Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: KnnBOCWeBsbBAELIoFq3nsYPUUvjEylBJTt1AK4Yybk=
Subject key identifier: 25:D0:52:69:8C:D9:70:1E:18:C7:0E:A6:F3:0C:F5:7F:8C:FC:6F:AB
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 019D98BD15A218733E59F285CC3C261E363D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 15F8
Signing time: Fri 17 Apr 2026 00:00:21 +0000
Manifest this update: Fri 17 Apr 2026 00:00:21 +0000
Manifest next update: Sat 18 Apr 2026 00:00:21 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: Utwx0VI7KAkMGVFawXIC/ImuB82m96p8PWBOzlwouEw=)
2: npOXlCeWSvGjxC2zJdVAMWyUfEM.roa (hash: pw1QNEJHKJUrWY6D1qiACJ/w8G/+SsXvTvvhcDDyBgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:15:a2:18:73:3e:59:f2:85:cc:3c:26:1e:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Apr 17 00:00:21 2026 GMT
Not After : Apr 18 00:00:21 2026 GMT
Subject: CN=25d052698cd9701e18c70ea6f30cf57f8cfc6fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:9d:6c:fb:44:b9:3e:ff:71:fa:bb:b8:09:
f6:7f:81:e9:b5:31:75:5b:e8:9a:77:79:01:fe:ba:
b1:3d:4b:b1:e7:ce:8a:58:c4:43:82:a1:03:51:98:
13:0a:bd:fc:76:7d:d4:b5:a7:d4:9c:c7:86:be:55:
08:cc:bb:e5:58:14:7a:6d:45:ae:23:e8:0c:d5:d9:
70:28:d6:83:1d:a8:7f:65:be:46:11:9b:49:f6:9d:
d7:5f:9f:8e:8f:1f:7c:83:b7:75:67:90:7b:33:18:
99:14:8c:ed:b8:82:bf:88:db:36:d0:f1:e0:7a:45:
5b:d9:27:26:db:d3:57:96:b7:b6:e0:de:eb:24:ce:
ed:7b:bb:76:ec:23:ce:35:59:bd:c6:26:05:cb:13:
33:4f:ec:f7:65:0d:17:58:19:73:12:81:73:44:fc:
e8:7a:be:a9:db:73:42:d3:4c:e7:84:51:7a:19:39:
74:43:e9:a9:f5:2f:24:42:17:f5:4b:b4:f7:a8:11:
19:68:c1:f4:44:29:49:8b:7a:5c:0e:2a:98:b9:f8:
75:eb:87:ca:e1:1e:77:15:12:5d:17:17:b5:c3:73:
be:d0:09:f5:8b:30:da:54:00:0b:7f:24:61:ce:87:
c5:c0:65:53:3b:9d:79:0b:20:ad:cb:f8:cb:57:dc:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D0:52:69:8C:D9:70:1E:18:C7:0E:A6:F3:0C:F5:7F:8C:FC:6F:AB
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6f:9f:29:89:2f:a3:6e:23:2a:e0:cd:c3:a5:19:e6:62:75:
64:93:fe:05:72:07:88:19:24:99:7b:28:d1:dc:ac:ca:6b:0e:
b3:04:c4:a6:b6:f9:53:78:52:31:ec:96:3f:f8:fc:85:55:e6:
36:70:09:48:09:90:74:1c:1b:ac:1d:44:56:e7:70:ec:50:41:
ae:51:c1:e0:3b:fc:4b:e8:a0:7e:f4:50:0d:67:04:ea:7f:6c:
02:c9:fc:1f:0c:0c:a8:1f:ca:94:9c:be:20:8d:ca:a4:28:ff:
65:e8:29:b5:7b:f8:52:29:a1:e0:f3:e7:a4:13:4d:5d:3a:46:
6c:1a:bd:67:ca:0d:f1:68:fb:e9:9a:7d:18:a8:6e:3f:5f:8c:
fe:d9:4c:38:ea:5c:b4:26:bf:3f:d2:e2:84:dd:1e:30:fc:ba:
51:57:d3:fd:93:17:ab:d3:26:6c:3f:d9:f1:06:04:70:57:0f:
51:eb:15:cb:6c:8b:13:ec:81:69:44:41:41:54:9b:a7:59:67:
85:93:ce:70:1f:c9:1e:88:0b:ee:b0:51:59:01:9d:2a:0d:bc:
86:b3:c2:0e:f5:79:d1:95:39:1d:0e:12:ce:a3:73:2b:b8:19:
9a:0d:8e:13:15:ce:5d:c6:98:a0:e4:1e:95:c0:05:71:bb:ac:
5e:df:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:51 2026 by rpki-client