Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: jTemD4XguHQd0+K5+TCUZMYkTrSJmHEbI0AHcG/L7lM=
Subject key identifier: 70:8D:98:B3:D0:9A:98:A9:9F:AE:1A:B0:1D:34:26:65:B2:D2:75:AB
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 01A14082F0C159966E60F2E299CA24B75447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 11F5
Signing time: Thu 15 Oct 2026 17:01:25 +0000
Manifest this update: Thu 15 Oct 2026 17:01:25 +0000
Manifest next update: Fri 16 Oct 2026 17:01:25 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: XaPJ1gnGa+wvfLqZXtj5Rmi1t9NXgVIxezc22QiYwKg=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:f0:c1:59:96:6e:60:f2:e2:99:ca:24:b7:54:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Oct 15 17:01:25 2026 GMT
Not After : Oct 16 17:01:25 2026 GMT
Subject: CN=708d98b3d09a98a99fae1ab01d342665b2d275ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:1f:7b:66:81:9f:49:13:49:31:83:18:37:
2d:44:77:62:b4:e5:01:26:eb:db:cf:2e:bd:21:0e:
68:d9:64:20:14:36:2a:c0:51:1e:48:27:e8:9a:2e:
e0:a4:77:67:f3:1b:d2:23:19:17:ca:82:71:ac:38:
c0:fe:c8:c2:ae:e4:27:9f:27:c8:a9:77:b9:3c:ae:
d1:6d:df:dc:e9:85:25:f5:02:05:4f:4e:af:fe:36:
40:54:2c:b0:09:04:9c:54:b6:3d:12:db:ff:c3:2f:
d6:b7:f6:3f:48:89:b4:8f:a3:d7:bd:59:b4:dd:36:
7a:ed:fe:3d:cd:b9:54:d8:33:f2:cf:c7:f3:4f:b1:
cc:03:2a:42:d7:ea:6b:95:8c:9f:27:6e:62:c0:9e:
5f:4a:18:87:cb:b4:11:ba:84:bc:28:26:a9:05:1f:
7a:ec:e9:c1:56:94:75:e4:af:7b:86:57:6a:cb:f5:
12:0f:9b:b1:96:9e:18:16:83:f6:11:53:a0:1b:37:
ac:2c:39:b0:9b:3b:1f:2b:f2:3a:5e:1f:a8:ab:13:
68:78:83:a5:5c:c0:46:9f:c9:20:84:9e:86:2b:8b:
26:4f:70:53:91:ed:d4:e6:09:a6:f5:8d:35:a8:72:
21:b3:ed:2b:fd:0b:9b:c7:31:1c:51:36:72:55:43:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:98:B3:D0:9A:98:A9:9F:AE:1A:B0:1D:34:26:65:B2:D2:75:AB
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:de:9f:05:41:66:e9:67:92:b1:a6:9b:8d:59:fa:51:98:62:
83:e0:48:a2:c3:89:56:bd:40:81:24:d1:a9:20:6d:00:06:0b:
e4:73:5a:57:91:8d:24:d5:4f:b8:24:f3:9b:6b:b6:63:64:79:
26:45:3b:c6:d1:b6:57:3f:fb:99:a6:ab:a8:b3:94:61:d2:c7:
d7:6a:f9:34:97:31:33:fc:35:a9:b3:55:09:41:00:b8:7f:34:
9d:41:b8:e4:07:8c:15:a2:ff:50:4e:22:1b:c2:01:9c:bc:86:
d3:b2:31:6a:02:c6:fc:1c:4c:98:da:a7:ef:e4:2b:be:a8:7f:
b1:e4:45:65:c9:eb:26:73:4b:22:2e:9e:b7:a7:15:b3:dc:9f:
e5:76:8e:ab:bc:00:26:41:c0:4f:d1:60:8a:87:84:92:37:b1:
35:11:2d:4e:23:e6:ca:2a:8b:8c:8b:5e:1b:f9:1f:34:26:4d:
01:21:27:d7:39:93:e1:3d:4e:97:13:5a:13:cf:6d:25:b3:72:
05:fe:53:fe:7a:91:03:f5:d6:28:d9:14:93:94:78:91:b5:31:
34:8d:96:61:22:10:48:1a:a3:2b:1e:ae:2a:ab:76:da:b5:b4:
ff:a4:4d:03:dc:68:1b:0d:f8:49:62:64:6b:c4:40:62:c0:23:
19:31:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:07:37 2026 by rpki-client