Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File: B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier: zfxBb6qLMhFO9ucN7sHRdu7jrmqrOSnBG0xVaT9RQns=
Subject key identifier: FE:9D:BF:C2:8F:90:B4:54:46:4A:A8:3A:BA:63:88:B8:59:3F:08:5B
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer: /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial: 019D38D2FB450D6E699846CCE42B816BE990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number: 1642
Signing time: Sun 29 Mar 2026 09:00:44 +0000
Manifest this update: Sun 29 Mar 2026 09:00:44 +0000
Manifest next update: Mon 30 Mar 2026 09:00:44 +0000
Files and hashes: 1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: +/WQjbZDYBiP7maYTuynVny7GaJ0xySjkGbQStlOOJY=)
2: ZiWqWZABnq_eiO62wMwzhJ88P8o.roa (hash: QMjkQdLnnhm5XVKipPX5kzLqwqqwc6MMLi86/hK/bzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:fb:45:0d:6e:69:98:46:cc:e4:2b:81:6b:e9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
Validity
Not Before: Mar 29 09:00:44 2026 GMT
Not After : Mar 30 09:00:44 2026 GMT
Subject: CN=fe9dbfc28f90b454464aa83aba6388b8593f085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:c0:09:18:22:c7:25:2b:7b:63:fe:b2:17:
15:2e:47:0e:89:c6:a3:89:17:9f:0f:d6:15:9f:1a:
48:3b:98:e0:3e:e4:79:9c:a3:fd:91:6b:14:c6:0d:
cb:cd:c9:7c:7e:cd:58:49:60:e3:6a:92:07:0e:d3:
81:6a:65:9d:9c:ff:9d:87:0f:6c:27:94:d5:78:6a:
4b:8c:be:ee:aa:50:2f:72:0a:9b:86:fd:8b:a1:69:
38:bd:a8:a2:2e:42:ac:08:cf:f5:25:0f:5a:70:29:
52:8d:e3:b6:e3:a3:6e:7e:92:b8:24:66:29:d5:92:
2b:36:06:84:ab:0c:90:dc:5c:f7:ca:e3:2a:fe:4d:
9f:8a:1f:ea:69:5a:01:05:d8:16:6a:82:1f:f0:3c:
d3:58:d5:15:6e:38:69:da:bf:7f:e6:f3:3c:01:44:
f8:3f:d8:b1:3a:62:8a:2b:a1:42:64:09:f3:b6:5b:
e7:97:d7:ed:b6:26:85:75:2b:42:b6:c5:7d:12:47:
71:ea:fc:aa:47:e1:04:5f:10:1c:0a:23:57:d4:b7:
b4:e9:a5:44:82:b2:33:81:ab:c4:d0:d6:31:b5:9c:
57:54:fc:44:0b:6c:6e:04:80:87:3e:f3:4d:03:80:
83:ea:00:9f:04:59:5e:da:92:32:5b:c3:30:5f:63:
aa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:BF:C2:8F:90:B4:54:46:4A:A8:3A:BA:63:88:B8:59:3F:08:5B
X509v3 Authority Key Identifier:
keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f9:ce:04:95:11:ea:f5:14:3c:03:37:f0:79:e8:22:54:e5:
b7:3a:73:c8:37:20:5c:ed:23:3c:c8:3b:59:0f:bd:16:11:bb:
a3:33:32:54:65:8f:c2:47:70:68:0e:ed:0d:9e:89:79:d8:8d:
d7:5e:fd:1d:94:41:7d:63:15:c0:6a:b3:0c:ac:f7:76:46:11:
d7:18:57:6b:88:4a:4b:48:8d:8e:77:76:52:b3:b4:18:32:f3:
23:06:13:14:0e:19:15:f1:5a:e6:b0:37:60:e4:ce:de:82:d8:
e5:be:e0:53:3b:b5:d0:55:52:d0:45:04:52:00:ac:e2:c6:f7:
13:0e:6b:f7:22:e0:3b:56:1e:1f:b5:19:73:7d:49:dd:d2:f9:
a2:1e:42:3a:64:02:d3:ae:5d:d1:48:e6:9b:db:e6:a9:24:34:
dd:dd:f1:12:70:3c:92:b0:0a:e6:db:61:aa:bb:d8:cb:c7:b2:
e9:37:50:95:cb:48:8a:34:1b:c6:cb:c6:4d:49:6b:b0:6a:aa:
0a:d1:b4:0c:24:01:2a:a8:96:71:1f:b8:0f:ec:6f:dd:8d:9d:
ae:47:20:ef:65:fa:7c:e6:2c:ef:8d:c7:30:c9:ca:54:8f:89:
cc:38:58:a8:5a:41:52:63:30:bc:7b:08:aa:3f:e6:3e:50:82:
89:0f:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:26 2026 by rpki-client