Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: GuX0hBz27wogmBhQqoEw+oSBpt041oniMYp8uXWTThQ=
Subject key identifier: 12:B3:72:2C:3D:4D:C0:AA:05:7C:7A:F6:FC:E6:EA:BD:03:72:63:3B
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 01A17A3AE1047371C78FEFFB138E9EE5A2CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 1A56
Signing time: Mon 26 Oct 2026 22:00:41 +0000
Manifest this update: Mon 26 Oct 2026 22:00:41 +0000
Manifest next update: Tue 27 Oct 2026 22:00:41 +0000
Files and hashes: 1: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: 97MJvw4NMKd3GTBu7R9FG2vH7BmRc/vpkQfnRvT20Ls=)
2: oEPb551Fmmv_qq3-IsGJL_8qeEM.roa (hash: /sI5Aytwm31HUeEzicSDNguNyqjq18X/fbcFmDkiODg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:e1:04:73:71:c7:8f:ef:fb:13:8e:9e:e5:a2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Oct 26 22:00:41 2026 GMT
Not After : Oct 27 22:00:41 2026 GMT
Subject: CN=12b3722c3d4dc0aa057c7af6fce6eabd0372633b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a0:97:d1:42:e0:d2:05:76:74:68:a4:6e:c9:
b6:6d:14:db:8f:8c:8e:54:24:0e:9c:b2:4c:91:e8:
f4:de:20:55:c9:d6:8d:78:a2:f1:8f:ed:37:99:6a:
cb:a3:26:85:e0:e8:82:04:8d:ce:1b:45:30:e2:67:
ce:64:40:b8:53:25:37:39:12:b1:0c:11:d1:ca:20:
32:2b:d9:ea:fa:2c:46:a9:7d:4e:a2:09:c6:0c:56:
32:0d:fa:45:70:44:bf:62:f9:20:42:09:4b:7a:12:
88:1b:9c:42:34:06:7b:fa:aa:33:7c:21:88:4b:c9:
11:0d:17:d0:0a:67:cb:4c:58:4a:ac:e9:58:81:ed:
51:57:fc:80:45:e8:70:ba:3c:d7:aa:d7:68:62:5e:
d9:28:0d:d4:af:b7:9a:d7:f1:f5:91:3a:70:1c:55:
c3:fd:8f:9b:20:20:10:18:7e:ee:f1:7d:9b:85:09:
82:da:46:5c:8c:46:69:03:34:31:ab:92:10:bf:c4:
23:c6:68:f3:7d:dc:96:1f:67:0d:aa:56:4c:c0:f8:
b9:75:07:68:86:b2:73:9d:42:12:fc:89:8d:97:67:
4d:37:5c:08:a1:ae:8d:2c:b1:2f:44:f8:21:36:5f:
0d:f5:b1:bd:c2:e2:4d:a9:3b:2d:ad:41:8a:66:32:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B3:72:2C:3D:4D:C0:AA:05:7C:7A:F6:FC:E6:EA:BD:03:72:63:3B
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:45:8d:2f:7e:95:73:c8:31:df:0d:3b:40:74:5a:95:cf:c1:
02:80:d1:40:8b:65:6a:28:5d:27:4f:61:12:36:d9:9a:aa:b7:
4a:9f:df:bf:be:e8:40:2f:61:bb:6c:c2:06:78:56:b6:51:ce:
6d:b8:84:7d:14:ec:37:ca:d6:ee:d2:83:da:ba:77:e7:b3:31:
ce:c1:69:17:6c:1a:38:2c:81:19:28:e9:87:d5:de:23:f0:cb:
6b:1c:08:f2:c9:4e:65:18:02:00:e6:86:a8:ba:93:76:06:3f:
28:52:5d:1d:d0:fd:96:76:a8:bd:8a:ce:4b:5a:00:61:37:6f:
dd:9d:f4:82:75:0a:c4:09:c9:54:fa:aa:bf:25:c6:8f:f1:7d:
4c:25:9c:50:ff:c6:7c:0e:35:a5:08:12:92:3a:75:66:98:ab:
bf:0b:2f:18:fc:8e:89:c8:ad:8a:b7:f7:ae:da:50:e7:0b:6f:
fb:44:36:dc:b7:54:52:73:00:d8:ec:34:21:fa:2a:5b:f5:51:
96:17:bf:79:42:91:46:df:ac:74:aa:78:50:ea:fd:d1:c6:31:
9d:82:8c:23:8a:e9:48:93:ad:41:34:e3:40:3c:0e:5e:c6:1c:
ac:0d:98:c7:89:b7:29:11:38:17:8b:49:fe:e2:ea:b3:81:61:
7d:8c:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:03:41 2026 by rpki-client