Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: 5l/d0EnjV7vRpJpBhPwp87xXuY4aMG0PW0TM2+koMTs=
Subject key identifier: 4C:A5:12:B0:45:B5:DF:15:24:51:8E:7B:87:AD:B9:69:BC:E9:A0:CA
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019D999925B1E6A97FD1D8D9E09C4D2783EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0FE8
Signing time: Fri 17 Apr 2026 04:00:43 +0000
Manifest this update: Fri 17 Apr 2026 04:00:43 +0000
Manifest next update: Sat 18 Apr 2026 04:00:43 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: MAaSATGrCm86EDTnxChB9No5Om8LeNNdxytLuLME29U=)
2: fTfLjB5qDCOrEt1AZqetNR0UP1s.roa (hash: ewzik2ZHIXp5O/f5G7R3qSZhEso+zQPbJgvnDCm9k4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:25:b1:e6:a9:7f:d1:d8:d9:e0:9c:4d:27:83:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Apr 17 04:00:43 2026 GMT
Not After : Apr 18 04:00:43 2026 GMT
Subject: CN=4ca512b045b5df1524518e7b87adb969bce9a0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:08:67:a4:53:d3:60:3f:53:74:92:22:bb:
bd:46:95:06:91:04:80:ca:3d:12:c0:5a:66:d0:b4:
b6:f5:ea:a8:07:29:e2:4e:d3:98:3c:f7:1e:15:4e:
b3:de:f6:75:fa:9b:35:61:79:c9:91:94:95:0e:aa:
22:54:01:bf:d0:38:29:89:42:90:2c:dd:9f:32:21:
c3:4b:aa:a5:66:a5:a6:94:d5:98:d4:fb:f9:53:93:
9a:3c:f3:1d:3e:2f:a6:45:9d:be:3b:11:79:a2:c6:
be:d5:6d:90:f6:6f:b9:65:8b:30:57:24:4e:24:fc:
1d:86:2a:7b:22:f6:6b:bb:24:b5:a5:b4:83:f2:88:
be:82:c6:09:17:70:58:60:2a:99:12:ee:2b:76:5b:
78:c4:76:29:a4:64:7f:04:55:fb:53:93:70:d9:03:
17:42:4a:ac:61:c1:07:43:9b:3e:03:e8:0e:63:d7:
f4:ed:b5:a3:ba:e2:6e:5e:15:0e:dd:79:6f:34:60:
b2:f6:4a:d2:97:6e:cb:4f:1d:38:83:df:a0:4d:cb:
51:f3:1d:17:fc:e5:5a:87:67:67:cf:5c:6b:53:bf:
f5:04:b5:3f:71:d8:2b:71:13:89:92:f7:aa:27:88:
3b:ae:77:d8:88:be:a5:68:25:c3:48:fb:a1:44:7f:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:12:B0:45:B5:DF:15:24:51:8E:7B:87:AD:B9:69:BC:E9:A0:CA
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:57:e8:eb:94:91:5f:5c:6b:14:fe:55:3c:84:61:95:f0:8b:
a7:9b:81:e1:18:ef:f0:64:0c:85:37:e5:63:b0:ae:bb:f5:bc:
f3:e9:a3:be:1c:8e:68:6e:6a:44:eb:5b:5b:2f:89:de:15:67:
fb:a8:5b:1f:51:fa:dc:01:58:86:9a:40:b9:c3:19:f8:db:15:
e9:75:0b:46:75:b2:33:ad:4a:97:fb:61:d0:2b:ad:94:24:af:
3d:e6:c6:5e:21:2e:01:dd:90:aa:fb:b0:51:87:3b:9a:1c:52:
4d:ab:ee:bf:f4:54:70:73:43:17:81:1c:c0:55:d7:95:8b:8f:
aa:9b:cb:c4:8f:63:bb:b2:40:14:67:ea:14:bc:0b:1c:e4:2e:
5f:9e:5c:4b:99:a9:0d:d0:19:67:ba:24:ca:0d:88:33:c5:d9:
65:de:1d:0e:4a:47:8e:fd:cb:cb:c4:9b:07:d4:a5:9b:e0:a4:
f9:d9:b0:04:32:7c:73:70:49:58:50:d9:01:1d:f3:5b:e0:dd:
f7:a5:10:31:9d:55:96:3d:6f:ef:0e:08:bc:54:06:96:6e:28:
92:2b:93:bd:01:bb:13:50:b4:48:04:dd:32:06:2e:bc:f9:53:
37:e4:5b:bc:57:17:21:88:bb:77:ba:a5:f7:0a:e9:a1:99:c7:
8d:02:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:28 2026 by rpki-client