Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier: 3Wi9aH2gKCQ5NzQlJY3GIYgrEk227feHUJBUL2IVGNE=
Subject key identifier: A6:8F:A0:7D:33:17:2A:F2:B1:BE:DA:52:99:46:54:85:83:AD:6B:FE
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 01A11304ED275E723068B53B90B7D55FFA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 21:00:52 +0000
Manifest this update: Tue 06 Oct 2026 21:00:52 +0000
Manifest next update: Wed 07 Oct 2026 21:00:52 +0000
Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: if9umpkiH6Ix0ugseHW3O7v8NwYLJ0K4UQNx3QZc/d0=)
2: O4J-NYIe9H0u52beSrp6KYfxSyM.roa (hash: 9cGF5R/YNUjncOYY/j5mBT3HsIQEUCIbaqGilj06Z9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:04:ed:27:5e:72:30:68:b5:3b:90:b7:d5:5f:fa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Oct 6 21:00:52 2026 GMT
Not After : Oct 7 21:00:52 2026 GMT
Subject: CN=a68fa07d33172af2b1beda529946548583ad6bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:d6:ed:89:57:f0:e1:94:30:ff:58:6e:86:
e6:f9:f4:9b:f7:e8:6a:36:f6:85:e3:07:43:17:44:
84:57:d4:0b:19:73:13:a9:77:c8:46:34:c9:5e:e0:
fb:8e:69:8e:8e:19:cc:a4:72:e6:fb:75:8f:5b:00:
35:6c:43:33:bc:cc:9e:31:49:c1:1b:32:06:4c:66:
5a:5d:1b:db:23:61:f3:2c:0e:48:3e:7c:d5:88:33:
46:88:f8:f0:d2:bf:43:6d:8e:a0:c8:79:4c:6a:f6:
06:a2:9d:5c:75:03:74:48:ec:57:6b:60:dc:37:b7:
e0:e2:ef:d1:bc:b1:6e:cb:c8:8b:08:b4:f7:9d:bf:
6d:0b:bc:3b:71:b4:d4:c4:e4:3d:0b:d9:2d:d6:da:
9d:12:b0:05:77:22:24:30:0d:ab:0b:91:46:ca:b1:
c0:b0:3c:28:41:54:33:18:c2:51:fe:f5:d4:dd:ae:
9d:b5:8b:31:4e:80:da:68:60:02:2c:e4:ef:55:19:
52:5d:4e:42:71:dc:9f:78:10:6a:39:1a:89:44:c1:
01:ce:e6:61:7e:b9:fe:88:7c:da:12:c5:94:06:dc:
1a:44:5d:e3:85:44:2e:64:a6:c3:f7:d6:3e:b9:7d:
e7:17:1d:5f:2c:5b:82:58:8d:db:af:22:1a:a8:97:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8F:A0:7D:33:17:2A:F2:B1:BE:DA:52:99:46:54:85:83:AD:6B:FE
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:42:13:dd:b4:c0:73:5a:34:ce:c8:57:d3:00:b3:cd:8d:88:
7c:ca:9b:16:96:93:45:4e:6e:5b:13:d6:1a:4f:bd:c8:61:d8:
dd:51:9e:34:87:a6:ed:24:91:cc:1a:d5:27:b5:46:9b:e4:f0:
f8:fe:16:13:6e:79:ce:2a:26:43:e2:3f:a7:71:a5:0b:d4:3e:
4a:e6:b2:be:7c:64:bf:cc:04:e0:53:cf:c4:b7:5c:6d:1e:f6:
bc:53:38:da:ca:c3:89:4f:96:97:2f:b3:62:2b:a2:95:04:cd:
58:c1:0b:79:fc:e8:20:3c:47:fe:cd:55:b9:ce:89:77:81:ec:
14:70:ae:8c:f5:f9:d6:d8:6d:02:64:6d:1d:a2:c0:96:bb:e7:
43:dc:3f:62:fe:cd:05:ac:f1:da:29:69:8b:5e:68:83:6c:85:
c7:6d:56:37:88:b3:04:47:ec:e4:38:64:9e:63:b3:fe:89:2e:
c4:18:c5:52:b7:46:b3:7c:49:c8:81:3a:66:45:10:87:1a:11:
18:ba:df:3f:e9:f1:55:65:d0:f5:38:81:17:fb:bb:8c:9f:b2:
76:3a:83:b9:3d:d1:8e:d2:7f:55:0e:5c:5d:83:40:f7:58:8e:
3a:e1:de:c1:64:67:d2:37:28:84:1c:41:50:8c:1b:1f:58:53:
f1:ef:5b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:21:31 2026 by rpki-client