Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: gAHvz7NNXoxRsjhfKcL22Z7HFDyZ4A5o54lkyciaqjw=
Subject key identifier: E1:73:7E:B7:69:2F:3C:2A:DE:56:89:29:48:B3:72:9B:C0:64:B3:8A
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019D27A90D09ADFAB19C02813F04F7100BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0FAD
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: aVDcPZah7hJnciSLXZ2sdUn4GFML4G7/nZY2LhotSQY=)
2: fTfLjB5qDCOrEt1AZqetNR0UP1s.roa (hash: ewzik2ZHIXp5O/f5G7R3qSZhEso+zQPbJgvnDCm9k4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0d:09:ad:fa:b1:9c:02:81:3f:04:f7:10:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=e1737eb7692f3c2ade56892948b3729bc064b38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:0b:5d:34:5f:d8:88:e9:1f:6a:ba:49:23:
01:1e:61:2c:1e:2b:00:77:c3:f5:6b:b0:fb:ab:5b:
2c:5c:f5:e5:45:f3:58:66:69:bb:47:08:33:88:19:
5f:55:ae:dc:8e:b7:5b:09:27:cc:1f:fa:ff:f1:6b:
f8:3f:56:8a:d9:4d:7b:7e:ab:4c:69:fd:2f:fa:55:
d4:8f:10:b9:91:89:b1:39:81:64:44:0f:ff:4d:93:
df:84:2d:5d:87:85:33:b2:7c:c7:2c:6b:a4:67:10:
f0:65:46:be:3a:40:6d:fb:40:04:cc:f1:98:80:34:
5e:f4:dd:64:b3:3b:a3:87:af:5e:45:2c:47:9c:4d:
eb:3d:94:4f:48:4d:9f:a1:44:3d:d4:7c:9e:6b:12:
ae:90:2e:d5:14:6f:6c:fc:9e:ad:93:30:ae:52:5b:
14:f2:0d:ef:84:f1:9c:0b:1f:e9:a4:6c:bc:d7:82:
e8:fe:f7:a2:8d:be:81:a2:f5:40:19:d0:c2:9a:72:
33:7d:ea:8c:64:6d:93:54:4d:e3:92:b6:d5:2a:d3:
06:0b:f6:96:48:ea:18:bf:84:10:1d:eb:b0:12:9c:
6f:4a:9b:98:29:c3:84:3d:90:a9:76:bb:ba:10:a0:
89:16:86:9a:e3:ba:ff:5c:8c:5d:24:9f:0c:e3:74:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:7E:B7:69:2F:3C:2A:DE:56:89:29:48:B3:72:9B:C0:64:B3:8A
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d8:de:37:54:d9:01:14:78:54:16:06:ee:48:c2:85:28:98:
d4:3a:22:c7:53:ff:c8:3a:05:26:11:8f:eb:81:1e:cc:48:75:
29:a2:b6:c9:00:bd:aa:9e:77:be:7e:59:76:15:59:9a:d2:b5:
d9:03:47:e4:7e:97:87:b4:85:78:ed:fc:67:85:cc:d8:5a:b0:
9e:bd:72:38:4c:6c:69:cb:37:8e:ad:03:f2:2a:56:6b:76:d9:
d5:58:95:1d:5c:05:16:74:1c:8b:b3:ba:e0:d3:11:ec:ce:21:
3d:fa:21:23:54:f5:f2:e7:70:e0:3a:a5:ad:35:37:5b:95:b9:
bc:c4:4f:27:59:43:11:4a:64:1d:6d:d9:cb:d5:a1:f0:56:83:
78:a2:e5:5e:03:61:fb:6b:8f:80:31:88:ea:af:a1:0c:b2:a7:
36:df:79:ef:9b:9d:1a:b1:8d:d9:86:28:43:8f:8f:a7:0f:c9:
6c:58:de:ae:b8:b5:87:64:00:d8:0e:36:e1:fd:7e:45:13:b4:
38:16:d7:8c:9f:c5:8c:f3:28:4e:15:e4:b2:9d:65:00:13:43:
91:5d:3c:26:bf:0a:35:ac:05:56:c9:55:05:75:3a:74:26:4d:
ea:24:51:54:17:fd:cb:68:2d:ee:1f:b1:7d:27:0c:68:ae:c1:
f0:fc:22:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:22 2026 by rpki-client