Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
File: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft (raw, json)
Hash identifier: 71FZLfo9pLg5PxDbrYxbsi9ynPcI91SGLeaZvXnWv3Q=
Subject key identifier: B2:D0:7C:BA:04:0D:22:CF:9C:93:89:3F:F3:7E:F1:8A:B8:33:AE:60
Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Certificate serial: 019D375280F0EFAF1D064B75E165D38A3D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
Manifest number: 168C
Signing time: Sun 29 Mar 2026 02:00:46 +0000
Manifest this update: Sun 29 Mar 2026 02:00:46 +0000
Manifest next update: Mon 30 Mar 2026 02:00:46 +0000
Files and hashes: 1: B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl (hash: Jrd7KWQq5QgTo+wOnygc+PnNO0e1KaSfXsPRKPj33r0=)
2: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (hash: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:80:f0:ef:af:1d:06:4b:75:e1:65:d3:8a:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6
Validity
Not Before: Mar 29 02:00:46 2026 GMT
Not After : Mar 30 02:00:46 2026 GMT
Subject: CN=b2d07cba040d22cf9c93893ff37ef18ab833ae60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:76:7a:06:e7:bf:c9:50:a4:2a:36:c4:15:
39:17:c4:d4:c2:a9:7f:02:40:e8:05:7e:ad:88:4e:
66:83:4b:f5:91:4a:93:66:1f:0f:8e:54:06:44:3f:
71:91:3e:f1:bd:54:f4:1c:06:27:f6:6c:6b:98:38:
57:7e:82:f1:ce:e9:f3:6e:86:90:03:85:f9:c3:24:
97:6d:9f:8b:2c:ad:6f:2f:93:50:cb:da:70:4b:4b:
8a:fe:83:13:7e:e4:e1:8a:ab:6f:5f:e8:08:5e:18:
f5:92:78:de:0d:08:d1:ad:fc:5a:ac:6d:25:f0:12:
6b:e2:03:f7:48:64:7d:27:5e:51:5e:0b:df:52:ca:
a0:1c:8d:6e:89:18:a7:f3:3f:c8:69:5a:26:39:66:
4e:87:89:b0:d3:3a:ab:a8:3c:f2:17:10:4a:47:cb:
a5:eb:7e:db:25:04:85:ef:49:50:ff:11:31:31:12:
36:af:3b:e5:a3:57:22:4d:37:da:05:bc:5a:77:49:
18:ab:68:e4:a8:50:e6:d5:4e:5d:22:0c:27:22:71:
c4:50:79:7d:39:27:bc:11:12:6c:bc:3b:48:bc:0f:
63:18:d4:32:0a:74:59:d4:f2:62:05:69:8e:c2:93:
fa:b7:1d:76:ba:24:62:9b:fb:ec:fe:2f:23:61:e1:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:7C:BA:04:0D:22:CF:9C:93:89:3F:F3:7E:F1:8A:B8:33:AE:60
X509v3 Authority Key Identifier:
keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:16:91:dc:5f:28:b5:f3:c1:ac:c4:5a:f0:46:20:19:f7:9a:
fd:9b:eb:ab:c1:d0:bd:60:c7:32:84:8d:ac:19:d7:f5:17:58:
57:3a:e1:79:9c:a5:4d:5a:31:96:f4:24:2c:5e:7f:3a:c5:85:
db:75:c6:64:ef:c8:ba:99:2e:97:46:e7:5c:7e:3e:58:fd:41:
1a:3d:41:94:40:52:7b:2e:5b:f3:91:2e:04:71:95:41:81:97:
60:24:c3:8b:8e:9e:2c:24:94:f1:ce:a9:5a:6d:2b:3d:45:2a:
c2:4d:60:de:ae:6e:c1:b7:4c:90:0f:c1:e9:10:6d:d6:5c:5c:
71:1a:4a:9f:82:b4:06:30:52:9b:d4:6d:49:63:3f:02:44:5e:
ec:f7:88:6c:b3:9b:84:c1:2b:10:03:53:99:61:e3:d9:68:cd:
16:bd:18:68:60:3c:f2:bf:de:67:67:68:b1:22:9c:bb:35:27:
fa:0d:7f:28:b0:e6:91:9d:83:80:a4:76:c4:43:0f:20:6d:a9:
b2:34:60:bd:fd:91:7d:09:81:ee:0e:65:7f:be:f3:ca:9e:56:
94:13:13:cd:60:00:95:0c:90:fe:7e:67:73:2b:d1:38:1e:cd:
dd:07:2f:20:5f:74:5a:41:54:d5:91:d5:58:3c:8f:ae:df:f5:
14:97:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:32 2026 by rpki-client