Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
File: b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft (raw, json)
Hash identifier: ii2h7UxI9T70plaYe6h3oopUt1BVzydRAUo1PBeDo/Q=
Subject key identifier: 3F:A3:90:3C:BA:0E:F5:7D:18:73:10:7E:16:7D:67:CC:BD:14:9C:55
Authority key identifier: 6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
Certificate issuer: /CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Certificate serial: 019CACEBE28C2F5F8E176C9439B0CDF13C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
Manifest number: 0AD3
Signing time: Mon 02 Mar 2026 05:01:05 +0000
Manifest this update: Mon 02 Mar 2026 05:01:05 +0000
Manifest next update: Tue 03 Mar 2026 05:01:05 +0000
Files and hashes: 1: CUm_1v2R955WSHielB42rYU-hDE.roa (hash: 2kYqJQ+RQ4a//Mbqbn8twoPGw/YZ8dkOXd6k1MRYSqo=)
2: b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl (hash: RdsK8Gxij7wLgkpE4i2nyN3L04CFzCGSTJrK1gWwu04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e2:8c:2f:5f:8e:17:6c:94:39:b0:cd:f1:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fa37185a22944a607d9a94f9885997d851b1e
Validity
Not Before: Mar 2 05:01:05 2026 GMT
Not After : Mar 3 05:01:05 2026 GMT
Subject: CN=3fa3903cba0ef57d1873107e167d67ccbd149c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:55:76:a8:fd:ac:9c:1a:a6:8c:93:7e:03:
21:0b:e1:71:85:66:b7:13:bf:af:8b:de:8a:91:16:
31:79:9b:cf:cc:f1:dd:73:03:71:29:2b:19:e1:ae:
c1:94:1c:60:4d:24:30:d4:5b:1f:9b:e4:25:a6:e1:
0f:bc:78:73:5e:fa:b5:47:cc:f4:21:e5:6b:a9:bc:
7c:e7:40:f4:c8:6c:a8:99:6b:3f:3e:51:d1:48:d6:
da:14:ca:a8:91:96:7a:87:3b:d1:49:f3:e9:c2:a9:
b3:5c:3f:09:d0:fc:5a:e2:63:17:e8:cc:5d:ec:47:
af:6c:91:c8:be:08:22:44:52:4c:89:94:f8:16:ac:
0b:f3:ef:25:a7:6d:4a:29:b0:2f:59:03:27:c6:63:
e3:db:c7:9f:20:10:79:e4:1c:0f:5f:d7:df:e8:7c:
1d:eb:8d:5e:42:4a:df:55:00:f5:7a:ce:6e:93:38:
ec:88:c4:f6:91:53:da:cb:16:42:f8:9e:ef:4d:67:
d6:f8:d4:4e:77:58:90:27:2a:73:ec:fd:87:8b:f9:
41:dc:27:3c:6d:d2:bc:2f:75:f9:59:ed:73:46:0a:
e0:c6:1c:7e:a0:7d:1c:dd:39:3d:e7:82:bc:8d:7c:
82:f7:35:12:f1:2d:aa:9f:e7:68:9f:63:09:3a:1c:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:90:3C:BA:0E:F5:7D:18:73:10:7E:16:7D:67:CC:BD:14:9C:55
X509v3 Authority Key Identifier:
keyid:6F:7F:A3:71:85:A2:29:44:A6:07:D9:A9:4F:98:85:99:7D:85:1B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3-jcYWiKUSmB9mpT5iFmX2FGx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e909f8-70c4-465d-bc6c-a34a4c8b0c8a/1/b3-jcYWiKUSmB9mpT5iFmX2FGx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:81:6d:b3:a5:d7:89:a9:ad:2f:ea:6d:84:2f:0a:7e:46:0d:
fb:53:60:62:f6:ba:fe:c1:b7:35:86:f3:36:99:af:3e:93:26:
d8:c5:83:a2:fd:d0:2a:3d:b1:87:86:86:bb:82:07:80:ba:86:
e4:9c:90:04:d8:d4:85:c0:75:52:02:6b:db:c7:73:0c:65:d2:
90:ff:3e:35:94:83:9e:7d:d4:19:31:22:0f:d0:e1:e8:0d:6f:
32:b8:23:29:fc:7c:93:19:a1:6a:2e:5e:63:f3:08:7a:df:91:
e7:15:de:42:59:fb:ea:ad:2d:d1:22:3a:64:9c:ba:eb:89:e0:
fd:90:5a:4f:98:84:c1:45:af:b6:7f:0a:1d:02:66:8f:e8:0e:
41:f2:52:86:fa:17:9e:81:9c:1a:92:c6:05:fd:66:21:27:c0:
33:df:69:f8:33:f0:67:f3:ce:b5:cd:2f:19:cd:c6:91:70:5b:
dc:34:12:aa:19:44:20:74:5e:45:1c:13:aa:7d:d4:f4:14:86:
b4:dc:a1:ab:a8:d3:7b:bc:4f:ac:50:57:ef:88:b4:64:e0:de:
51:65:41:01:16:bf:35:b7:65:1b:95:1e:38:03:a1:f3:49:b4:
86:e2:b0:90:e8:10:c2:8a:32:48:8f:bf:d2:7a:28:3e:b6:1d:
1f:e3:73:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:36:34 2026 by rpki-client