Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: ccQZX2mCQSrnc+7SJ0HfLwR4tutEQxrnExeDkvL17MA=
Subject key identifier: C8:B7:DE:4D:42:35:92:FF:80:67:1E:E4:D4:9D:3E:A3:F1:8A:26:EA
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 019D394104BC84B4DC7DE2BF10E0D9973FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 11:00:55 +0000
Manifest this update: Sun 29 Mar 2026 11:00:55 +0000
Manifest next update: Mon 30 Mar 2026 11:00:55 +0000
Files and hashes: 1: 4XxIYwz7j2kyG3R_CD4kJYaxank.roa (hash: TLEhf+pn1t5mBsVNjIOJ9/5QAhqcShOiU6dpNlwJI8s=)
2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: /D8/fl9Qr8emks38N+7j4627Kr0Ma1bhL7OyWeVhfwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:04:bc:84:b4:dc:7d:e2:bf:10:e0:d9:97:3f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Mar 29 11:00:55 2026 GMT
Not After : Mar 30 11:00:55 2026 GMT
Subject: CN=c8b7de4d423592ff80671ee4d49d3ea3f18a26ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:2a:0a:e9:9c:41:63:c2:ed:5a:59:19:07:
f2:70:42:15:0e:a4:63:29:a8:a8:fd:41:c4:e5:d5:
32:d1:51:dc:bf:df:e9:00:3b:89:b5:e5:0e:cd:c1:
ab:5d:d0:a0:04:fb:36:74:45:ef:6c:87:2e:d2:eb:
0a:d7:f0:2b:79:ce:bf:d6:9e:82:62:2e:20:61:da:
ec:c9:c0:48:2d:de:42:f8:41:8e:88:d3:85:04:39:
6d:55:96:d3:a4:2a:4e:84:b4:b5:ac:4b:51:ea:6a:
3d:35:ac:08:61:67:42:c2:7e:0f:31:d5:fd:ba:9e:
31:05:37:85:6c:0f:45:d1:09:5c:9c:c2:8c:5a:65:
45:60:b3:a0:2a:21:10:ea:80:cd:b4:ab:4e:47:a5:
e6:e4:22:ce:86:67:71:47:37:50:c1:5d:85:11:c9:
ce:21:0d:ba:fb:9a:09:88:37:19:56:4b:fa:1f:ab:
3c:af:fe:93:d5:ef:a3:06:3e:87:90:bf:4a:89:32:
2e:2d:1c:af:22:10:cf:8a:5e:de:3f:3a:14:0c:49:
fa:02:4d:30:25:66:93:4f:39:6f:06:a5:9f:a1:75:
9d:20:95:28:02:9d:d0:41:19:25:32:0c:e9:e1:ee:
f9:44:c7:d1:e6:f3:dd:c1:02:7f:49:40:42:64:e3:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B7:DE:4D:42:35:92:FF:80:67:1E:E4:D4:9D:3E:A3:F1:8A:26:EA
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b4:17:55:c4:80:d3:86:de:96:4b:a5:97:5d:c4:35:ea:cf:
14:92:5d:4b:cd:3b:33:d5:91:19:83:59:a5:01:bb:5c:ea:a4:
52:7f:53:95:53:69:a9:78:a7:f3:f2:68:9d:5b:76:15:a2:60:
9a:77:c0:a3:18:4a:08:e0:aa:c6:7d:29:82:85:09:8f:ec:7f:
25:e1:41:59:d6:dc:90:6f:dc:c0:1c:63:ee:ab:6d:b2:a3:5d:
ce:a5:a1:71:51:e6:2d:c3:ad:5d:23:32:28:f2:3f:6d:0f:32:
63:47:b7:17:e8:1d:32:76:77:09:14:a6:82:d6:a8:e3:ba:0b:
75:fd:72:bd:15:58:58:f9:a8:b5:22:66:4b:8d:8d:73:c6:ef:
1e:d6:00:d3:97:1f:e3:c0:6f:47:ce:1f:be:db:52:fa:cb:07:
ce:0c:cc:77:3a:61:43:e5:89:c8:04:6a:87:52:99:c3:d2:23:
fa:d8:c2:24:45:0f:2d:e3:81:d3:1d:85:e4:c4:a6:80:0a:3c:
e7:48:2b:39:c1:36:72:36:4e:14:a6:94:f9:f6:d3:f1:c2:43:
55:bf:21:81:0d:f1:2f:26:28:47:6e:a6:4e:8b:cd:86:63:ea:
ef:98:29:dc:04:f1:3a:70:48:e5:41:73:24:36:83:09:e0:8d:
2b:25:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:44 2026 by rpki-client