Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: 3QCFPAdY11/I5P5kdG/AsGxJ+SDG2UwrMSCn4H3dapU=
Subject key identifier: BB:50:A8:BA:B6:C4:94:CA:CE:0A:64:CD:40:63:EA:A8:A4:02:EC:A2
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 01A140F13584830C386F34CD66CDCB493CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 19:01:51 +0000
Manifest this update: Thu 15 Oct 2026 19:01:51 +0000
Manifest next update: Fri 16 Oct 2026 19:01:51 +0000
Files and hashes: 1: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: t8OPynCLzHr2Nl+XHWA1wURV/neH8m/yeks8N6LSVt4=)
2: hFTnWGImSrItjvTZMgv5Y6qcHWI.roa (hash: pZbkXKYC4cfW4J3LrFAYotHKXZiiOIa/hV0bOys/6DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:35:84:83:0c:38:6f:34:cd:66:cd:cb:49:3c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Oct 15 19:01:51 2026 GMT
Not After : Oct 16 19:01:51 2026 GMT
Subject: CN=bb50a8bab6c494cace0a64cd4063eaa8a402eca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:4b:22:26:f1:33:ea:69:c2:90:cc:9c:49:
c3:2d:54:b3:83:07:12:30:07:2a:03:07:cf:0d:b0:
a1:30:7c:88:82:b4:38:fe:25:ad:ee:6c:79:e4:63:
1e:52:10:70:41:83:f2:ff:96:9e:76:76:e5:bd:2b:
a3:89:b1:a7:a5:0f:9a:ed:81:8a:22:fc:e3:83:20:
cb:53:11:80:fb:1d:f2:24:99:17:20:8d:1c:3d:9e:
c0:bc:c7:20:36:df:39:d2:3b:55:e4:a2:f7:f9:48:
46:3c:01:ff:e6:f8:bf:fe:ad:88:48:36:92:f2:63:
05:1a:51:6b:0a:32:48:94:cd:11:14:e0:b3:ea:3c:
1f:40:08:d7:53:c9:6f:64:76:ec:11:4d:34:9a:71:
cb:57:c7:0a:67:d0:b9:e1:f2:0d:60:1b:c4:a2:3f:
9e:21:20:a2:e0:0b:23:e4:73:da:82:ee:90:40:49:
5d:82:3d:cf:93:f6:af:80:96:a7:92:dd:ab:87:34:
4b:6a:e9:dc:72:b5:ef:5e:c1:ac:3a:2f:61:1e:05:
fc:02:5f:c2:86:2f:f8:29:2a:77:f7:c9:2e:d9:de:
37:c5:b2:0c:6d:43:b5:be:58:61:6f:e3:7d:5d:48:
8f:f2:e2:fb:ec:33:75:bc:20:76:b0:a9:5e:f0:2e:
80:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:A8:BA:B6:C4:94:CA:CE:0A:64:CD:40:63:EA:A8:A4:02:EC:A2
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:8d:88:79:90:c5:7a:4b:3a:b7:7d:84:27:d2:cb:de:2f:
a3:43:e0:e1:71:b8:fa:9b:5d:1e:ac:0b:4a:84:c2:d2:c7:03:
3f:11:61:6d:57:0d:29:22:b3:2d:b3:ec:d5:2a:e0:ac:32:59:
0e:14:a4:e2:f0:fc:69:84:28:35:ad:fc:6e:0c:71:99:8c:2b:
2c:b7:a9:c3:37:d1:ac:ea:56:1b:f2:0b:8d:fc:08:59:1f:56:
1b:e4:b4:b4:9d:a7:aa:04:ba:79:75:e2:8d:9a:56:b8:ea:79:
92:33:8a:51:32:d9:40:fd:f2:e3:6b:b9:5d:3e:20:2d:f0:f1:
d6:fb:d0:ae:b6:43:37:3a:11:d4:80:dc:95:41:eb:af:32:e4:
ff:b3:f2:4b:0f:88:ea:6a:9f:2e:9b:76:69:1b:40:e5:62:56:
dc:f9:33:2d:d2:3a:49:33:25:e1:c3:22:e8:7c:d9:2c:b0:0f:
df:cc:6d:73:ac:30:18:de:f3:46:ff:1b:22:b7:3b:f9:d1:79:
29:26:f9:7e:ec:a7:78:32:a5:74:d1:b8:89:e6:78:0c:f6:6f:
86:e6:eb:40:94:04:8d:30:33:8f:d4:aa:a0:a4:50:7e:b6:26:
c0:21:3e:81:71:be:c7:85:8d:27:4d:b2:bd:95:c8:fd:29:b2:
91:cc:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:35:03 2026 by rpki-client