Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: kIdSOKpufeGj2pLmAc+Adpy8nzvw+ewlfKhin2iaoWU=
Subject key identifier: 9D:BB:7E:C4:C7:AA:70:36:D7:1A:13:56:83:EA:17:C2:B7:1A:FC:9F
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 019D27A8945F55F7DFE28AB6080C07CCBBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: H5fNubouwwh2QmmezxV+y/vkSElTnvfhU59WVzTES9g=)
2: oEPb551Fmmv_qq3-IsGJL_8qeEM.roa (hash: /sI5Aytwm31HUeEzicSDNguNyqjq18X/fbcFmDkiODg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:94:5f:55:f7:df:e2:8a:b6:08:0c:07:cc:bb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=9dbb7ec4c7aa7036d71a135683ea17c2b71afc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:d1:68:5e:f0:10:74:9e:23:71:23:3d:d0:
90:f9:60:27:09:4d:6d:a6:8d:0f:1e:13:f8:ee:54:
89:9a:8f:dc:03:c4:bc:de:40:90:25:77:64:a7:80:
fc:c4:1d:2c:98:8f:f6:2a:5c:ed:5e:d0:1f:1d:58:
24:0c:2f:b9:d0:01:e1:dd:dd:13:9c:07:d6:79:11:
d2:d8:d1:a9:45:24:39:6b:bc:44:e0:91:07:f1:00:
97:fb:8b:71:8b:c4:d7:41:71:24:bf:69:d4:88:35:
4c:6e:8a:43:41:0a:c0:31:09:d9:04:23:27:55:5c:
a8:05:f5:15:ab:5e:61:13:b5:a5:97:02:38:6e:58:
c2:0e:10:44:b5:26:ea:d9:35:bb:45:fd:c4:58:af:
95:5c:24:ff:e5:2c:05:5e:e4:d3:44:47:47:65:29:
57:17:40:a4:72:41:3d:3c:8f:19:7e:f9:b7:3d:b1:
eb:76:83:10:f5:15:67:7c:73:e8:94:7b:95:4c:94:
45:be:d9:0c:a1:59:48:81:75:0c:e3:b3:18:c8:c9:
63:38:20:86:78:c8:e3:5b:e9:59:58:64:16:55:af:
1e:b7:9e:de:67:c2:8e:17:92:4c:7e:05:0f:4e:30:
d5:10:24:ce:5d:c4:9c:f0:0f:b0:48:16:33:8b:0e:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:7E:C4:C7:AA:70:36:D7:1A:13:56:83:EA:17:C2:B7:1A:FC:9F
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:25:6c:b8:1e:ee:d5:01:ae:89:b5:79:e4:16:57:c4:0b:70:
62:38:5a:07:0b:59:91:96:fa:51:5e:b7:6c:58:d3:f0:6a:00:
77:ef:13:6c:81:01:fb:a2:07:e0:66:12:30:bb:6e:8d:20:c5:
77:02:a8:48:e8:b7:02:15:79:0b:8d:8e:f8:e4:cb:ff:a0:60:
dd:04:b4:36:11:d4:61:24:2e:ab:eb:f7:ed:fd:7c:47:b9:77:
4f:77:bb:6a:ea:19:fa:44:da:fb:1a:b3:cb:1b:d1:d2:79:c1:
cd:38:6d:17:d8:be:fa:4f:c7:93:cd:d5:41:64:5e:22:6f:90:
ef:a9:6d:f9:29:6b:9d:3a:33:11:d8:71:28:83:a2:e0:40:e3:
af:41:8f:d1:7a:ae:b5:b4:46:17:d4:15:d3:dd:5f:5d:35:65:
4d:70:8c:c4:4a:14:8a:fe:7c:58:4d:ed:6f:2f:ff:f3:75:9d:
6d:d6:37:73:77:8a:b0:c6:c9:89:86:ab:d6:c1:24:6b:60:0f:
d9:e7:1f:bd:2d:2a:05:4d:80:fc:70:ad:1b:ba:57:ee:d1:7b:
3d:ef:8c:f2:46:71:86:73:ff:71:45:3b:34:14:a5:71:64:96:
66:f1:52:61:04:d3:16:4d:b3:fe:24:16:42:cb:f7:4a:db:8d:
6d:0d:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:24 2026 by rpki-client