Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: iZrnGxdF9taV2l4KyqJJ/FzTqetRoy25mc4z0/3kSN4=
Subject key identifier: DD:8D:D5:A7:A9:A9:F8:73:BB:86:AB:A5:47:B8:57:77:5D:84:AA:2C
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 019D39407354410E28FCCAC5B0C22351D202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0FDF
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: 9a2veB/9JtQDMdzbwEepSXOwrjiJgXHBd/DoV/gGp9A=)
2: ea9c47nLhB7nrDPtMPdzkgxr_NQ.roa (hash: vCEAR5IAAEJK2ZW1HR6IXW5uYjAwQMBi35YeD/PEe4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:73:54:41:0e:28:fc:ca:c5:b0:c2:23:51:d2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=dd8dd5a7a9a9f873bb86aba547b857775d84aa2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:0c:84:38:d3:ec:2e:b3:a5:14:b5:79:2b:
6b:27:1e:e6:7a:ae:1f:08:2c:ec:f2:80:56:b4:42:
56:b2:dd:41:66:a0:5a:2c:c1:11:dd:6b:b9:6e:7a:
8d:8e:7c:3a:1d:7e:e8:5a:ba:f3:34:76:f0:53:2f:
f6:58:01:92:f4:17:cc:6d:6d:dd:f5:c0:65:44:cf:
96:1e:ba:11:b2:63:2e:17:44:a9:f0:7c:c8:36:89:
c0:e0:b9:69:08:e5:17:cd:93:61:4e:e5:4c:7a:53:
c1:43:34:6e:c7:48:91:68:d7:c0:b8:41:dc:64:5b:
c5:e2:d8:83:ca:59:92:95:c3:57:27:95:eb:1d:b2:
be:4b:aa:46:5a:3f:8f:a5:ae:94:28:53:89:91:91:
ad:34:0e:1b:b8:bd:45:7a:b1:ae:1e:91:7c:9b:34:
20:2d:cc:8c:66:9a:1a:75:98:4b:79:6c:00:df:46:
0e:bf:c6:b0:c7:0d:55:92:be:fe:68:4d:d0:cf:b9:
27:0c:b5:00:3f:49:83:6f:00:d8:ff:28:f1:37:13:
3c:91:08:69:e0:99:cb:66:8f:96:7e:bc:d4:30:8d:
ec:a0:d8:75:ab:06:11:3b:6f:de:aa:e9:4b:32:73:
e0:c5:a6:81:2c:ba:b6:49:ba:9c:fd:de:4d:4f:42:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:D5:A7:A9:A9:F8:73:BB:86:AB:A5:47:B8:57:77:5D:84:AA:2C
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5c:69:38:a6:1e:a9:a0:71:ef:35:48:4e:a0:3d:1b:03:6b:
66:e7:c1:54:0b:13:a6:8f:ee:2e:d6:e5:7b:db:d4:ce:79:66:
75:1b:d5:e2:09:a4:7a:2f:0d:8a:05:14:63:84:d7:78:cc:a5:
8f:78:95:1c:ce:05:00:e2:78:96:cf:e1:c7:95:e5:c9:33:ae:
b9:72:af:7b:b3:e2:b6:fe:f7:9e:6b:04:91:b3:3b:9b:a2:b6:
b2:4f:1f:d6:82:10:66:fd:db:e3:90:e7:6b:14:0c:de:18:43:
39:d8:84:d2:78:27:4f:ce:f0:7c:bb:6b:7a:11:ac:5b:77:75:
2a:11:21:b0:bf:be:e1:c4:57:01:79:80:86:70:92:c8:b5:9e:
ae:9c:7a:ab:fc:f3:c0:50:77:38:cb:e4:7a:ba:df:42:7a:1f:
e7:dd:e9:72:c3:89:8a:c0:6e:8d:28:7f:2f:78:bc:ae:03:35:
46:2f:50:32:5e:f6:e9:b0:3c:85:41:ec:18:92:07:13:9b:e8:
c8:7a:ba:5a:c6:b8:ac:b8:f4:b8:28:1c:8e:61:3d:e8:a4:e6:
e3:89:05:7e:c2:e0:e4:36:86:46:e4:78:8b:0b:b7:5e:61:58:
44:5d:d6:b3:43:c8:8e:e9:0c:c8:84:92:1e:33:01:ff:58:f5:
e5:1d:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:39 2026 by rpki-client