Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
File: BI3DuSPHc4-aWO6AtJvNDF59z_o.mft (raw, json)
Hash identifier: cIRuiyu28NNG1RnSEME9nGPe1z8+khASDtNjpcGLRBQ=
Subject key identifier: 35:61:92:63:12:0F:47:B8:93:4F:F4:0A:DC:EF:38:B1:42:93:63:36
Authority key identifier: 04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
Certificate issuer: /CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Certificate serial: 01A13E5D172FA33844A1E17D64ECABA3492C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 07:00:50 +0000
Manifest this update: Thu 15 Oct 2026 07:00:50 +0000
Manifest next update: Fri 16 Oct 2026 07:00:50 +0000
Files and hashes: 1: BI3DuSPHc4-aWO6AtJvNDF59z_o.crl (hash: jN+yrxyPiUTMgunZHX8fdUzWrFbx3uqKo9AqaRKMs64=)
2: XXIoAY-5Av7-gKbYLelSLr2VuAQ.roa (hash: JJi5E5XJ/T8+/7RMzDeJIxZnJ0RujHszIcclzG1wW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:17:2f:a3:38:44:a1:e1:7d:64:ec:ab:a3:49:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048dc3b923c7738f9a58ee80b49bcd0c5e7dcffa
Validity
Not Before: Oct 15 07:00:50 2026 GMT
Not After : Oct 16 07:00:50 2026 GMT
Subject: CN=35619263120f47b8934ff40adcef38b142936336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:87:8f:eb:6c:85:17:b6:ff:39:38:06:f4:
c8:2c:b0:0e:8a:22:c5:d8:01:8b:8d:9e:8e:ba:e2:
83:88:28:92:99:dc:b5:9d:19:c4:64:ac:54:e6:aa:
18:54:eb:28:ce:46:15:c7:00:50:93:92:7e:12:60:
ba:68:6e:9a:c6:2e:ae:ff:64:69:6f:32:92:f8:8d:
e7:ae:84:19:9b:c1:cf:28:0b:58:90:3f:4d:f2:cb:
8e:02:c6:f2:e6:f8:b5:4e:69:c4:a8:dd:04:e3:2f:
3a:5b:32:df:ac:24:54:12:f1:92:43:19:79:04:12:
ae:31:9c:47:b6:a9:b0:2c:5e:5b:e5:e0:23:10:d9:
ed:93:cd:7c:90:fb:35:d7:bf:73:58:4e:19:25:87:
c6:18:38:b5:cd:0b:10:ae:47:f7:56:13:c7:f5:8e:
0e:9e:5d:4e:36:2e:31:f4:93:b8:cb:55:0e:0d:75:
95:f3:59:e8:15:2c:d1:2e:99:03:00:76:24:57:4d:
ad:c6:75:d1:17:bb:56:cb:53:98:11:81:02:33:86:
81:70:61:4c:2e:74:c2:96:b8:72:db:d4:dd:32:96:
b7:08:ec:f5:10:34:e8:59:48:84:62:34:09:ba:d2:
9b:15:ae:bd:de:6e:18:5c:77:aa:17:1c:fd:48:71:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:61:92:63:12:0F:47:B8:93:4F:F4:0A:DC:EF:38:B1:42:93:63:36
X509v3 Authority Key Identifier:
keyid:04:8D:C3:B9:23:C7:73:8F:9A:58:EE:80:B4:9B:CD:0C:5E:7D:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BI3DuSPHc4-aWO6AtJvNDF59z_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f8c018-b90f-4f89-a3f4-2ec871465599/1/BI3DuSPHc4-aWO6AtJvNDF59z_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ca:63:d2:55:f8:6f:17:2a:27:a5:06:7c:dc:71:de:f3:93:
66:e8:7c:8c:28:75:5a:20:60:61:1e:93:e7:c5:bc:63:2e:0a:
91:8b:29:47:f2:69:85:98:2e:16:81:b7:b5:92:67:83:05:07:
78:93:0d:9f:08:ad:93:55:33:0c:66:21:23:d0:c0:2f:bd:e2:
ae:b9:c9:5e:c2:8f:02:b2:d2:56:18:da:28:f5:40:96:7c:11:
a7:41:4f:0b:f4:08:d9:26:45:3b:ff:5c:97:ac:f3:4d:d8:46:
c0:6e:96:12:11:4b:b8:0a:b4:52:12:99:d3:21:0a:fe:ff:ce:
6d:77:9c:c1:1a:73:3d:02:15:5c:1a:8f:96:6d:24:3a:db:ff:
6f:62:5b:13:d1:cc:13:2c:52:d0:aa:d7:2b:1f:c5:24:44:73:
f5:19:c3:6f:e8:a5:9c:e0:54:7a:fb:03:f2:22:57:ac:49:ef:
e0:e4:4c:37:a2:61:f8:ad:51:c2:48:ad:8a:1e:a4:b3:62:a0:
3e:c4:6c:ad:55:39:b0:f8:3f:ff:e3:18:a8:9a:a5:1c:20:cd:
be:7d:77:d6:61:f1:12:a5:5d:e1:ed:f9:82:30:97:a2:7f:47:
53:69:c0:f8:57:84:f0:dc:d5:6b:56:60:76:ec:6d:f1:99:00:
85:e7:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:20:57 2026 by rpki-client