Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: y/LYoEx5VxBWb7RFjmjsY48PIuQPwt6Xxd2fMkVXW2A=
Subject key identifier: 81:70:00:0A:7B:ED:56:B6:9B:32:AA:5D:D1:F5:FA:CE:5F:C3:A4:76
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 019D99991D40593D2AE0D15196EFE01DC9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 04:00:41 +0000
Manifest this update: Fri 17 Apr 2026 04:00:41 +0000
Manifest next update: Sat 18 Apr 2026 04:00:41 +0000
Files and hashes: 1: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: 991N4jwP4OY7YTrdyEpbeF6cuCPH1ZDllb2SjqqQd/A=)
2: oEPb551Fmmv_qq3-IsGJL_8qeEM.roa (hash: /sI5Aytwm31HUeEzicSDNguNyqjq18X/fbcFmDkiODg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:1d:40:59:3d:2a:e0:d1:51:96:ef:e0:1d:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Apr 17 04:00:41 2026 GMT
Not After : Apr 18 04:00:41 2026 GMT
Subject: CN=8170000a7bed56b69b32aa5dd1f5face5fc3a476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3e:77:9e:f5:bc:87:22:8c:87:7b:7e:f9:6b:
f8:31:d2:9f:de:b9:d6:e2:51:8a:5a:12:fd:ea:b1:
2d:16:41:be:f3:50:ce:d2:bd:9f:91:f5:c7:ac:92:
d0:b9:5b:2b:d8:3c:ea:ef:df:d0:8d:ec:8a:3a:dd:
6f:70:b2:17:5f:e6:d6:d9:a7:de:e4:6c:41:10:90:
50:80:b5:a5:9a:b1:2d:08:cc:7d:18:0a:dd:3a:52:
0d:ca:c1:81:da:8f:be:fa:f4:c1:06:0c:63:82:09:
9f:0f:5e:94:a5:97:19:0e:55:55:7c:1d:4c:90:e5:
cd:e8:63:73:45:85:29:2f:af:2a:d6:f4:55:ef:1a:
68:47:5f:72:07:4e:71:5e:a3:56:97:ab:52:91:cc:
88:41:0b:7b:bf:1a:23:d7:7e:67:fc:a6:ef:cd:7f:
02:b4:b9:5d:e8:e7:6b:27:61:a1:b7:0d:06:41:36:
63:2e:6e:a7:d2:3b:64:ae:ce:01:a6:0c:49:0f:20:
76:67:c0:2b:df:be:1a:73:05:89:b0:76:d8:cf:fe:
b0:a7:ad:f4:96:a3:8d:98:c9:a2:72:71:62:79:2f:
1f:c1:72:03:64:51:bd:0b:be:0d:81:bb:8f:60:69:
ca:fb:68:b4:ce:93:8f:0d:c4:b3:a9:8f:79:2e:72:
a0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:70:00:0A:7B:ED:56:B6:9B:32:AA:5D:D1:F5:FA:CE:5F:C3:A4:76
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:4b:52:1c:f1:0f:a7:20:f8:61:74:3d:21:89:b6:0d:37:34:
dd:3b:92:e0:bf:c3:f8:4e:63:f5:02:97:7c:4d:8b:3f:96:e7:
13:f2:3c:4a:30:9b:38:6e:0b:71:3f:ed:8c:e5:9f:e5:2c:07:
12:42:13:eb:a5:83:ba:f6:d6:89:aa:53:47:2c:85:4b:45:98:
1f:f6:3b:87:de:3d:29:31:a3:8f:3a:76:57:13:df:ef:0b:1d:
a0:9c:2c:4d:9b:a1:ae:92:f0:96:2b:29:f8:80:cf:b3:e4:e9:
a8:19:5b:81:5e:07:b9:8c:6a:b5:cc:5e:bb:af:01:9f:f9:a4:
93:dd:5b:f3:ee:a1:3f:57:17:4f:6b:a7:70:a9:ef:a7:ab:38:
7f:de:b9:bf:37:60:3a:4b:98:72:69:8e:73:ba:9f:4b:60:6e:
1e:e0:2d:ed:41:11:e1:10:02:74:cd:26:20:8d:6f:7f:f3:72:
a1:b6:f2:ed:93:43:33:00:bd:ed:9a:6e:8b:bb:1d:d6:3c:d2:
3b:24:ed:6e:35:eb:45:85:33:12:8a:7d:24:43:f0:e0:17:6a:
33:ad:c0:71:8a:e9:96:86:70:d6:85:a2:b1:dd:ff:14:d2:7a:
ec:f6:11:69:e9:14:f0:c4:9c:72:a2:ed:8e:99:e3:2a:e2:57:
2b:d5:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:31 2026 by rpki-client