Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: xsB7r0ihfwovfImya1dHR+ecbO7TVukcWVcBOTPmpFE=
Subject key identifier: C2:8E:FE:BB:90:B1:42:D1:EF:D3:02:0B:AF:49:8D:C4:B7:0B:F9:2D
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 019CAC105EB6ECCD424B0073147CD3A0DCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 17D9
Signing time: Mon 02 Mar 2026 01:01:19 +0000
Manifest this update: Mon 02 Mar 2026 01:01:19 +0000
Manifest next update: Tue 03 Mar 2026 01:01:19 +0000
Files and hashes: 1: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: 6nS257NgygJXJt/ogrW2i6pt8wTDK3ZYLWcpUvsaWAM=)
2: oEPb551Fmmv_qq3-IsGJL_8qeEM.roa (hash: /sI5Aytwm31HUeEzicSDNguNyqjq18X/fbcFmDkiODg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5e:b6:ec:cd:42:4b:00:73:14:7c:d3:a0:dc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Mar 2 01:01:19 2026 GMT
Not After : Mar 3 01:01:19 2026 GMT
Subject: CN=c28efebb90b142d1efd3020baf498dc4b70bf92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:a9:a2:02:dd:82:04:db:14:27:c1:03:31:
9a:9c:98:ab:03:0f:15:42:d3:d5:72:f9:98:3e:fa:
41:f9:42:43:2a:8a:f6:55:55:69:7e:88:d7:d9:7d:
87:c2:d0:99:18:f7:a0:2a:11:71:e5:79:93:b7:07:
05:6a:b9:eb:ae:6e:ba:91:80:fd:94:f6:81:9a:f1:
ad:44:05:8a:39:27:c0:e4:44:52:fc:de:ea:c7:7e:
aa:9b:b2:49:bc:0b:80:41:52:f9:dd:08:d5:6d:74:
0e:55:b0:ae:de:02:c8:66:40:06:6c:2b:b3:cc:5d:
26:03:d4:bc:fd:79:b6:bf:64:ce:c2:c4:88:a5:b8:
71:5f:6f:8e:bd:1b:dd:22:61:0e:cc:49:51:48:cf:
09:e8:9f:c9:6a:84:e2:f7:c1:12:22:0e:0d:73:ce:
70:f5:7c:7a:cb:c9:1f:15:cf:38:fe:eb:ec:7b:2e:
ea:01:42:75:3f:75:5b:55:bb:45:c3:24:80:76:74:
6a:e3:db:71:75:3e:62:30:3d:9c:83:40:6a:27:71:
19:88:77:77:df:b3:01:4f:0f:7b:81:af:c5:be:b6:
54:a3:44:9d:1b:7f:55:1c:91:e6:04:a4:82:7e:6a:
7b:4c:22:bd:01:7c:27:4e:69:61:91:e2:32:1f:13:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8E:FE:BB:90:B1:42:D1:EF:D3:02:0B:AF:49:8D:C4:B7:0B:F9:2D
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:2c:b7:0d:12:82:15:ee:68:ad:58:8a:7e:69:ce:97:b8:1a:
65:7a:da:18:40:72:a3:a8:7d:e5:f8:1d:44:59:88:c8:93:1b:
b7:1e:b0:f9:43:99:42:2f:77:65:77:19:9c:47:cf:b1:f4:a8:
cb:e5:d6:fa:30:cf:0f:30:49:34:27:7f:8d:77:8e:de:9e:9b:
51:b9:77:bd:0e:95:bd:df:f7:57:4a:21:1b:f6:7f:ea:bd:9e:
58:ae:4a:4c:23:5c:68:e1:a3:fc:b5:42:fe:b3:15:0c:12:7a:
d9:a9:00:2c:4a:92:34:72:11:42:02:e7:04:e8:4e:7c:ff:a3:
5b:47:bc:d9:25:b9:bb:ec:ba:72:f9:cb:06:fd:82:c6:8a:e5:
84:1f:aa:78:6d:bb:29:83:f9:2d:21:f4:66:3a:c1:d7:81:27:
68:1b:7e:95:ee:d0:41:68:fb:ef:db:98:2f:10:15:91:80:52:
ed:26:ca:9d:d3:53:b2:50:6e:79:65:e4:63:d2:81:ab:3b:02:
6f:ba:57:14:6a:4e:ac:76:da:1c:3e:19:6c:5e:ce:e9:e1:78:
19:4a:63:70:f3:22:43:1b:f2:71:75:1c:96:27:89:ca:e3:6e:
e5:94:eb:7e:ea:63:23:0b:22:76:01:33:39:87:b9:1b:7c:5c:
71:7a:05:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:11 2026 by rpki-client