Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
File: t3CHf-B99JohaBSt5wHQh7EWk7Q.mft (raw, json)
Hash identifier: +KhwrfusLdsJgR9l8zv3OzCJsu1hBvkb9MKfLWA/FMo=
Subject key identifier: B8:1E:98:D0:1C:EC:D4:D9:E2:D6:B7:10:4C:25:BB:A7:14:66:A8:E5
Authority key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
Certificate issuer: /CN=b770877fe07df49a216814ade701d087b11693b4
Certificate serial: 019D371BB737FE92E485093FDFAAAC4539F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
Manifest number: 06D3
Signing time: Sun 29 Mar 2026 01:00:56 +0000
Manifest this update: Sun 29 Mar 2026 01:00:56 +0000
Manifest next update: Mon 30 Mar 2026 01:00:56 +0000
Files and hashes: 1: t3CHf-B99JohaBSt5wHQh7EWk7Q.crl (hash: W5dYmCMBll9ngnvlF/lS2ES1X3X34PERYi3N705bSC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b7:37:fe:92:e4:85:09:3f:df:aa:ac:45:39:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b770877fe07df49a216814ade701d087b11693b4
Validity
Not Before: Mar 29 01:00:56 2026 GMT
Not After : Mar 30 01:00:56 2026 GMT
Subject: CN=b81e98d01cecd4d9e2d6b7104c25bba71466a8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:64:b8:95:7f:fc:b5:5e:be:e8:c9:18:73:
1d:7e:4d:3b:5c:91:70:ae:b2:fa:31:c7:bf:85:12:
a7:44:7d:20:cd:dd:75:55:38:8c:14:1e:18:e1:77:
20:a6:76:b7:7e:0a:a8:54:aa:80:62:36:0c:ee:25:
22:aa:ca:4b:f6:1b:e0:98:a3:35:e6:00:0d:b8:56:
6d:c7:93:ff:0c:0b:25:0d:ce:57:b8:81:e9:ea:f5:
0b:5b:7a:00:ed:e7:57:69:96:d8:cf:87:06:19:8a:
af:49:20:25:d0:41:86:ea:b4:65:60:4d:58:55:99:
8e:59:84:b6:76:b0:3b:5c:70:1b:d8:50:79:2c:5f:
91:f8:4a:8d:29:64:5a:49:e5:a0:05:c3:21:2c:e8:
a4:e4:51:0b:d4:b4:a8:e4:ea:e1:6a:36:cd:c0:38:
bb:da:14:45:2f:5a:05:6e:ac:10:66:6b:82:a1:8c:
57:1d:e7:9e:03:5d:5c:a1:b4:f5:51:35:83:69:2d:
a3:90:f2:e0:47:91:b7:fb:5a:5c:23:1c:29:9c:30:
94:03:fc:bc:a7:46:70:c9:a0:9a:85:dc:f9:bc:40:
df:1c:dd:05:3b:6f:78:65:01:48:04:48:97:77:7e:
6b:91:8d:7d:0f:fb:8d:56:12:a2:5f:d3:d8:e5:19:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1E:98:D0:1C:EC:D4:D9:E2:D6:B7:10:4C:25:BB:A7:14:66:A8:E5
X509v3 Authority Key Identifier:
keyid:B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:84:ed:dc:08:b5:4e:7f:c7:44:97:e6:20:da:c0:7e:6b:9a:
3c:9b:0e:8f:18:4c:73:82:a1:3a:f0:f4:b6:0f:da:72:60:52:
32:71:eb:4d:bf:86:5e:49:aa:21:05:20:c5:a1:42:dd:bb:d4:
1d:8a:af:80:41:f5:4c:4a:a6:df:42:9d:d8:69:29:54:22:fc:
ae:8d:10:6c:54:5e:2c:cc:62:f5:92:69:fc:3f:4c:f1:17:8c:
5a:15:bf:7b:13:c8:ac:e5:c7:ed:8e:bc:5d:9d:2a:f9:99:e3:
e2:2f:f9:6a:6c:30:00:24:6a:26:6e:42:10:5f:a1:8d:45:3b:
6f:a1:a4:7e:8e:2a:03:08:4f:5f:bd:48:ab:36:2a:3c:0e:73:
10:ac:e1:53:22:ee:08:4b:1e:2e:ff:0b:91:9c:f4:a1:3d:91:
8f:b0:a8:53:f5:33:a5:4c:d2:31:0b:d0:5c:91:25:49:a8:29:
40:4a:ed:0b:66:11:70:69:d5:ac:5f:45:e2:91:b3:f4:98:3f:
44:6c:c4:cc:cf:21:83:91:a7:a0:74:df:e3:42:3c:96:27:3a:
26:49:1d:15:6d:d1:67:73:33:72:e8:17:f6:c9:38:89:3a:e7:
7e:e9:a0:e6:ea:4a:2b:c9:e6:ec:01:f2:77:69:5f:a0:27:5e:
63:69:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:17 2026 by rpki-client