Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: BPQas7DzKoNU9OKXBPQkEcWtolJjDPlgb5JRvYR50N8=
Subject key identifier: 21:CE:98:26:15:95:0E:6B:53:D1:58:03:F6:F0:EA:EA:AD:9E:5D:0B
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 019D2A72EA03524A121718F53F6E693C8F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 0DFD
Signing time: Thu 26 Mar 2026 14:01:07 +0000
Manifest this update: Thu 26 Mar 2026 14:01:07 +0000
Manifest next update: Fri 27 Mar 2026 14:01:07 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: na8HpRxNfq+h0eO8srw/dNQArGs/tMSvdDLMGKCz6XE=)
2: beU-evce9w8RpnlnhExOwqlTqVk.roa (hash: CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:ea:03:52:4a:12:17:18:f5:3f:6e:69:3c:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Mar 26 14:01:07 2026 GMT
Not After : Mar 27 14:01:07 2026 GMT
Subject: CN=21ce982615950e6b53d15803f6f0eaeaad9e5d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:4c:12:8e:e8:fb:bf:48:ff:41:6e:3a:2b:
ae:5c:d4:50:06:30:11:17:0b:cf:17:a6:06:8a:5b:
16:be:c7:e0:92:1a:1e:2f:83:1f:40:fa:cc:fc:30:
02:6e:51:5a:ad:0f:70:d1:49:ea:18:4c:87:64:b6:
3e:a6:f5:49:ae:07:d2:ce:ce:b7:95:f3:54:46:ca:
67:ff:a4:6f:57:01:d1:af:d9:7c:de:a8:2b:dd:1a:
51:20:3f:c8:c6:1a:33:fe:e5:3f:b3:43:2d:19:1b:
eb:0f:b7:da:66:db:f3:36:f6:fa:73:34:c3:14:fc:
07:2a:c0:8a:c4:0e:c6:3b:2d:d0:03:66:54:4f:38:
1e:b6:7a:63:94:6b:f5:b9:46:8a:33:91:dd:db:11:
27:39:d8:ef:38:f3:dd:07:38:c7:78:f3:37:b6:c2:
51:c3:70:0b:1f:2f:a8:ce:46:f0:e7:18:cb:6e:2b:
aa:fd:df:c3:60:3c:26:ca:9a:a2:5f:71:1a:26:5a:
45:fa:19:68:e5:7c:63:08:35:af:92:e6:c0:2b:02:
21:23:6f:6c:b1:51:63:68:06:87:c0:30:0a:07:66:
22:5f:61:5f:ef:e6:51:9a:fc:7e:c3:96:3c:8c:75:
69:d6:d1:b8:47:98:d4:e1:73:4d:51:06:c3:5c:3e:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:98:26:15:95:0E:6B:53:D1:58:03:F6:F0:EA:EA:AD:9E:5D:0B
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b6:04:7b:18:d5:dc:dd:19:d9:ed:cb:24:18:9c:18:bc:e9:
5d:7a:56:34:86:e0:b4:dc:7f:10:cd:00:b8:50:04:39:b6:30:
d2:35:46:8f:88:ce:f1:83:a3:29:1a:07:b2:ed:00:97:9a:31:
fc:51:a2:b7:df:70:3f:91:f5:85:fd:df:0d:06:3c:01:82:53:
c5:a9:35:8b:ac:b1:34:8d:51:f1:59:83:7f:6b:ed:fe:4e:73:
2c:4b:f4:6a:ff:3e:98:2e:3c:a3:52:a8:8d:ab:ce:cf:38:c5:
c8:e7:d8:7e:cc:3a:6d:48:d7:9a:9e:fd:53:27:45:a3:fe:f0:
57:8c:fe:03:07:fc:4a:1d:a9:d8:9c:9d:c0:57:9c:a5:a0:33:
57:7a:ee:82:ff:05:53:7a:5c:9f:c1:7d:3b:dd:30:b5:c4:fa:
64:7a:b2:d3:22:4b:44:f2:a8:96:f8:ca:de:6e:17:69:a1:b2:
b3:28:83:1f:ff:e0:60:08:82:3b:75:90:ad:15:53:65:45:64:
50:69:72:55:f5:ad:0f:7f:61:66:f0:31:2e:39:c5:a7:66:00:
37:5d:97:ce:63:70:ee:8c:61:c4:4a:24:ec:76:60:68:5b:c9:
b0:15:81:87:8e:a8:0a:78:0a:ad:cc:6e:90:85:a3:6f:f1:62:
0a:3a:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:32:01 2026 by rpki-client