Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
File: b3s1wIukkwGmzEMK2pSTztftQhg.mft (raw, json)
Hash identifier: my000MV8iYHwEpBuqqsFmcgJFi5J2jaKcJt0L/k8iNk=
Subject key identifier: 04:3D:74:62:09:DD:59:9A:3D:29:20:A7:9D:5A:FE:49:B7:03:9E:84
Authority key identifier: 6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
Certificate issuer: /CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Certificate serial: 019D062F109A96FC8E8F320947D28C65FE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
Manifest number: 0226
Signing time: Thu 19 Mar 2026 13:00:40 +0000
Manifest this update: Thu 19 Mar 2026 13:00:40 +0000
Manifest next update: Fri 20 Mar 2026 13:00:40 +0000
Files and hashes: 1: DaJESnUPstRnvc8gyVuGJJGAc7Y.roa (hash: XZbUEMnqmV6tcLHU8cRnDGbe97bObMl8R2ndAHcyFi8=)
2: FNDjx2az9tCR_VzC5TbRTJVU45M.roa (hash: P36YaarhMgLgB/2+d+QXhzMEz6mV4aOY72ihhGMy3DY=)
3: b3s1wIukkwGmzEMK2pSTztftQhg.crl (hash: CLGQwKH0CYkFp51jRvB9OD4WgisCyTkDwdJllsNkMkM=)
4: mdu3xdhyXhJdxS8EEEljr-DR8go.roa (hash: rnQ2hZVq/YedWUKl/nEjRuy3KybsEEgeJU8EAN9cR0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:2f:10:9a:96:fc:8e:8f:32:09:47:d2:8c:65:fe:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7b35c08ba49301a6cc430ada9493ced7ed4218
Validity
Not Before: Mar 19 13:00:40 2026 GMT
Not After : Mar 20 13:00:40 2026 GMT
Subject: CN=043d746209dd599a3d2920a79d5afe49b7039e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:39:07:d5:0a:49:10:9f:d8:ba:33:90:67:
d0:c3:10:85:5d:16:f7:39:d4:23:36:72:50:8b:38:
b5:a8:14:30:a0:d2:52:d3:eb:b9:9c:50:cc:31:25:
7d:82:d1:94:4a:d9:1f:94:54:3a:28:0d:d0:b7:b7:
a7:c6:c1:7f:e6:3d:48:8b:fb:6b:ab:ca:a0:c6:48:
03:b0:23:07:55:2a:bf:eb:02:43:71:f5:7f:de:ef:
c5:a1:1d:ae:a0:59:47:b2:b3:be:e1:c3:b3:88:6a:
25:4f:9c:63:ec:1a:c2:ec:91:d7:fd:eb:01:a6:27:
5f:5f:47:b6:01:21:c6:21:d9:34:f8:7a:76:58:37:
8e:b4:1e:af:f2:38:81:bd:e4:cc:36:f6:99:20:a2:
29:1f:6a:95:cc:3c:c6:aa:54:b7:0a:1d:a7:48:8b:
f2:12:61:a2:9b:69:c2:fd:48:fe:74:44:d3:c4:f3:
a4:73:e2:69:29:07:53:aa:33:3b:33:ff:05:f3:fa:
a8:27:e9:4f:08:94:81:fd:37:a0:f3:67:40:d0:d5:
19:9e:46:3e:54:dd:ec:6d:a2:59:32:8c:f2:08:a8:
82:bb:d9:26:04:6c:ef:29:44:8e:07:c5:f0:b6:4e:
5b:e7:1f:3b:07:1b:44:4f:12:f0:f8:ba:cc:6f:1c:
cb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3D:74:62:09:DD:59:9A:3D:29:20:A7:9D:5A:FE:49:B7:03:9E:84
X509v3 Authority Key Identifier:
keyid:6F:7B:35:C0:8B:A4:93:01:A6:CC:43:0A:DA:94:93:CE:D7:ED:42:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3s1wIukkwGmzEMK2pSTztftQhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/58d060-98f2-4003-8ff1-d24c35dfac94/1/b3s1wIukkwGmzEMK2pSTztftQhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a0:16:9b:46:6a:81:71:99:6c:63:41:98:c7:48:fe:ab:5a:
0f:41:9d:c2:e5:af:df:cf:6a:cf:b9:46:cb:b0:19:5a:58:31:
28:3f:55:7b:02:ff:1d:17:76:b7:2e:2f:35:7b:a8:33:d5:5f:
c5:75:ef:30:8a:fb:bc:11:1a:f6:fe:53:ab:b4:fa:48:98:4b:
7e:1b:b6:99:02:45:c1:7a:d5:06:8e:02:be:d9:40:4e:55:53:
68:d7:54:4b:12:93:31:25:c5:78:5d:6d:ac:ed:be:d5:10:bb:
c5:72:4e:25:af:23:30:cb:41:ab:00:0c:27:33:cf:7f:6b:b5:
73:be:71:8c:35:06:ab:35:a8:52:ac:9c:0f:ae:a6:0e:ec:e7:
c4:6a:00:8e:f9:e3:86:f7:f5:2f:cb:8f:11:6f:f2:48:be:b1:
a4:e7:dd:be:3a:f8:40:80:d2:b2:2c:37:c8:f4:39:44:8c:27:
ea:8f:89:46:b0:1a:be:03:f9:ad:04:92:22:b8:14:1f:a0:52:
0f:2c:e9:ab:56:24:50:39:fe:bb:d7:1f:2e:85:b0:dc:66:e0:
d8:58:f9:61:a2:e1:91:c4:28:71:68:5d:ba:3a:93:79:77:81:
c6:e5:e1:0d:98:d6:e0:b4:a0:64:ca:53:2e:2c:b8:90:3b:55:
57:26:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:32:09 2026 by rpki-client