Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: QubfEPz/u3EaJh303xqbceJKA33+bBHZN+cQyC16jzc=
Subject key identifier: A2:DA:B0:E2:EC:38:94:55:30:45:1D:09:6C:1D:2F:77:51:D3:30:98
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019E30723CBED6C97482C085AB05AAF6702C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 170D
Signing time: Sat 16 May 2026 11:00:53 +0000
Manifest this update: Sat 16 May 2026 11:00:53 +0000
Manifest next update: Sun 17 May 2026 11:00:53 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: aPPFS2cmGPcfp1EsIuMle8Se4yZU8Q8dMoP0wgWAR7s=)
2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:3c:be:d6:c9:74:82:c0:85:ab:05:aa:f6:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: May 16 11:00:53 2026 GMT
Not After : May 17 11:00:53 2026 GMT
Subject: CN=a2dab0e2ec38945530451d096c1d2f7751d33098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:f9:a2:8e:a6:bd:3f:43:63:64:e1:05:09:
4d:70:4e:a4:0e:e4:aa:2f:be:3b:5a:78:d1:fb:9e:
21:5f:3d:88:05:ae:6a:1e:0d:98:64:01:f1:a7:24:
91:e3:5d:db:e2:82:ec:09:d3:6d:67:00:62:b0:1a:
6d:7f:a6:ba:d2:74:24:fd:12:c2:af:05:3f:4f:3e:
25:38:eb:a9:50:04:9f:6c:03:79:9a:72:be:de:09:
12:d2:99:00:b7:29:ee:61:06:5b:b8:dd:cc:ff:b6:
9b:ac:9b:e4:a3:d0:8e:d1:ce:29:7d:6b:d7:61:c6:
5a:53:77:a6:1a:62:1e:1f:4d:f8:ab:c7:86:69:02:
64:02:3a:fa:5e:be:37:f4:03:06:b0:16:53:56:e3:
d5:4d:5e:92:0e:b2:27:23:37:2b:14:b7:4a:fe:ad:
32:52:3d:ac:5a:10:73:8e:1d:fb:e4:8c:bc:50:ac:
3d:fa:a8:bf:18:b6:0e:11:46:a6:dd:75:9d:23:94:
b8:f5:e5:cf:69:ee:6f:40:01:02:4b:21:a9:dd:9e:
ea:57:07:88:26:04:e8:0d:2d:ac:44:a6:65:15:57:
90:b7:c5:4d:92:f1:b7:b8:0e:c4:51:e8:3a:ca:a9:
89:3c:d6:e8:fd:2f:f8:42:a3:0e:8f:96:07:42:23:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DA:B0:E2:EC:38:94:55:30:45:1D:09:6C:1D:2F:77:51:D3:30:98
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1e:bf:ff:64:68:a0:9e:87:60:ab:c9:df:c3:28:86:d6:24:
41:7f:08:2c:b4:7a:e8:cc:aa:91:d3:d9:36:b7:44:c2:7a:1b:
49:68:88:53:17:60:d5:b0:74:b7:88:a9:ea:70:a5:91:ff:7c:
d6:da:94:31:0c:e1:99:ce:a7:1d:5b:ca:8d:82:7d:f1:1d:1e:
0e:6c:41:c8:39:d6:a4:89:18:7b:25:dc:5c:76:f8:09:39:28:
81:a1:27:86:f6:7f:f5:80:b4:6c:46:11:75:a6:21:01:ae:7a:
a5:dc:e8:0c:2c:37:c4:6b:e0:49:e3:c8:52:65:76:25:5a:4d:
1a:19:3f:b5:03:24:a2:da:d8:24:5b:5e:2d:a1:49:29:07:3e:
da:20:ed:cd:dd:57:57:d9:a6:0e:6f:d1:b2:40:22:89:21:56:
92:32:c7:d8:03:4e:4d:51:2c:74:09:1f:e0:0a:c4:71:3f:26:
93:e1:75:61:8b:ba:74:dc:5f:16:09:27:3a:15:1a:ae:cd:ab:
48:65:c7:6d:3a:e6:e7:c5:7b:d4:5a:4f:df:e4:d9:d8:86:7e:
cc:8f:c1:76:93:33:cd:39:66:0f:64:94:4e:d2:bf:36:93:e1:
6a:47:b2:0a:71:1c:7b:a1:26:cb:4d:76:16:b3:f5:9f:33:7d:
96:22:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:30 2026 by rpki-client