Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: Vko/1KJtaRZPa9G3F8DrEz/jAopvVivBclDBsO4JjaI=
Subject key identifier: 0D:A2:F6:DB:52:5F:D2:67:A5:E6:C4:EA:9F:6B:16:05:A3:DF:8C:8C
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 019D29297B579C7F225F3554E3701A0E957C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 0EFE
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: /9KIgxZDDDjKz7ORFTVQKQI82iOzd0xTTwWWx0Ex7kM=)
2: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7b:57:9c:7f:22:5f:35:54:e3:70:1a:0e:95:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=0da2f6db525fd267a5e6c4ea9f6b1605a3df8c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:60:08:28:ea:ec:75:6a:f9:27:01:ce:68:
e1:bd:f1:84:a0:e5:c6:cc:21:a5:75:22:dd:40:db:
8d:c5:fd:4c:92:0d:1b:ba:b1:de:e3:d6:76:d8:d4:
51:4c:5c:a6:7f:f4:f7:72:c9:4e:90:09:ab:5c:e2:
47:59:1f:6d:05:3d:42:6c:49:9f:8c:5a:1d:ad:61:
6c:c9:ca:ab:a6:dc:a5:05:5f:51:a7:21:28:6f:5e:
54:21:4b:49:9d:19:15:9b:26:14:a3:65:7e:44:63:
49:d1:70:8b:ee:83:e2:67:21:25:39:fd:b4:fe:66:
21:1d:74:63:2a:61:36:f4:fd:ab:f1:b7:d6:12:e9:
9f:32:9f:2b:26:e5:cd:01:6d:03:ce:db:ad:a7:96:
1e:22:0a:df:33:7b:56:c0:ae:a2:6e:01:65:fa:a3:
69:2a:47:20:3e:e4:e7:27:b9:4e:eb:12:4e:ed:b4:
97:30:ad:7d:40:12:5d:26:08:73:62:5c:d3:2b:a9:
93:06:5a:17:61:ac:33:da:48:5e:1c:da:87:04:df:
d2:e4:e2:8a:b5:0f:92:9e:33:e5:e9:8c:82:30:f3:
58:7b:e1:40:f6:ed:be:8d:03:06:47:7d:7b:03:da:
2f:84:70:31:6e:26:82:54:6e:b7:50:9a:11:0d:39:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A2:F6:DB:52:5F:D2:67:A5:E6:C4:EA:9F:6B:16:05:A3:DF:8C:8C
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:29:36:8f:2b:2f:20:79:1e:6e:9b:49:2d:c9:67:e4:5b:13:
c4:d4:7f:76:09:f2:7d:5f:53:09:46:53:71:72:af:20:73:75:
7b:84:1f:f7:4b:56:2f:78:62:7d:8d:e2:50:aa:ba:5f:c6:79:
88:b4:d2:1f:b8:b0:54:ae:6d:7c:e2:67:8d:ed:2b:9b:29:ee:
e0:e4:ce:c7:e6:29:63:55:61:dc:c2:02:83:b9:89:24:06:e4:
42:bf:62:34:74:33:68:e2:4c:a4:4e:f0:31:e8:98:60:9b:5d:
23:8d:e8:41:9e:c0:88:88:59:8a:85:57:f7:63:f0:1f:e1:22:
d8:29:f3:f6:81:18:c6:b4:02:65:0c:e5:f8:75:21:13:77:3b:
7d:21:60:5d:c4:2c:4e:78:21:7b:5d:47:3a:83:60:97:44:de:
bb:88:f7:4e:cd:91:55:56:20:ed:22:b4:16:59:61:8d:85:8c:
e4:99:7c:e9:99:7d:6b:98:6f:46:0c:07:48:4f:2d:a1:ee:03:
ef:09:07:8b:6a:b4:f3:1e:10:1a:1f:70:18:fc:89:5b:0b:0b:
39:28:b7:50:37:7f:86:dd:4f:c0:ea:d0:af:6e:56:37:1f:41:
2c:43:ef:c3:58:06:0d:d1:05:d2:62:23:b4:33:df:a4:3a:a4:
fd:77:b1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:59 2026 by rpki-client