Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: BOxWsXh4WapfPRYKdOdDXMQ6zjRcO3/L9xIrEO50EOk=
Subject key identifier: 79:12:D1:34:2E:98:95:27:08:19:8D:CA:18:C9:83:EA:35:C8:BC:B6
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 019D371BC795325BE050CBE953C70C93DAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:01:00 +0000
Manifest this update: Sun 29 Mar 2026 01:01:00 +0000
Manifest next update: Mon 30 Mar 2026 01:01:00 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: X+KWu+xx1CHlmzM2T//s6fn+8AQLkwvAhvB/7QuUs4o=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:c7:95:32:5b:e0:50:cb:e9:53:c7:0c:93:da:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Mar 29 01:01:00 2026 GMT
Not After : Mar 30 01:01:00 2026 GMT
Subject: CN=7912d1342e98952708198dca18c983ea35c8bcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:65:ce:59:98:90:58:f4:6b:f0:10:ce:9c:
b9:54:0a:8c:06:fa:89:2f:f6:e1:8c:8a:ce:ab:1a:
aa:3d:eb:8b:32:5e:ce:e3:de:b5:e6:e2:54:54:86:
9a:bc:9f:34:a0:2b:3b:12:42:64:6c:f8:1b:d5:28:
70:ed:59:57:71:53:02:c9:08:ad:1e:0a:b9:56:ad:
4e:d7:26:4a:ad:62:6f:14:d3:87:ef:45:42:0a:c2:
ec:3b:1a:d1:23:bb:c0:15:b9:db:f6:f9:76:af:bc:
ff:2a:d6:a1:46:0f:0f:27:b2:b3:8b:12:b5:d0:7f:
27:0e:e5:d1:b1:26:02:40:51:f6:52:49:42:ec:9a:
ee:49:63:1a:b3:5c:89:ed:61:dd:90:b0:c6:18:12:
ca:7e:17:3c:e6:5c:23:52:0c:31:aa:b8:01:50:77:
c0:e2:4f:94:1d:66:80:bd:9f:19:bf:fd:b0:31:30:
2c:e9:98:23:a2:89:cb:dd:62:32:27:72:84:4a:1f:
2d:a4:1f:51:3b:dc:79:2e:59:d1:ec:0d:ee:ea:47:
94:bb:b4:44:43:73:c1:0b:5d:59:ba:02:21:a3:b5:
88:fe:b6:38:0e:8f:6d:00:e0:e8:79:ee:ad:dc:af:
2e:83:87:76:1a:88:8d:7e:86:77:3d:5d:2a:44:82:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:12:D1:34:2E:98:95:27:08:19:8D:CA:18:C9:83:EA:35:C8:BC:B6
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:61:f8:c2:33:0b:4e:99:84:4b:84:4a:19:fb:61:f9:b3:05:
4f:fe:c9:33:54:4e:de:19:6d:f0:99:ee:8e:da:72:c7:1e:73:
82:c6:6a:4d:b4:b6:18:52:f9:b4:34:03:ef:fd:db:14:8f:fd:
fa:e6:ff:68:75:2b:f6:23:70:7c:8e:e4:f6:17:9c:3c:fd:f0:
0d:1a:d2:77:1c:b9:24:42:f5:4a:8d:76:24:f4:55:08:78:19:
89:02:1c:92:3d:42:9a:b2:5e:dc:d5:31:e8:12:bc:d2:26:d8:
62:29:9a:85:06:b9:bc:56:5b:fd:82:af:ad:42:bf:05:36:56:
d0:6a:fc:9b:06:16:2f:d8:5b:5b:ec:9e:58:97:8b:4e:cb:7f:
6b:17:fe:9d:c9:c7:ba:98:08:6c:a3:40:43:39:6b:74:c7:9e:
35:19:59:bb:a3:79:50:69:6d:9d:6d:24:ad:a6:e9:2c:5c:08:
cb:87:70:f3:6c:2a:5f:c4:14:f0:27:d7:64:f0:9f:c1:36:f0:
28:ac:f9:7e:e2:5d:68:6f:dd:d3:e7:83:13:52:4d:21:d7:4c:
e9:52:a7:18:d8:57:c6:9a:59:79:d0:ce:82:67:e3:e3:95:f1:
b0:11:f9:25:cb:14:1c:86:b4:ec:8f:b4:26:5e:54:6c:2f:25:
6a:a6:5a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:20 2026 by rpki-client