Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
File: 3fCc-W5fyHTuk5CXxWUci9hC5q0.mft (raw, json)
Hash identifier: iFzzZooSmWc63OOstSvGRlqpCfChnQXhq1ViClK4/6Y=
Subject key identifier: 30:93:5F:F3:5A:66:32:AA:09:A8:31:E4:17:BD:F8:9E:D6:EE:81:2C
Authority key identifier: DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
Certificate issuer: /CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Certificate serial: 019D273B33BC7F45A29D71CB6316DCA07A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
Manifest number: 05B9
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: 3fCc-W5fyHTuk5CXxWUci9hC5q0.crl (hash: 931DfQpcjTpaw+fRz066PETpcOcQ67byoFfq+6sVikw=)
2: C60VxSBJDSdFCd1k1UlGSCrwJvY.roa (hash: KibtnUkNqe/Q4+yRw8o2hlvC70cIKXb1SxvsmfXdEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:33:bc:7f:45:a2:9d:71:cb:63:16:dc:a0:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf09cf96e5fc874ee939097c5651c8bd842e6ad
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=30935ff35a6632aa09a831e417bdf89ed6ee812c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:0b:73:1c:bf:b5:33:33:82:b8:2a:aa:63:
4e:0a:dc:48:c5:3f:10:01:c8:ca:6a:c9:c2:2b:fb:
3c:10:d1:c6:39:83:cb:bc:dc:2c:d6:13:86:d3:63:
39:5a:ed:2a:64:fc:90:f7:10:e3:33:d1:6a:72:8e:
42:00:8d:6f:b1:61:05:e9:2a:66:24:74:8c:3e:15:
83:9c:8b:f4:ee:d2:27:af:2d:72:80:2a:5c:31:17:
7f:b5:58:f0:ae:95:27:62:1f:62:fe:65:f7:32:6a:
3c:aa:c4:89:4c:5d:88:c1:09:11:b9:b5:b2:41:50:
47:f3:db:47:d5:b3:9e:93:70:f6:4d:c4:2d:8f:34:
44:39:2e:92:db:b6:af:a8:1f:9a:ad:4a:fa:9e:b6:
01:1f:92:90:3f:8f:0d:70:a3:ab:9e:62:a5:aa:bb:
54:8f:ad:6a:d1:94:03:06:60:f0:b3:78:43:44:2e:
a8:07:78:72:6f:a9:17:dc:f5:8d:66:3b:bb:af:16:
d7:11:6d:d8:c6:90:76:5e:91:bb:63:6a:f9:18:26:
d6:6f:2b:16:75:e4:75:76:16:92:1e:8b:64:c1:49:
ae:fa:db:7c:c1:14:73:93:2c:08:21:4a:3a:89:d7:
c4:bd:8f:1b:de:9f:fa:54:2e:3f:29:40:83:5d:22:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:5F:F3:5A:66:32:AA:09:A8:31:E4:17:BD:F8:9E:D6:EE:81:2C
X509v3 Authority Key Identifier:
keyid:DD:F0:9C:F9:6E:5F:C8:74:EE:93:90:97:C5:65:1C:8B:D8:42:E6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fCc-W5fyHTuk5CXxWUci9hC5q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0079e8-c246-4c38-9052-673670e6ef09/1/3fCc-W5fyHTuk5CXxWUci9hC5q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d7:05:d5:57:82:fd:87:7b:5f:8f:50:a4:2c:0e:4f:61:55:
ed:7c:a7:51:e6:39:bb:ad:96:d8:79:5c:fa:35:e4:a4:f2:f5:
be:43:25:c7:74:f2:ff:e4:5e:d7:8d:c1:ca:67:ae:a4:2a:31:
18:cf:e6:83:34:62:59:6b:6a:5a:26:ad:4e:e7:0e:99:d5:71:
1d:26:26:d3:48:56:80:0b:44:45:f9:b0:f3:bf:a4:49:d6:59:
f4:13:57:3c:bf:ca:5f:7a:f1:a3:1f:bd:18:08:36:c0:17:b0:
15:ae:dc:17:e6:1c:af:e6:2c:d1:2b:60:e6:9d:1d:81:bd:be:
f0:0b:55:d8:1d:5a:16:6c:9c:30:4a:4a:73:1c:f1:12:19:57:
ee:f7:d4:8c:67:c7:ba:6c:d1:da:e3:20:4b:9c:71:77:f0:32:
06:e2:73:2f:d9:70:72:ed:34:7f:61:3b:73:a6:a1:0e:2f:f3:
d8:96:ac:1c:32:71:67:f1:79:a5:2c:74:87:fc:e6:77:18:f5:
6b:86:d2:ac:84:62:e4:04:e2:9b:2a:47:44:57:05:1c:22:5e:
a5:70:c1:c1:23:07:5d:c4:9e:29:8b:a7:09:a7:99:fc:90:63:
29:00:fc:e6:89:ea:0b:92:38:a2:e7:ac:34:89:61:5d:df:24:
15:43:2a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:34 2026 by rpki-client