Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: Koyf6wpb8rbPGYz9YFslyllmZvsqSethwVTGmDM5k/g=
Subject key identifier: B0:7A:D5:76:05:BB:26:52:EB:9B:5C:B3:36:C3:BE:7A:F3:A3:00:3D
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 019CAA58C30FC4185DA85E73667035F0A54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 0F06
Signing time: Sun 01 Mar 2026 17:01:09 +0000
Manifest this update: Sun 01 Mar 2026 17:01:09 +0000
Manifest next update: Mon 02 Mar 2026 17:01:09 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: aqS5SAvz6aZ0K2cLYswViweWTiNS/hr5zSDRD13lNIc=)
2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c3:0f:c4:18:5d:a8:5e:73:66:70:35:f0:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Mar 1 17:01:09 2026 GMT
Not After : Mar 2 17:01:09 2026 GMT
Subject: CN=b07ad57605bb2652eb9b5cb336c3be7af3a3003d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:db:3a:70:88:81:46:ae:fe:ee:d2:8c:90:
bd:e5:f6:ab:41:db:75:cb:1a:75:20:3e:83:1b:e5:
45:17:33:0a:8e:8b:68:4a:7f:d4:89:0f:ee:bb:22:
57:6f:28:09:f7:50:1e:27:86:b9:b4:08:59:0d:8b:
7c:0e:97:b9:72:fd:b4:5a:23:46:27:07:af:56:7d:
9a:83:f7:5b:d5:ab:66:48:68:d5:1d:66:45:05:80:
bd:55:b5:a5:fc:9f:c7:5c:a3:da:bc:9b:4b:de:9c:
69:6d:ec:f6:93:ce:7c:12:0c:d7:4f:3e:45:c1:07:
35:ba:71:ed:79:3b:de:66:2b:2f:7b:7e:91:fd:70:
bb:19:5d:e5:1d:d9:f1:1a:8c:cf:6a:95:c7:94:67:
61:03:cf:9a:dd:01:8a:4c:ad:e5:b3:24:86:98:e2:
7d:ad:dc:c7:ef:e9:41:75:ce:6c:3b:2a:59:e4:57:
e2:00:d9:0c:2d:4d:9c:ad:aa:84:04:ce:2b:f7:ee:
f7:b0:41:d6:f8:57:93:8d:5d:c4:a3:14:07:d9:0e:
00:c6:c0:98:6b:26:2e:12:41:07:94:3b:5d:44:5c:
ba:45:be:43:5d:64:fc:96:a5:35:c1:8a:5e:4b:96:
c6:cb:f7:e3:08:ce:d2:f0:04:37:f4:2b:16:39:90:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:D5:76:05:BB:26:52:EB:9B:5C:B3:36:C3:BE:7A:F3:A3:00:3D
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:df:61:6f:5a:ef:d4:7a:12:d2:60:15:af:93:cf:af:af:2f:
6a:94:d8:88:ad:9f:7e:87:b4:db:be:af:4f:7c:09:99:de:f5:
7c:6e:e0:d7:d0:c3:36:3d:84:cb:6b:2a:50:81:8f:cd:90:05:
13:e5:9c:19:fb:b1:fd:2a:9a:88:31:17:55:fd:25:bc:ce:25:
fd:de:3f:54:cf:b6:da:2c:11:82:67:00:99:c7:d4:8c:d2:d2:
8d:c5:36:f4:1f:a3:7a:d0:ad:89:bb:71:29:e1:73:36:2f:01:
08:93:06:4e:58:9c:43:23:1c:fb:de:13:08:8a:05:cd:19:ac:
18:de:8e:72:bb:b2:49:11:95:f6:02:8a:db:ac:f4:23:12:35:
69:dd:a6:df:cd:fa:d5:f2:ad:18:16:09:9f:f3:50:fe:dd:f1:
0d:74:12:cd:58:96:c9:bc:67:da:ca:93:7f:b8:6d:19:bf:a7:
aa:d2:35:0c:4d:d6:14:bf:70:a5:0a:ed:7b:e4:5b:ec:f7:88:
db:cb:8d:87:c9:e9:5a:69:4d:f7:61:93:7c:5c:6f:4c:1c:a6:
f6:b9:40:65:1c:50:2c:99:93:c7:6e:6f:57:cd:76:08:2a:58:
86:2c:f2:40:2c:32:94:f4:ee:12:43:73:6d:a1:18:df:13:58:
71:f5:11:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWMMPxBhdqF5zZnA18KVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NzQzMDA2YThlOWQwZTFiZjIwNTU3YWQ1OTY0MDc4ZmU4
MTI2ZWYwHhcNMjYwMzAxMTcwMTA5WhcNMjYwMzAyMTcwMTA5WjAzMTEwLwYDVQQD
EyhiMDdhZDU3NjA1YmIyNjUyZWI5YjVjYjMzNmMzYmU3YWYzYTMwMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt/bOnCIgUau/u7SjJC95farQdt1
yxp1ID6DG+VFFzMKjotoSn/UiQ/uuyJXbygJ91AeJ4a5tAhZDYt8Dpe5cv20WiNG
JwevVn2ag/db1atmSGjVHWZFBYC9VbWl/J/HXKPavJtL3pxpbez2k858EgzXTz5F
wQc1unHteTveZisve36R/XC7GV3lHdnxGozPapXHlGdhA8+a3QGKTK3lsySGmOJ9
rdzH7+lBdc5sOypZ5FfiANkMLU2craqEBM4r9+73sEHW+FeTjV3EoxQH2Q4AxsCY
ayYuEkEHlDtdRFy6Rb5DXWT8lqU1wYpeS5bGy/fjCM7S8AQ39CsWOZBrIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB61XYFuyZS65tcszbDvnrzowA9MB8GA1UdIwQY
MBaAFAd0MAao6dDhvyBVetWWQHj+gSbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUt
MjQ2NjQ2ZTlkYjFlLzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82NzljYWItMmNmNC00MGE1LWI1ZWUtMjQ2NjQ2ZTlkYjFl
LzEvQjNRd0JxanAwT0dfSUZWNjFaWkFlUDZCSnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmt9hb1rv
1HoS0mAVr5PPr68vapTYiK2ffoe0276vT3wJmd71fG7g19DDNj2Ey2sqUIGPzZAF
E+WcGfux/SqaiDEXVf0lvM4l/d4/VM+22iwRgmcAmcfUjNLSjcU29B+jetCtibtx
KeFzNi8BCJMGTlicQyMc+94TCIoFzRmsGN6OcruySRGV9gKK26z0IxI1ad2m3836
1fKtGBYJn/NQ/t3xDXQSzViWybxn2sqTf7htGb+nqtI1DE3WFL9wpQrte+Rb7PeI
28uNh8npWmlN92GTfFxvTBym9rlAZRxQLJmTx25vV812CCpYhizyQCwylPTuEkNz
baEY3xNYcfURkg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:19 2026 by rpki-client