Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File: B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier: HViXf6+jHFZHEtUrIuRELrSpmB8Tt2TzczU1UtJZlWk=
Subject key identifier: B2:0C:CE:48:E1:12:11:FF:56:25:EE:3A:1E:49:29:DE:27:89:77:EC
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer: /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial: 019D37C009AD52CAF52C4F18C5072AB74CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number: 0AF3
Signing time: Sun 29 Mar 2026 04:00:25 +0000
Manifest this update: Sun 29 Mar 2026 04:00:25 +0000
Manifest next update: Mon 30 Mar 2026 04:00:25 +0000
Files and hashes: 1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: dGWv3AVHfGejrb/sIo3sRRosW1vlX6YeKNpskEzWzJY=)
2: aG_aHbCU5Hs_MsAhlVWc5LE2b-o.roa (hash: pytCPS1GM1RdouNyax+lSXlG67UW6XetXLmtI5xGuWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:09:ad:52:ca:f5:2c:4f:18:c5:07:2a:b7:4c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Validity
Not Before: Mar 29 04:00:25 2026 GMT
Not After : Mar 30 04:00:25 2026 GMT
Subject: CN=b20cce48e11211ff5625ee3a1e4929de278977ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:c4:ae:10:84:61:34:d4:0e:b4:d4:dd:cf:
da:c1:11:86:02:3f:d3:e0:82:44:3a:2d:8d:5d:9c:
82:64:36:bf:8e:41:d7:52:b7:63:75:fe:9e:27:dc:
23:95:41:08:f8:1b:d6:94:39:fd:cc:ce:df:e4:d5:
cc:a7:17:99:62:1f:4f:d4:9b:7f:94:ef:1e:90:43:
82:9a:97:5c:87:0a:d1:18:8d:c6:f3:d7:cf:4e:e0:
65:45:fb:8b:83:3c:8e:d6:1d:8f:4a:e7:25:bb:41:
43:1d:9a:ff:bb:be:b3:70:ac:79:63:1b:85:26:a3:
44:cc:7d:5b:ba:b4:83:f8:f3:bb:08:9a:83:41:d9:
7a:3e:f0:2c:77:b3:21:b7:65:75:f2:b2:bb:69:c4:
f0:3d:58:30:48:10:40:77:f7:e0:10:34:a1:b8:64:
9a:32:af:fb:21:f4:06:93:e4:77:73:f4:6e:9e:83:
26:dd:f5:d2:0e:d0:3c:63:8f:f3:06:14:40:0a:26:
11:eb:c8:e0:5b:80:b3:a8:52:68:51:8d:26:d1:af:
d7:04:02:63:1d:57:89:be:da:43:28:a7:00:03:fe:
ad:a8:d8:3b:a3:76:ec:3c:15:bb:8d:65:d0:ea:f8:
9b:e5:04:e3:d9:ce:6f:24:ab:07:41:17:d5:62:4e:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0C:CE:48:E1:12:11:FF:56:25:EE:3A:1E:49:29:DE:27:89:77:EC
X509v3 Authority Key Identifier:
keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d9:0e:0b:9b:31:c6:f6:08:2e:6d:63:d4:a5:44:28:8a:27:
3e:19:61:c1:ce:8d:99:f0:f3:2b:8b:68:c4:43:9f:fa:ad:87:
2c:37:60:f1:3d:6a:c0:cb:ef:df:3e:76:89:b8:67:d6:b8:f7:
44:26:42:da:cd:a2:c7:1e:01:f0:25:48:be:41:68:ee:91:8c:
45:e0:5a:00:60:1e:66:88:27:3d:8e:45:06:94:5b:d4:cf:47:
cc:d7:90:f3:bf:5b:e6:cd:0b:58:f0:8f:b5:30:11:c9:09:40:
be:3a:8e:77:fb:c9:7d:d5:e5:e2:a2:26:04:b2:23:f1:a4:28:
3d:c2:d0:ef:40:67:c7:63:cc:57:6c:3a:d7:05:d3:eb:e5:5e:
b2:1f:45:d5:9b:36:73:a6:3b:5e:d3:a3:13:02:10:9f:64:ba:
7b:82:d1:f5:34:99:44:98:6f:cf:d4:ef:34:55:a8:71:32:33:
b8:08:03:83:ef:0e:68:37:cb:e0:b2:dd:09:4b:b4:f2:7e:d3:
52:70:a7:a4:38:0f:e7:e8:8b:8a:c2:8e:4c:c5:39:45:f4:11:
8e:82:1b:e0:1f:b1:f4:01:b8:49:7f:98:5f:29:9f:ca:94:9c:
c8:22:60:5e:39:61:46:c6:0f:e7:dc:d2:d0:48:b3:b4:ee:dd:
a5:94:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:03 2026 by rpki-client