Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: xLhbwIkvKlMneQZGhahwFL4KrScm4+5ANMSxQKLz5gk=
Subject key identifier: BC:8E:17:D6:1C:98:44:68:07:99:67:CF:39:BE:EC:92:97:19:23:92
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019D258359C2FAD30FB32DA3E072E5540201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 07BC
Signing time: Wed 25 Mar 2026 15:00:58 +0000
Manifest this update: Wed 25 Mar 2026 15:00:58 +0000
Manifest next update: Thu 26 Mar 2026 15:00:58 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: dqkxHLNkmk2HLxFfsQxI5dJS3kFLPOkL72K4XfCC+Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:59:c2:fa:d3:0f:b3:2d:a3:e0:72:e5:54:02:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: Mar 25 15:00:58 2026 GMT
Not After : Mar 26 15:00:58 2026 GMT
Subject: CN=bc8e17d61c984468079967cf39beec9297192392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:42:44:e4:90:7a:2b:86:e4:ee:a8:4c:84:
a9:f9:e4:2e:1e:e1:8e:6a:88:e9:13:be:cb:75:7b:
82:4b:ac:9d:47:e2:da:69:e6:9c:ce:8e:ac:fa:e4:
55:5d:ab:83:b5:f0:44:44:de:8e:97:27:cf:85:79:
2c:9c:7b:6c:87:5f:ab:ec:8c:59:08:59:b7:ba:ba:
f3:e0:26:2c:ac:e3:60:09:fd:08:10:af:d2:74:fa:
d9:c0:fe:a2:2a:eb:d8:46:e6:b7:0f:20:fa:52:ff:
5c:2a:76:23:5c:ef:ed:ca:1f:9d:97:89:36:6b:95:
26:a3:30:55:9e:c6:2c:7a:30:56:59:63:33:f1:e5:
42:78:a0:47:23:17:37:99:65:e8:c6:c5:e5:6c:f2:
e1:7d:71:7f:5a:74:97:35:f4:76:ed:49:cb:78:47:
78:c3:31:a2:6a:05:93:33:67:f8:b6:78:bd:43:ee:
5c:70:f8:76:97:e0:b4:1b:9d:ad:e1:a0:bc:d2:a2:
c3:22:46:af:25:6d:60:a4:ce:ec:8a:9d:bd:6d:6b:
7d:e1:87:82:ee:78:95:1a:7a:d2:ba:e2:ac:dd:fc:
08:7c:e9:f9:c8:01:4f:47:df:e1:53:24:98:d0:e9:
3c:d1:e6:1c:0c:40:13:e1:07:e5:96:e8:2e:04:45:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8E:17:D6:1C:98:44:68:07:99:67:CF:39:BE:EC:92:97:19:23:92
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:1d:5a:a6:69:07:34:83:2a:db:4f:23:cc:59:08:1f:a8:
b8:33:90:8e:73:14:50:7d:71:e7:e5:f9:5d:19:1c:df:65:be:
de:e9:d3:db:7f:5e:57:13:92:38:33:08:e3:e1:f5:99:3c:56:
36:9a:ec:ca:57:47:ee:1b:22:c4:9a:eb:09:e8:c3:ba:40:1f:
2b:f4:e2:42:35:09:e3:53:eb:d0:16:f9:2d:fa:19:83:1f:c0:
b3:6d:ed:7e:6b:d6:73:44:b7:37:8e:ba:6b:2c:86:e8:bb:b5:
ef:57:d8:c6:03:1b:ba:cd:da:17:fa:08:e6:f6:80:07:c2:a2:
4d:12:98:3c:2e:70:f3:1c:af:be:d0:fb:48:16:1a:fa:1d:84:
1b:53:7b:fa:e2:15:18:f6:4f:99:f0:f9:3d:97:94:f1:b6:18:
12:e9:bc:5d:48:b3:29:13:be:5e:d8:8a:41:ef:1f:42:d1:18:
54:12:5f:2c:8d:d6:45:b2:75:c8:7f:be:55:5a:22:7f:a9:56:
66:c5:39:1e:47:08:3f:d8:53:59:eb:b5:44:6f:69:8b:6f:2b:
25:70:57:c5:d8:33:e6:0b:80:77:b7:fd:18:56:30:88:52:29:
67:87:33:f6:34:be:5d:19:3e:0b:fa:8d:61:99:5e:e0:ab:3d:
3e:15:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:50 2026 by rpki-client