Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.mft
File: b3yRVzx9FFcmFdIT5MGZikDc25I.mft (raw, json)
Hash identifier: +QUUuhN0zNbY2QE9NgwzjvnXQasUrQZIEO7Nlhft4so=
Subject key identifier: F9:CF:D8:CA:BE:8E:70:94:2C:E5:21:72:EA:5B:BA:51:61:92:66:9F
Authority key identifier: 6F:7C:91:57:3C:7D:14:57:26:15:D2:13:E4:C1:99:8A:40:DC:DB:92
Certificate issuer: /CN=6f7c91573c7d14572615d213e4c1998a40dcdb92
Certificate serial: 019D345123B8D5349403007579CDBBB23DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3yRVzx9FFcmFdIT5MGZikDc25I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.mft
Manifest number: 1D
Signing time: Sat 28 Mar 2026 12:00:25 +0000
Manifest this update: Sat 28 Mar 2026 12:00:25 +0000
Manifest next update: Sun 29 Mar 2026 12:00:25 +0000
Files and hashes: 1: 5xWOoE53hYlem2QN57cUXSMhnsc.roa (hash: kBC10N6N6UJwL2L4Yxd5v0Rih8FD+3KHXLpOPpfAyu0=)
2: b3yRVzx9FFcmFdIT5MGZikDc25I.crl (hash: ogZZ7+YPR+z3XeOyyNxuX7fzJCbkKHja0i2Vq/4B+3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3yRVzx9FFcmFdIT5MGZikDc25I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:51:23:b8:d5:34:94:03:00:75:79:cd:bb:b2:3d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7c91573c7d14572615d213e4c1998a40dcdb92
Validity
Not Before: Mar 28 12:00:25 2026 GMT
Not After : Mar 29 12:00:25 2026 GMT
Subject: CN=f9cfd8cabe8e70942ce52172ea5bba516192669f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:64:9a:69:d2:f2:db:a9:19:40:ee:2d:df:
a9:50:89:bb:0f:8b:46:2f:82:fd:cb:ca:50:ca:bd:
6e:ac:c3:eb:18:c8:29:67:80:3b:88:c2:18:16:06:
e7:26:7e:55:91:2c:85:3d:e2:81:37:22:aa:0e:fd:
af:fa:ba:b5:31:19:07:a2:63:50:d3:df:bd:62:bd:
62:00:45:bd:95:3d:1f:db:09:27:6f:dd:64:01:e0:
f5:04:bb:7e:f5:bd:1e:8d:b2:64:06:af:7c:18:2e:
be:70:35:20:16:85:2a:e4:79:67:b0:99:fd:58:68:
f9:77:34:37:3d:1d:30:4a:62:11:84:67:66:1b:bd:
e0:fd:f9:76:a5:20:fa:25:f4:83:a3:da:ac:9a:dd:
44:cf:de:a9:cb:30:bd:40:0c:73:c9:6a:30:4c:8a:
4b:42:26:b9:54:bc:69:93:a9:5d:ac:96:c4:a4:d5:
c2:fc:39:a3:df:02:41:95:db:05:8b:58:2d:05:27:
7b:09:04:bb:f8:65:ed:5f:21:7c:3d:ba:eb:db:eb:
88:9f:3e:ec:c9:d8:08:e9:7c:27:aa:66:70:3b:2f:
36:a7:2d:6e:74:bf:0f:c0:b6:28:b5:3f:1e:44:00:
18:c5:6b:fe:a2:79:80:b9:47:22:ee:b4:d1:c5:28:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CF:D8:CA:BE:8E:70:94:2C:E5:21:72:EA:5B:BA:51:61:92:66:9F
X509v3 Authority Key Identifier:
keyid:6F:7C:91:57:3C:7D:14:57:26:15:D2:13:E4:C1:99:8A:40:DC:DB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3yRVzx9FFcmFdIT5MGZikDc25I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f1f68-d222-4e04-aabb-66132fe8be4d/1/b3yRVzx9FFcmFdIT5MGZikDc25I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:3a:24:87:5e:54:d5:ea:2b:36:c7:a6:f8:63:08:f3:2c:
b6:77:66:4e:94:b8:ca:2a:c6:c5:5e:37:f5:d3:fd:d9:ce:10:
76:be:68:8c:c3:a2:b8:3f:f4:e1:10:28:8b:5f:84:d9:2e:f5:
c2:6f:b7:33:80:01:bb:f0:99:d1:29:4a:8e:aa:f1:6f:74:a7:
a8:28:cf:8c:63:c2:93:7b:28:df:4f:c1:c6:9f:4b:f9:7a:94:
22:e7:a6:da:a5:bb:75:47:7f:3e:b2:a7:f6:cd:dd:75:37:a7:
25:b6:78:9e:59:f0:10:f3:c1:6a:da:71:e1:5e:a6:8e:ca:79:
e2:02:30:b5:d7:be:e5:77:a3:8e:3b:22:f9:5b:b9:94:11:70:
26:e5:a7:6e:be:a5:c7:8a:62:f8:17:ba:7e:39:01:6c:2c:6e:
e5:26:b3:be:12:75:f4:f3:3d:93:31:f3:45:8e:2b:c5:5d:5d:
3f:b0:ad:2b:eb:c4:20:93:b7:64:7d:a7:8a:74:74:49:1e:ff:
03:7e:b4:7d:55:f6:49:94:e9:43:fb:c5:ce:9d:71:5a:5e:34:
2a:67:4f:c5:95:ee:83:49:15:6e:2a:06:dc:b2:09:6f:1d:3d:
43:c0:d5:34:c4:37:4c:32:cd:3f:a9:0f:30:ed:a5:89:54:e9:
1d:5f:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:12 2026 by rpki-client