Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File: b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier: LDrNzBmTwF9yHKtklEOFYq9wbbp1PXpULVgKbs6nnnE=
Subject key identifier: BC:FA:16:4A:FD:89:28:9C:A2:3F:8F:D8:D7:9E:1C:C5:C8:E0:A5:8A
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 019D382E101B6415EC47491A701B0BA6BBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number: 15C6
Signing time: Sun 29 Mar 2026 06:00:36 +0000
Manifest this update: Sun 29 Mar 2026 06:00:36 +0000
Manifest next update: Mon 30 Mar 2026 06:00:36 +0000
Files and hashes: 1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: 5oXICqzv1SLG6j2/+J8TNltFOdbRU7ZUJp/pz5m2sh4=)
2: npOXlCeWSvGjxC2zJdVAMWyUfEM.roa (hash: pw1QNEJHKJUrWY6D1qiACJ/w8G/+SsXvTvvhcDDyBgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:10:1b:64:15:ec:47:49:1a:70:1b:0b:a6:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Mar 29 06:00:36 2026 GMT
Not After : Mar 30 06:00:36 2026 GMT
Subject: CN=bcfa164afd89289ca23f8fd8d79e1cc5c8e0a58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:38:c6:42:32:ed:8d:1a:de:7e:0c:aa:2b:20:
db:d2:ef:ce:94:6e:5f:fc:a6:c2:03:ae:32:fc:73:
41:04:8d:ec:f7:30:57:2d:af:59:fd:3a:23:c1:0c:
62:6a:3b:aa:3d:32:c2:69:22:98:66:f3:97:05:cf:
47:2a:70:62:5a:2d:1b:e2:34:fb:41:c3:e1:8b:c6:
9c:0a:60:a1:78:4e:0d:b9:07:11:5a:9b:3a:86:fa:
d8:5c:aa:62:7f:33:dc:b5:26:13:67:c6:cd:4e:f8:
09:25:80:cc:53:f5:b9:de:b6:62:ef:b7:a0:bf:bc:
1a:d0:51:60:e3:af:67:fe:ec:fe:47:37:0e:e4:8d:
d7:0d:2e:35:34:fe:e7:48:c4:51:20:64:64:72:0b:
c2:a3:a9:28:65:38:43:52:a5:ea:0c:cd:55:ef:af:
55:f8:a6:29:69:c4:d7:15:8d:ca:71:22:4d:78:10:
46:1d:71:4a:c3:2b:63:e1:a5:f1:55:39:11:e1:6b:
45:dc:79:fc:36:7e:93:ca:3b:87:75:7b:63:9f:d3:
12:8f:61:48:fc:bc:43:a5:3b:d9:8e:37:d1:d3:c6:
5a:e1:4a:bc:84:fb:b7:3b:7e:81:40:62:87:f9:b9:
2e:7d:44:ff:44:7b:7b:92:cb:7a:29:8a:5c:a2:39:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:16:4A:FD:89:28:9C:A2:3F:8F:D8:D7:9E:1C:C5:C8:E0:A5:8A
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:cb:fe:a3:14:3e:9c:01:3a:ee:fd:7c:10:a9:87:ed:b8:3c:
24:f8:b1:4d:87:ea:6c:87:84:31:82:12:cc:7f:4f:a1:08:5b:
2e:9b:84:ca:2b:c3:b3:fd:0c:c4:79:be:ff:66:24:2e:91:75:
0c:b7:12:9a:ab:82:b3:73:3a:8a:c3:f6:78:45:a1:9a:cd:34:
a7:1e:04:c8:8c:7f:f2:89:7c:25:20:40:20:c0:63:6d:0e:cd:
fb:88:eb:de:54:26:c2:c0:a7:d1:79:ce:24:e1:f9:db:3b:4b:
83:18:bd:d6:6d:6a:5d:ac:75:b0:f7:84:a3:ae:c4:a1:d4:2b:
1a:c2:1b:4b:49:92:32:27:3f:67:14:85:04:ed:0a:a5:12:f2:
22:d6:29:fd:16:0d:a2:88:89:db:7a:e2:75:66:3b:3d:e2:6e:
cc:dc:90:51:a2:2a:97:dd:b4:96:a8:57:55:8d:61:3c:b8:25:
1f:11:4d:69:bf:a9:09:48:c3:21:12:d1:00:84:be:c1:12:a4:
c5:c4:cd:0c:24:e6:38:a4:96:99:6b:68:0a:99:94:81:05:43:
5f:7d:7b:f8:eb:99:ff:86:22:0b:36:41:28:5b:e6:66:7f:d9:
37:5a:00:fb:f2:59:cc:06:9f:35:1c:3f:bb:12:62:24:9a:d7:
79:24:92:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:44 2026 by rpki-client