Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: Q5sJgFDf1tkk6GN4Qb8Axz4Is7Y2LfClgvxf53r2Bus=
Subject key identifier: DB:38:10:A8:E4:C7:20:D3:75:AC:8A:4A:BD:B6:81:0D:A4:B4:0A:8D
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 019CE41093AA5E9AF650EF47769476012917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 17F6
Signing time: Thu 12 Mar 2026 22:00:17 +0000
Manifest this update: Thu 12 Mar 2026 22:00:17 +0000
Manifest next update: Fri 13 Mar 2026 22:00:17 +0000
Files and hashes: 1: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: iehS/cwfk0UGK2SxmN7kSvPk7jq5XnYBns1pag6hl64=)
2: oEPb551Fmmv_qq3-IsGJL_8qeEM.roa (hash: /sI5Aytwm31HUeEzicSDNguNyqjq18X/fbcFmDkiODg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:93:aa:5e:9a:f6:50:ef:47:76:94:76:01:29:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Mar 12 22:00:17 2026 GMT
Not After : Mar 13 22:00:17 2026 GMT
Subject: CN=db3810a8e4c720d375ac8a4abdb6810da4b40a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:05:50:e1:97:14:02:93:b6:ad:c8:a6:4a:
74:1e:6d:53:08:1d:c8:d6:81:db:a7:30:82:91:ed:
d1:22:2f:44:c2:05:71:bb:26:4a:4a:41:2b:39:09:
4b:24:ab:0a:02:de:15:84:c4:d3:e9:54:97:83:af:
82:b8:b2:90:f6:f8:0e:ff:63:9b:ee:ab:eb:55:d7:
98:70:56:db:93:38:36:94:25:95:15:3a:2f:fb:c9:
90:9f:31:a8:b3:e0:10:b8:13:a3:7e:75:f1:ad:d1:
93:ea:8a:db:5d:72:5e:2a:c7:83:a7:7e:4c:2e:6f:
e9:42:90:5b:62:04:03:df:21:3a:1e:8b:18:df:45:
c1:2d:f1:d8:40:23:92:09:18:7a:8c:12:e0:e2:9d:
2b:55:17:38:b7:d1:34:3c:01:72:a6:0b:5d:a8:aa:
1d:5a:01:b2:9f:3b:a4:63:29:08:14:bd:fc:86:0f:
b2:55:13:80:2b:e7:5d:f7:81:10:08:80:43:4a:26:
c2:02:86:c3:4f:8f:05:58:a7:c6:cb:17:35:b0:5b:
91:fb:f5:9b:1c:cd:be:0a:e0:56:7d:f6:4a:30:db:
73:17:e1:b3:ef:84:f2:3d:38:fe:50:58:7b:54:bd:
7f:7f:b4:8e:51:70:fa:be:70:4f:a7:f1:7c:0d:3d:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:38:10:A8:E4:C7:20:D3:75:AC:8A:4A:BD:B6:81:0D:A4:B4:0A:8D
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:df:de:a6:9a:d4:dc:ea:16:17:d5:74:c0:86:1f:9a:15:
fa:d0:dd:80:f4:90:d5:dd:21:cc:32:26:97:a1:8e:b1:c4:0f:
d8:b1:40:27:79:f1:b7:29:9d:7b:95:5d:9f:9f:8b:86:25:a9:
66:a2:da:1b:d3:54:4d:d4:8e:5f:82:a0:f8:99:17:84:0a:bc:
7b:f2:12:11:ce:2c:a3:c0:d5:3e:92:a8:60:7f:cc:55:6d:fa:
9b:33:75:0e:bf:ac:06:d3:fc:aa:24:9b:39:33:77:b8:15:cf:
30:5e:a3:21:a6:ad:62:6e:27:52:e5:9a:72:fb:69:b9:c2:bd:
48:99:50:e0:68:20:d7:33:c4:f1:37:41:25:7f:2d:72:db:05:
a1:b8:ce:a7:b6:8d:83:1a:5e:0f:fc:a9:98:77:83:a2:11:09:
f1:fe:44:9c:02:2a:f5:c8:16:98:7e:f1:9d:90:73:3b:d7:58:
4f:d0:a8:fd:8c:97:b0:be:b3:88:c2:1f:50:32:f0:90:2d:e4:
5e:de:c8:29:12:e8:70:bd:25:25:81:09:b7:23:6a:5f:f1:05:
50:d8:b1:4a:1f:c0:d4:9b:a7:82:63:0b:55:22:50:76:1e:9a:
4a:64:8c:6e:34:00:ec:af:e3:d8:d3:ee:40:0f:31:4d:4c:be:
66:96:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:14 2026 by rpki-client