Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: E44DAS9oMKH9lCrOqbMQ5DhgPZMHykLpTRd2hI5SUd8=
Subject key identifier: 09:CD:46:A2:14:29:B3:AA:B0:2E:4F:8F:28:FC:52:8D:91:04:44:7B
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 01A1DCB927BF72313569AC2FDBCB114E51B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1A89
Signing time: Sun 15 Nov 2026 01:01:24 +0000
Manifest this update: Sun 15 Nov 2026 01:01:24 +0000
Manifest next update: Mon 16 Nov 2026 01:01:24 +0000
Files and hashes: 1: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: JjfpbicZa/0VM5LH4tXXQgNt6+PjG2L3kHutuFgN6IA=)
2: oEPb551Fmmv_qq3-IsGJL_8qeEM.roa (hash: /sI5Aytwm31HUeEzicSDNguNyqjq18X/fbcFmDkiODg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:27:bf:72:31:35:69:ac:2f:db:cb:11:4e:51:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Nov 15 01:01:24 2026 GMT
Not After : Nov 16 01:01:24 2026 GMT
Subject: CN=09cd46a21429b3aab02e4f8f28fc528d9104447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:22:f3:86:7e:3b:b6:4b:cd:89:48:4e:c0:
ac:35:f3:eb:a0:db:fb:6f:11:3f:57:bb:65:c8:d1:
e5:87:b7:e8:4b:c1:b0:92:25:11:e9:b1:d2:c0:48:
c1:eb:7c:14:5f:8f:bf:fa:c0:d2:9c:2c:61:5d:06:
e5:6e:56:ae:36:7c:90:58:a5:5e:8e:16:09:69:71:
5e:f0:84:57:c1:08:51:7e:54:9b:60:b9:b7:10:dd:
ec:69:d4:88:ce:f0:5d:fb:46:5a:bf:eb:14:48:32:
14:79:6e:60:86:41:f0:df:d4:96:c1:bd:88:61:2f:
e7:66:69:f6:73:1b:ff:df:01:26:24:33:ea:0d:16:
d0:ee:39:af:ef:e4:0b:28:e3:42:70:3b:e8:39:3c:
85:9e:a1:29:f9:7e:45:50:33:3e:aa:3a:15:6e:fd:
a1:85:1b:91:4c:30:e1:86:a1:fc:b7:3f:97:16:e7:
e5:13:ff:23:09:f8:43:07:c2:47:37:25:53:78:41:
70:4b:11:16:36:49:d5:4b:e4:39:10:4e:56:df:2f:
7d:75:9e:1d:17:1a:35:ce:32:00:13:b9:1c:02:2c:
f4:f8:62:54:e8:d3:bc:04:e0:13:a5:da:64:45:94:
32:d4:fb:e9:df:7c:70:4f:53:27:7d:16:72:ca:3f:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CD:46:A2:14:29:B3:AA:B0:2E:4F:8F:28:FC:52:8D:91:04:44:7B
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5b:97:dc:ab:6a:38:b4:d0:e1:fe:77:8f:f9:7d:13:ce:34:
ce:9c:7c:d4:93:7d:fb:0e:09:62:9e:88:4a:72:c7:6e:a6:08:
81:2a:30:cc:3a:6f:95:9b:19:ef:bd:45:80:dc:29:3e:3e:d7:
bb:fa:0d:ed:65:4d:a6:66:cb:04:92:b4:45:d3:4e:f1:17:c7:
d3:69:26:52:12:e1:f4:d2:d9:41:fd:2b:c9:38:79:30:41:96:
e6:ab:05:cc:d9:1e:61:4d:89:99:1b:28:5e:69:f8:68:f9:cf:
0c:04:35:ac:54:dc:fa:91:c2:ff:ba:6a:7a:de:d5:3b:78:01:
6a:e6:69:fd:1a:38:18:ca:54:7e:c3:5d:1c:46:9f:f8:00:00:
df:80:90:9a:da:46:8b:8c:65:98:28:eb:b7:ae:39:bc:76:f0:
5b:b6:75:cc:1f:ea:a9:3d:4c:9f:e3:e6:e1:14:a4:57:86:4f:
e6:85:b4:c3:4b:47:34:99:c8:bc:fb:ae:36:e1:8a:71:6e:18:
b3:85:0c:42:e9:e6:02:01:89:72:2c:1a:32:d4:95:95:1e:01:
89:81:b5:65:d9:43:7f:d2:f7:e0:db:8d:8e:0d:9f:0f:c8:83:
c7:ff:2b:7b:dd:d0:fc:55:b2:d6:96:dc:5a:a2:40:6f:8b:c0:
da:3a:b5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuSe/cjE1aawv28sRTlG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2ZjZWE0ZjdmY2Q3YmQ4MWRkNTk4MTUzZGQ2ZWU1YjEy
ZTQ3ZGYwHhcNMjYxMTE1MDEwMTI0WhcNMjYxMTE2MDEwMTI0WjAzMTEwLwYDVQQD
EygwOWNkNDZhMjE0MjliM2FhYjAyZTRmOGYyOGZjNTI4ZDkxMDQ0NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZUi84Z+O7ZLzYlITsCsNfProNv7
bxE/V7tlyNHlh7foS8GwkiUR6bHSwEjB63wUX4+/+sDSnCxhXQblblauNnyQWKVe
jhYJaXFe8IRXwQhRflSbYLm3EN3sadSIzvBd+0Zav+sUSDIUeW5ghkHw39SWwb2I
YS/nZmn2cxv/3wEmJDPqDRbQ7jmv7+QLKONCcDvoOTyFnqEp+X5FUDM+qjoVbv2h
hRuRTDDhhqH8tz+XFuflE/8jCfhDB8JHNyVTeEFwSxEWNknVS+Q5EE5W3y99dZ4d
Fxo1zjIAE7kcAiz0+GJU6NO8BOATpdpkRZQy1Pvp33xwT1MnfRZyyj+DXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnNRqIUKbOqsC5Pjyj8Uo2RBER7MB8GA1UdIwQY
MBaAFG9/zqT3/Ne9gd1ZgVPdbuWxLkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTct
ZWY1MThiNGI0NjNmLzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82YzM5NDgtY2EyYS00MGQxLThlMTctZWY1MThiNGI0NjNm
LzEvYjNfT3BQZjgxNzJCM1ZtQlU5MXU1YkV1Ujk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1uX3Ktq
OLTQ4f53j/l9E840zpx81JN9+w4JYp6ISnLHbqYIgSowzDpvlZsZ771FgNwpPj7X
u/oN7WVNpmbLBJK0RdNO8RfH02kmUhLh9NLZQf0ryTh5MEGW5qsFzNkeYU2JmRso
Xmn4aPnPDAQ1rFTc+pHC/7pqet7VO3gBauZp/Ro4GMpUfsNdHEaf+AAA34CQmtpG
i4xlmCjrt645vHbwW7Z1zB/qqT1Mn+Pm4RSkV4ZP5oW0w0tHNJnIvPuuNuGKcW4Y
s4UMQunmAgGJciwaMtSVlR4BiYG1ZdlDf9L34NuNjg2fD8iDx/8re93Q/FWy1pbc
WqJAb4vA2jq1rQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:59 2026 by rpki-client