Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
File: bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json)
Hash identifier: 6nz/FH9cocOwkbVKf1VsN3+t2nKa1I5Z6pHy021obOg=
Subject key identifier: 18:6B:53:48:48:09:D5:37:33:A4:E9:41:FD:7F:42:F2:52:C3:84:53
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Certificate issuer: /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial: 019D3940BB46BB47DE25F06A8816F08B400F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
Manifest number: 1427
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: 0zZ0dzkVpdF-tCtUV-djGvdHgCk.roa (hash: 6a44i8k7TjnmJ2zj/RbOw8pxahCpct+gkknUopLaua4=)
2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: 14hUxZHZuK7ZU/T4Ek+W9JM3mYPKwqaqn50rQXQ9+oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bb:46:bb:47:de:25:f0:6a:88:16:f0:8b:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=186b53484809d53733a4e941fd7f42f252c38453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:28:c8:b3:eb:d6:18:66:da:f8:f2:14:55:
f1:99:35:de:ac:83:87:51:ea:a1:ef:23:01:7a:fe:
21:67:82:bb:f4:41:46:f2:68:11:38:3c:f7:78:75:
22:86:48:54:29:a8:b6:ed:6f:4a:a4:13:10:ea:0e:
07:ed:a1:da:c4:a5:b9:9e:e1:71:2b:c2:19:63:59:
03:6f:90:ec:3c:c5:43:c7:d0:6a:41:a2:06:8d:0f:
a8:4d:ac:ee:d5:9b:d3:2c:5a:51:3b:34:5f:88:fd:
fe:dc:eb:88:52:04:14:ac:96:8a:db:12:64:79:6d:
48:6a:a3:05:43:c9:f5:cb:06:53:67:26:3f:b4:7c:
1a:0d:7d:0f:b5:68:bd:12:f5:bf:67:b2:c2:50:8a:
d7:f8:8a:23:82:c0:a6:e0:cd:d9:92:c2:ae:c8:d2:
a7:35:cf:91:ba:57:c9:bc:14:dd:9a:ea:49:85:f4:
17:92:2c:ee:a3:a9:f5:b2:a2:a1:a1:45:c9:e3:fe:
3b:35:cd:7e:c1:96:a8:aa:e0:99:73:9c:c0:85:9c:
71:6d:d5:6e:13:35:66:cc:d9:e6:03:5d:ea:6d:57:
76:c8:87:29:69:17:88:ff:f3:a9:f1:5e:61:e5:b6:
b6:61:ef:77:7c:5d:bf:6f:76:40:06:f8:b1:24:37:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:53:48:48:09:D5:37:33:A4:E9:41:FD:7F:42:F2:52:C3:84:53
X509v3 Authority Key Identifier:
keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:35:e8:1d:d3:d2:a0:3a:b8:44:42:41:81:4d:c4:3a:2c:cb:
43:eb:fe:89:58:cc:99:2a:c0:51:71:fd:f3:63:f1:fc:a7:47:
fc:3d:4d:b0:e9:09:8a:50:2a:d5:3a:6e:a8:b1:36:16:04:7b:
36:16:06:a4:b3:28:dc:15:86:3d:a3:0e:97:b7:39:9c:82:51:
d9:d0:c9:f4:1b:26:17:7d:00:21:fa:21:90:e3:c9:28:bc:01:
12:5a:cb:18:fc:00:40:90:fd:24:8d:1c:1f:ef:bb:da:3c:1b:
0a:35:f2:f5:be:c6:60:2c:2d:7c:fe:cc:ee:5b:0b:bb:84:21:
c7:58:1a:0e:f5:36:ef:ea:b2:b9:cc:09:bd:21:72:24:30:94:
f6:24:a3:c4:7d:e0:25:c2:6f:11:e7:dd:ca:77:8c:c7:6e:7b:
8e:28:ad:be:a1:87:4e:b9:14:99:bd:b4:b8:d6:d1:bf:65:fb:
f0:7f:a3:61:99:30:65:a1:ec:e4:13:52:77:1a:84:2f:72:09:
29:69:74:d5:13:0d:c3:ff:fd:69:dd:25:ff:d6:c7:0d:9f:dc:
61:52:03:e8:03:58:22:d9:7b:1a:1e:db:a9:a9:3c:f0:a5:8b:
67:23:7e:00:d3:74:44:31:e1:06:34:07:57:09:87:54:3c:8a:
02:98:22:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:13 2026 by rpki-client