:95:c5:a4:be:f1:35:11:25:54:1b:b8:72:ea:7b:
5f:47:ba:8f:2a:53:ae:81:04:eb:54:ee:73:dc:52:fc:10:26:
74:b4:78:1c:ef:5b:e1:a3:09:28:58:72:88:0e:f2:b5:cd:e6:
7c:9f:01:2b:a9:81:34:31:62:35:93:42:32:a1:a9:57:f0:05:
cb:14:93:a4:16:8b:5d:19:99:4e:0d:fb:2a:1b:78:9e:d6:6c:
4b:9c:54:75:67:3a:6f:3a:df:e6:20:8a:84:1d:84:70:43:59:
a8:b7:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:25 2026 by rpki-client