Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: 2x6q6Qm+jVy0M8dnFQNIYpiorpOJa843djlPICUPbSc=
Subject key identifier: 46:8F:39:EC:EF:15:F7:74:DA:81:03:0E:6F:94:49:64:E5:91:41:6D
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 019CAB3469907F0AB42572CA6455776E02C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 157D
Signing time: Sun 01 Mar 2026 21:01:04 +0000
Manifest this update: Sun 01 Mar 2026 21:01:04 +0000
Manifest next update: Mon 02 Mar 2026 21:01:04 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: U0ro8cwDxX/VC0utXTmvnDf28xpo5EUMZHaTWjilHyY=)
2: npOXlCeWSvGjxC2zJdVAMWyUfEM.roa (hash: pw1QNEJHKJUrWY6D1qiACJ/w8G/+SsXvTvvhcDDyBgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:69:90:7f:0a:b4:25:72:ca:64:55:77:6e:02:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Mar 1 21:01:04 2026 GMT
Not After : Mar 2 21:01:04 2026 GMT
Subject: CN=468f39ecef15f774da81030e6f944964e591416d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c0:fa:03:c6:f3:69:ac:ab:0e:93:98:ba:2f:
d8:8e:8b:08:64:3d:df:70:a7:5f:c2:77:0a:27:f3:
d3:24:7f:7b:29:2e:30:41:af:ca:40:ed:0b:09:6c:
36:c2:09:30:d3:b0:22:81:7d:15:9a:f7:f1:c8:63:
b8:28:03:ce:d8:55:4f:af:8e:48:98:be:5c:19:4b:
07:aa:f2:67:ca:e0:7a:9e:d7:b0:86:7d:5c:5d:74:
d2:eb:0d:ff:88:46:db:33:6a:85:75:ff:e4:b6:e6:
32:88:32:2d:7f:ed:79:fe:f7:2d:3e:d1:d2:36:d1:
65:91:b6:92:43:97:25:3a:27:a6:04:bd:5c:b9:7c:
7f:86:b3:36:55:c7:81:2c:60:66:d4:b5:43:6d:14:
20:0f:6c:68:2c:7a:85:8b:e2:a9:06:bd:e7:be:4f:
0a:a4:cb:dd:5f:2c:e3:df:e9:60:f9:8d:e8:df:7a:
85:44:1c:3a:fb:6b:53:94:a3:0f:a9:e6:92:8b:74:
85:dc:c0:08:f6:71:c4:81:0a:11:fa:bd:4f:78:09:
68:67:12:c4:b9:f9:7c:7c:c7:64:af:df:96:53:91:
dc:ba:44:e5:04:55:f1:26:68:0d:40:90:5f:e7:49:
4d:45:a2:6a:76:87:69:51:29:f4:ea:38:87:c5:2b:
c0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:39:EC:EF:15:F7:74:DA:81:03:0E:6F:94:49:64:E5:91:41:6D
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c5:70:7e:42:2d:35:5c:88:62:e3:73:7e:e8:60:f5:2d:02:
c8:7b:87:d6:02:b1:63:09:35:e9:39:bc:ab:40:64:21:bd:91:
62:89:50:4e:f8:7c:ea:bd:63:30:f9:b8:74:99:68:b3:ea:f1:
f8:8f:7a:b4:86:9d:f1:e0:8d:b1:64:18:67:64:c1:f9:8b:12:
6c:3b:1a:f1:ae:60:a0:4c:9a:94:42:c8:4d:b8:2a:bf:62:5f:
fb:71:c7:5e:94:b4:23:82:da:11:3d:3b:20:14:00:2b:17:ab:
fd:81:56:3d:8e:b2:3d:6b:41:30:d3:26:70:b3:6e:44:9f:8a:
9d:3e:30:6b:06:77:2b:f7:91:7b:79:c8:f4:96:70:31:9a:dc:
b6:b1:a7:f5:f9:04:10:76:a6:8a:d4:c7:08:c7:d7:de:6f:60:
9d:34:2e:08:17:43:0d:38:80:0c:66:bf:b6:03:15:71:29:2e:
e6:bf:6d:7e:1f:d7:c8:ae:b2:25:01:de:9a:5b:05:84:78:36:
0a:4f:c0:3b:aa:b2:16:ca:d3:83:23:e8:85:b0:90:55:1e:2c:
c3:8e:d9:b9:f0:bc:7c:ca:cc:78:17:2f:c0:ca:97:df:d9:99:
ac:54:1f:ef:c7:41:e8:c4:2e:a5:22:23:6d:66:64:1f:96:11:
fe:a5:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:45 2026 by rpki-client