Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
File: 3BHa76_4HH5QEnjYfZvCsgTXEVU.mft (raw, json)
Hash identifier: UHQ7s1l3VOXKuiM6VhrF08JvCFQPP0yTTV3QPuFYAsg=
Subject key identifier: F0:3C:CA:23:F9:22:A1:C8:44:82:83:62:A4:83:99:3D:43:87:57:91
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019D26CD46A62EA00E12A3A322F3435F9CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
Manifest number: 17EF
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: 3BHa76_4HH5QEnjYfZvCsgTXEVU.crl (hash: Az2lAHRBu1zHWEFPsX0YtTkpBzKUmD88+zQYD/P0wB8=)
2: GaliuPIZanwNNTmC2l2PRqNaNHU.roa (hash: YuUytkg/afnUQ+5sEqzkuPU4hcl7BMXhycN/8oN5ZIY=)
3: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (hash: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8=)
4: nAbHaxO3F_18HAXfxwmg-q53xPw.roa (hash: aQFQyHqG1hcOEyQibZ100kvvqbyGli2FgVSov4NcoCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:46:a6:2e:a0:0e:12:a3:a3:22:f3:43:5f:9c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=f03cca23f922a1c844828362a483993d43875791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:f3:6f:22:1b:a6:81:a6:34:53:12:00:e0:
d0:d5:a2:ad:73:1c:4c:fe:97:ae:75:77:90:9c:d2:
4e:d9:8b:a7:ca:d7:16:d5:00:e0:c1:2c:e0:46:ad:
03:70:b0:10:b0:08:c6:28:7a:a7:fb:3f:82:be:c3:
e0:e1:e7:20:9a:e2:aa:f5:2d:91:04:32:a1:41:61:
a8:c9:05:ed:50:3a:11:5f:d4:e8:b8:99:8d:5c:26:
06:cc:a0:eb:d2:6e:ef:59:20:ec:e7:6f:38:5f:ef:
b5:9f:4a:59:40:61:65:c4:65:37:78:61:e0:21:89:
a6:85:bd:75:1e:fc:4a:53:16:0c:3a:3a:55:92:ef:
04:80:5d:2f:f6:74:af:fb:d3:1e:15:a0:40:bf:a4:
e4:22:0e:fc:88:4d:89:0d:aa:61:c5:0b:28:d5:32:
71:eb:d7:69:a3:a5:02:ea:07:1c:59:07:24:1a:f2:
26:69:24:16:8c:48:76:19:e6:7f:75:5e:c4:42:7e:
94:e1:e6:2f:57:f4:d0:42:ca:33:d8:20:d1:f0:10:
fc:a7:fb:68:31:2f:0a:d7:bc:6a:be:aa:f4:ad:1b:
36:98:cd:5f:a5:65:39:eb:dd:53:23:3d:aa:2a:06:
99:ca:6d:e6:cf:82:5f:f7:16:c5:24:1d:96:33:39:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3C:CA:23:F9:22:A1:C8:44:82:83:62:A4:83:99:3D:43:87:57:91
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:80:a5:2b:46:26:57:a5:f1:6c:90:6b:5f:97:46:0f:d5:
99:69:67:b2:e1:c1:9f:26:c5:ed:39:4b:d7:b7:f6:ae:eb:fd:
dd:2c:5b:71:c7:f9:8c:0b:d7:54:f6:48:a2:ae:36:a6:0d:85:
a5:87:8d:99:12:da:89:f9:bd:40:98:21:02:ff:49:aa:df:55:
54:cd:36:ea:08:ed:69:8a:a5:00:9e:58:ed:6e:22:51:36:91:
a0:6f:2b:ff:a6:d5:a0:e1:b6:d2:c9:3b:ef:46:68:63:33:45:
88:70:69:43:23:c6:f2:61:9a:0a:48:ee:3c:b7:11:da:40:37:
3d:d1:48:14:8d:2a:e4:4a:6d:b3:10:67:46:65:7e:8a:29:c2:
6f:a8:af:72:c5:58:d7:22:70:18:46:13:b9:d5:84:39:7e:52:
fa:25:49:ec:ea:64:39:71:c0:92:f7:2c:84:61:f4:0d:fd:f6:
ed:72:fe:01:15:4a:c7:e8:38:4b:c2:d1:0d:10:e7:5a:fa:08:
25:cc:bb:77:95:99:a1:96:69:14:4c:0b:5c:8a:14:da:af:8a:
aa:c1:12:08:16:fe:93:c9:4f:37:4e:cd:e9:9f:41:f7:b1:a9:
76:a4:20:ee:89:63:87:96:01:7d:09:be:9f:40:04:b8:4e:d6:
9d:ce:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:12:42 2026 by rpki-client