Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
File: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft (raw, json)
Hash identifier: GM8DZc82v9p8mfi6n4nTbT8UAUAJUydO0GoxKQACbKU=
Subject key identifier: B3:70:C5:DB:AF:C4:50:DA:DB:BD:2A:EE:1C:BF:E8:35:29:C7:F2:B0
Authority key identifier: 07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
Certificate issuer: /CN=077946f04742c66279acd322009be15e3d588a5a
Certificate serial: 019D3A1CB0E15F4BFEA7E803D7F03E331DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 15:00:51 +0000
Manifest this update: Sun 29 Mar 2026 15:00:51 +0000
Manifest next update: Mon 30 Mar 2026 15:00:51 +0000
Files and hashes: 1: B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl (hash: +pMQJYAdOEHBWzF1bUVCNIyhvv20gRL9P3dnykIgL+o=)
2: O4J-NYIe9H0u52beSrp6KYfxSyM.roa (hash: 9cGF5R/YNUjncOYY/j5mBT3HsIQEUCIbaqGilj06Z9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:b0:e1:5f:4b:fe:a7:e8:03:d7:f0:3e:33:1d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077946f04742c66279acd322009be15e3d588a5a
Validity
Not Before: Mar 29 15:00:51 2026 GMT
Not After : Mar 30 15:00:51 2026 GMT
Subject: CN=b370c5dbafc450dadbbd2aee1cbfe83529c7f2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:54:99:23:78:03:47:e2:83:38:ee:31:a7:
1b:14:2d:5c:ca:66:d0:af:4a:c5:e9:e0:fe:f1:5f:
6f:98:c0:e5:b3:ed:42:9a:b3:02:db:90:48:ef:b8:
ad:33:28:70:e1:64:b9:ff:49:be:55:cd:2b:a5:91:
7b:69:76:35:00:29:7c:bc:54:28:70:8a:21:98:5a:
3c:2e:b6:c2:22:99:1f:16:be:4e:5e:15:9e:e5:f6:
d9:29:4b:a4:08:37:ba:b1:22:d2:a3:4a:2f:58:6a:
20:49:81:4c:a6:df:34:f5:bf:f8:c5:a4:f4:12:c8:
a8:04:43:26:c1:b3:df:91:af:7c:47:29:1f:b9:41:
f2:30:c7:18:09:f7:77:af:a1:1c:2c:ac:d5:55:8b:
47:04:24:71:94:b4:b5:df:98:50:e4:da:24:88:6a:
40:40:77:aa:37:34:99:6d:1b:6b:d7:f3:29:ea:af:
c4:5b:8c:be:ba:1c:be:f4:e8:bb:15:89:06:14:56:
a7:21:84:2b:0a:72:4a:96:5d:f2:57:a4:c1:94:eb:
69:13:d0:bf:28:9f:1b:cb:b2:1b:a6:f4:8d:07:b6:
4b:32:5c:66:c4:e2:78:5a:f7:45:6f:90:3d:b0:88:
18:02:ca:33:e8:27:ac:e2:ae:85:a0:89:50:b0:30:
83:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:70:C5:DB:AF:C4:50:DA:DB:BD:2A:EE:1C:BF:E8:35:29:C7:F2:B0
X509v3 Authority Key Identifier:
keyid:07:79:46:F0:47:42:C6:62:79:AC:D3:22:00:9B:E1:5E:3D:58:8A:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e3fd0b-9f4a-4452-92af-be151839f366/1/B3lG8EdCxmJ5rNMiAJvhXj1Yilo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5f:0f:f9:56:d3:02:d8:24:9d:6d:8a:e5:ee:e4:e1:96:92:
a8:2d:f9:c9:e0:8e:ea:8f:b9:44:15:6f:08:e8:e4:a6:e3:aa:
a9:d2:9a:67:70:80:07:5c:83:00:93:72:7e:00:d2:d8:9b:c5:
36:ae:26:93:d2:a1:9f:61:87:93:79:da:13:1b:fd:5d:f8:d2:
bd:16:9a:7b:b0:f3:33:81:24:a6:e7:7c:a0:be:39:4c:ab:b8:
30:46:6f:a9:b7:26:e4:10:5c:d6:7e:ff:a0:40:cb:1c:f5:9c:
62:65:dc:5d:8f:92:98:7b:ac:eb:92:95:1c:84:16:e6:26:aa:
70:9a:1a:76:46:7e:3e:bd:b2:79:58:1b:65:4b:13:d6:1f:8a:
d3:b4:79:85:0e:6c:ed:48:16:29:b3:d0:87:c2:5a:e5:63:7c:
55:f6:fd:58:ea:a4:4a:89:1c:33:94:14:cb:b7:ca:13:4e:33:
88:d8:ac:f5:87:4d:11:bc:dd:22:07:d1:80:53:06:f7:c3:1c:
20:ac:ed:c4:a4:1c:97:c3:98:8e:cb:f2:10:ae:74:61:c6:88:
9a:f1:79:c3:16:97:50:7e:d5:45:10:af:e3:23:ec:9a:92:01:
9d:69:2a:13:7e:fe:29:6c:4a:08:4e:93:3a:e0:67:8f:a8:4b:
06:92:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:47 2026 by rpki-client