Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: 8sVq6t+C/sj5Iu39bSs+ik8ZDOxBW1BQpQQWfYFxKYQ=
Subject key identifier: EF:28:C5:65:7F:D1:1E:93:72:27:E8:85:AE:15:98:BA:6E:8F:43:22
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 01A001DD2AB18CE0420C2326465F81051E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 17FE
Signing time: Fri 14 Aug 2026 20:01:06 +0000
Manifest this update: Fri 14 Aug 2026 20:01:06 +0000
Manifest next update: Sat 15 Aug 2026 20:01:06 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: IguEitq2kGQJ4LPkoQxMhk5l69TMqZNxxfRrqpwXOE4=)
2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:2a:b1:8c:e0:42:0c:23:26:46:5f:81:05:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Aug 14 20:01:06 2026 GMT
Not After : Aug 15 20:01:06 2026 GMT
Subject: CN=ef28c5657fd11e937227e885ae1598ba6e8f4322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:e2:a9:bc:79:39:e1:9e:f7:a1:67:c7:4f:
ba:72:02:91:01:fe:ae:b2:49:0e:4b:19:1a:6c:73:
46:8c:47:94:96:b4:5d:9e:cd:0a:5e:ea:c1:3b:ce:
75:f0:3c:b3:d1:95:43:ff:4f:c0:ef:b7:18:2a:54:
d4:05:fb:59:64:d4:c1:b8:48:cb:ce:b4:a8:73:cb:
2c:28:ca:3f:56:28:d8:2d:e3:22:94:9a:e4:75:18:
f0:04:9f:e7:be:60:0b:6a:d9:74:52:92:94:f9:38:
7e:9b:4b:23:fe:1f:22:db:f2:e1:03:e4:55:0c:89:
ce:03:52:2b:56:62:cd:28:ea:b9:75:f1:fa:96:9e:
6a:49:f2:14:d3:33:e2:df:25:b1:5a:57:cb:aa:46:
ed:ab:d9:a1:4f:34:5f:de:bd:c3:8c:dd:08:f9:bd:
af:84:de:78:45:ee:12:34:dc:45:a6:60:6a:db:ba:
9a:1d:c5:07:f2:24:cf:ff:35:71:03:5f:57:fe:44:
11:31:d3:20:ad:38:7b:76:b2:c7:59:dd:73:5f:56:
45:d3:4d:6d:3c:11:26:cd:55:b7:d7:6a:2c:d7:56:
34:8c:3f:c8:9b:08:ff:6f:9a:41:03:b9:2c:8a:07:
7c:83:ad:3e:80:d1:64:a4:42:f6:d1:01:f7:c9:d2:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:C5:65:7F:D1:1E:93:72:27:E8:85:AE:15:98:BA:6E:8F:43:22
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:86:af:e4:a2:43:80:0b:9e:14:ac:f2:10:26:9b:bf:5c:04:
61:17:1a:ed:64:2d:a7:1a:ec:5d:23:bb:4e:d9:75:6a:08:ca:
2c:78:2a:52:0a:f9:93:32:22:41:1b:06:7b:01:ff:3a:d4:b1:
42:3d:14:8c:32:dc:aa:18:b8:4a:6b:96:65:fb:ff:3a:4d:df:
fc:17:71:7b:da:61:b7:27:63:15:4d:2a:e8:06:de:26:a8:ac:
ad:62:92:10:83:0f:4c:e6:37:64:ef:a5:43:96:bd:ad:14:04:
fc:26:cf:3c:8c:78:03:28:a2:88:1d:64:dc:2f:7b:38:46:3a:
17:ea:37:89:e8:09:72:0e:12:97:c5:9f:85:35:a4:b9:14:1b:
45:cb:b2:01:3f:5e:8b:ea:cb:d0:c1:45:69:d7:b3:62:37:59:
a7:e4:9b:8b:7e:90:d9:5a:cd:f5:bf:73:d9:33:53:b0:a3:48:
4c:00:66:e1:3f:b2:e3:59:f7:c8:51:c3:13:0f:2c:7e:4a:d1:
97:a4:3e:65:ae:6f:10:8b:a3:65:45:48:c1:e7:cf:7b:20:9f:
55:0a:b9:b9:89:93:80:0f:26:5c:d6:09:9e:be:67:f7:b5:b4:
27:b6:ad:e8:39:df:92:cf:96:59:f7:ab:c0:88:67:58:a6:b1:
30:cd:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:51 2026 by rpki-client