Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: BJ8FWSjMzsAbmROg8pXckXC40BIFsvWe70LnQIkPWNk=
Subject key identifier: FF:30:98:C4:11:9A:D7:43:EF:26:14:DF:A8:2E:8A:4C:3A:DD:72:53
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019CAA21FE9D2623B8CA75B695475FE4A4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0F6C
Signing time: Sun 01 Mar 2026 16:01:20 +0000
Manifest this update: Sun 01 Mar 2026 16:01:20 +0000
Manifest next update: Mon 02 Mar 2026 16:01:20 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: ma+mpiU/dV1fLsJPduKlZ/XexNUn3gQzsXdfYWKmeN8=)
2: fTfLjB5qDCOrEt1AZqetNR0UP1s.roa (hash: ewzik2ZHIXp5O/f5G7R3qSZhEso+zQPbJgvnDCm9k4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:fe:9d:26:23:b8:ca:75:b6:95:47:5f:e4:a4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Mar 1 16:01:20 2026 GMT
Not After : Mar 2 16:01:20 2026 GMT
Subject: CN=ff3098c4119ad743ef2614dfa82e8a4c3add7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:63:f6:8d:fa:56:02:92:db:5d:9a:17:85:
d2:51:f3:05:b0:e4:5b:bd:a1:b8:32:3d:0e:31:ea:
e8:07:7b:02:7c:d8:d9:46:5c:c9:5b:52:e4:2f:b0:
7d:6e:8a:e4:08:fe:90:24:04:33:f9:7e:47:b3:b8:
30:d4:a0:9f:0e:9a:ee:5a:f2:8e:57:cb:f7:98:67:
4e:be:ea:d4:eb:76:ce:db:fd:a2:85:02:44:d1:07:
c9:42:48:72:5d:ed:29:30:7d:8f:32:11:6e:15:bc:
f0:77:03:2b:32:83:ac:0b:eb:20:27:49:fd:12:65:
4d:fb:af:c6:99:b4:2c:ce:9f:40:fa:db:ba:96:15:
d0:61:0b:14:a6:a6:c6:ec:73:d6:92:72:69:2f:00:
44:15:f9:ca:94:0c:44:25:39:b1:6b:3f:ab:ba:f5:
b4:8b:69:5b:00:0e:eb:17:07:ae:53:5c:77:82:a9:
a3:fe:3b:4f:b8:af:1f:ce:e0:01:5b:85:e0:df:d3:
c3:f7:9d:94:65:2b:d9:82:20:0a:46:a8:d6:98:ef:
38:3a:54:78:a5:ad:9b:2b:6a:73:87:9f:af:de:ea:
32:0e:82:36:da:67:7a:a2:c9:9a:55:71:8f:9d:66:
52:c1:63:2f:30:c6:b3:bf:e9:79:04:27:8a:45:30:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:30:98:C4:11:9A:D7:43:EF:26:14:DF:A8:2E:8A:4C:3A:DD:72:53
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7a:64:f9:c8:5f:98:c4:ef:1e:6a:22:de:ad:f9:64:b6:15:
c3:7a:82:4c:61:16:48:d7:da:03:30:6c:8d:5d:de:81:3a:08:
b2:2b:91:fa:1e:cc:60:2e:45:03:c2:4d:b9:15:cf:02:f2:1f:
6a:64:89:1d:e4:f6:54:f1:71:40:fc:ef:25:fa:33:b8:62:a7:
d4:41:99:45:8f:ee:0c:c9:84:04:bb:f6:8a:4f:60:51:d6:4f:
f5:c8:5d:16:59:23:35:0d:b6:51:a8:01:00:33:d9:38:95:ba:
9f:39:b3:cb:9e:a9:28:d2:02:b2:77:cd:a1:b1:bf:32:22:3d:
c2:11:33:3e:23:52:35:b8:ad:98:c1:cd:9b:62:f0:64:a4:6e:
1c:9e:37:2a:35:81:ad:a4:9f:d9:f9:ab:38:78:9b:2e:b4:49:
a0:36:49:48:04:ea:05:21:c8:8d:38:18:a0:8a:e8:bc:eb:3b:
fd:82:97:eb:20:1e:ef:86:2f:b0:f1:0e:0c:9f:2e:cc:06:ad:
85:b5:c3:5d:df:fb:bf:4b:02:d0:ff:bd:85:5c:51:12:37:19:
f6:6d:ba:a3:75:fd:35:bd:4f:2f:76:53:99:b4:55:35:8a:25:
c0:bb:99:83:21:02:24:05:27:3d:1e:e6:52:91:b0:2f:60:37:
91:d9:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:20 2026 by rpki-client