Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File: b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier: rxHUjTE+uEf4MILcyE92ZU9Deg/GXrnc6tAORYezy6s=
Subject key identifier: 36:B8:BE:21:6C:40:E1:CB:12:1A:4C:02:E5:83:55:CF:B3:66:7B:8F
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer: /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial: 019D371B4FE4CC2A31EAA4E0253854871DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number: 0FB5
Signing time: Sun 29 Mar 2026 01:00:29 +0000
Manifest this update: Sun 29 Mar 2026 01:00:29 +0000
Manifest next update: Mon 30 Mar 2026 01:00:29 +0000
Files and hashes: 1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: 56gFygaC4IUSCHJ7Y+nElNu/iFXUkcn6odkGycJqkmg=)
2: fTfLjB5qDCOrEt1AZqetNR0UP1s.roa (hash: ewzik2ZHIXp5O/f5G7R3qSZhEso+zQPbJgvnDCm9k4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4f:e4:cc:2a:31:ea:a4:e0:25:38:54:87:1d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Validity
Not Before: Mar 29 01:00:29 2026 GMT
Not After : Mar 30 01:00:29 2026 GMT
Subject: CN=36b8be216c40e1cb121a4c02e58355cfb3667b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:8b:47:2e:13:e9:4d:0c:04:1b:a0:e6:98:
7a:2d:83:40:7b:42:5c:6f:27:8a:bf:e0:b5:c2:cb:
f4:98:75:de:1e:20:03:70:57:93:8f:f2:0b:f6:5c:
f9:c3:45:37:48:1b:bb:fa:b8:bd:49:82:69:1e:64:
c9:fb:2d:d7:28:86:9a:b7:da:9d:14:bf:ed:7d:f7:
c1:fd:a5:9c:d3:9a:6e:09:25:c6:4b:c3:15:b7:96:
98:56:7d:0f:87:07:70:6c:7f:a2:0e:80:fa:02:60:
42:7b:f9:ad:01:32:e5:72:9f:ef:ab:cb:e7:ff:53:
21:3b:a6:67:fc:27:8e:d1:9d:5e:a6:96:7d:07:8c:
b7:b2:bd:fd:15:5b:cc:b5:ef:55:90:39:0f:3a:19:
64:67:bf:ef:2a:e8:c7:f5:ca:53:89:a8:94:5f:db:
d4:36:f6:cf:bf:01:f9:7e:96:a3:c8:f0:c2:15:52:
f5:28:de:08:5b:c1:b5:1d:09:82:0f:ea:e0:6f:b1:
10:6c:43:29:7f:14:f8:29:84:f5:9c:91:2a:1a:c3:
b7:37:d0:e3:fc:77:29:a1:59:f6:94:03:f9:f2:11:
1b:c5:ba:3f:0b:df:b0:0e:f1:8e:dc:28:f7:f6:56:
58:40:37:d2:30:2e:da:a6:da:79:6c:d6:39:02:1a:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B8:BE:21:6C:40:E1:CB:12:1A:4C:02:E5:83:55:CF:B3:66:7B:8F
X509v3 Authority Key Identifier:
keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:89:e6:d6:90:96:fe:90:bd:fa:a0:30:08:c6:43:d0:cd:
a0:bc:2f:4e:9d:de:34:60:6b:d2:f5:03:ec:6c:43:87:5b:12:
6e:00:33:af:58:7c:3f:ba:31:bd:90:e8:13:9f:9c:3a:8e:d4:
61:9f:45:6f:17:9c:07:40:24:78:ad:b6:0e:6c:32:e7:e5:a9:
b4:b3:e5:23:80:a9:b0:4d:9b:76:77:7b:bf:8d:bc:d5:32:6f:
c5:49:e8:8a:66:cb:6f:b0:21:b8:a0:42:de:c1:ae:da:04:95:
c9:7c:4a:8e:b9:5c:63:48:9d:80:99:8f:4f:08:35:c4:fa:3f:
d5:c2:1f:39:3a:47:09:33:39:83:33:c3:1d:4d:f3:37:51:c8:
f4:0d:8d:63:08:6b:d0:59:e1:a0:25:36:36:2e:55:02:76:7b:
1e:b8:0e:cb:2a:a3:bc:5d:46:2c:1e:0f:cc:13:84:24:e9:c6:
48:4a:cc:66:e4:d2:d6:23:42:55:f7:28:41:6d:b0:6e:18:09:
5d:72:25:af:2e:bb:19:38:cf:5a:a1:cb:45:41:db:09:c2:b5:
e2:1b:c7:72:a1:f2:e3:7a:5a:66:4f:91:57:6a:b4:fe:60:20:
50:48:8b:b3:50:f9:65:2d:94:05:69:92:e0:ff:e6:21:e2:be:
db:fd:45:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G0/kzCox6qTgJThUhx2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmN2JlM2FkMWY3YzU5NTBjZDQ2ZDQ4YmIxZjdlYTc3NTBh
ZmE4MWUwHhcNMjYwMzI5MDEwMDI5WhcNMjYwMzMwMDEwMDI5WjAzMTEwLwYDVQQD
EygzNmI4YmUyMTZjNDBlMWNiMTIxYTRjMDJlNTgzNTVjZmIzNjY3YjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEGLRy4T6U0MBBug5ph6LYNAe0Jc
byeKv+C1wsv0mHXeHiADcFeTj/IL9lz5w0U3SBu7+ri9SYJpHmTJ+y3XKIaat9qd
FL/tfffB/aWc05puCSXGS8MVt5aYVn0PhwdwbH+iDoD6AmBCe/mtATLlcp/vq8vn
/1MhO6Zn/CeO0Z1eppZ9B4y3sr39FVvMte9VkDkPOhlkZ7/vKujH9cpTiaiUX9vU
NvbPvwH5fpajyPDCFVL1KN4IW8G1HQmCD+rgb7EQbEMpfxT4KYT1nJEqGsO3N9Dj
/HcpoVn2lAP58hEbxbo/C9+wDvGO3Cj39lZYQDfSMC7aptp5bNY5AhpnWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa4viFsQOHLEhpMAuWDVc+zZnuPMB8GA1UdIwQY
MBaAFG97460ffFlQzUbUi7H36ndQr6geMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEt
YmZhODcyYzJmMzkyLzEvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYzg2ZGEtY2RhYS00YWZjLThkNGEtYmZhODcyYzJmMzky
LzEvYjN2anJSOThXVkROUnRTTHNmZnFkMUN2cUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOaJ5taQ
lv6QvfqgMAjGQ9DNoLwvTp3eNGBr0vUD7GxDh1sSbgAzr1h8P7oxvZDoE5+cOo7U
YZ9FbxecB0AkeK22Dmwy5+WptLPlI4CpsE2bdnd7v4281TJvxUnoimbLb7AhuKBC
3sGu2gSVyXxKjrlcY0idgJmPTwg1xPo/1cIfOTpHCTM5gzPDHU3zN1HI9A2NYwhr
0FnhoCU2Ni5VAnZ7HrgOyyqjvF1GLB4PzBOEJOnGSErMZuTS1iNCVfcoQW2wbhgJ
XXIlry67GTjPWqHLRUHbCcK14hvHcqHy43paZk+RV2q0/mAgUEiLs1D5ZS2UBWmS
4P/mIeK+2/1FKg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:46 2026 by rpki-client